Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: 9PK4Vhhjrt90ynbe6iQZkbP9KRrXTvoq9lnFItq3kl8=
Subject key identifier: C7:4A:DE:06:11:9E:06:97:CD:B2:BB:70:17:F6:F9:4F:77:3E:E7:E6
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 019A4EF596D7B715F148EB65FDEEF8A4A4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: z7UKJvgBscVVzTzorpZq8S27hZsOjrM6CtUUPiKeCaY=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:96:d7:b7:15:f1:48:eb:65:fd:ee:f8:a4:a4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=c74ade06119e0697cdb2bb7017f6f94f773ee7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:7f:29:84:d7:cb:ef:47:d6:7e:f6:57:96:
f9:78:8e:d3:81:62:75:c5:0d:99:f3:38:53:ab:0f:
c0:98:82:a3:ff:58:9d:2d:be:3f:48:8c:3f:91:27:
6b:48:d3:6e:5d:0f:c5:92:db:e2:4d:e7:7e:36:76:
74:41:17:09:a9:d8:48:24:6c:1f:f8:7b:5d:82:ca:
54:e9:25:30:5c:9d:2c:b5:42:63:1a:91:c0:7c:08:
ba:ba:ec:9a:45:79:8e:a9:d2:1c:74:43:15:5c:d5:
fa:e6:3d:f0:fb:7a:be:2b:28:76:40:67:3b:a8:ff:
67:c5:37:53:e2:1f:20:8d:fe:44:6c:e8:82:90:71:
4d:19:0d:27:ab:ee:70:64:f0:1e:12:ee:31:2d:ed:
9e:8c:c5:41:e4:77:99:ce:cc:bf:52:79:a1:d6:8e:
7f:09:5f:9b:3c:82:0c:2e:ce:09:f6:82:df:ac:ea:
63:67:1e:fa:3c:c2:5f:2d:b8:da:b5:ad:55:51:6a:
83:fd:52:b0:13:ae:8c:7a:96:e3:c2:bc:be:d5:27:
c4:4c:7f:6e:1f:ab:4c:aa:48:7a:53:3d:be:5d:93:
c7:2b:73:6c:21:07:d0:62:15:fe:b3:c3:35:45:1c:
62:d3:03:8f:b4:1f:67:e9:65:a7:15:ec:bc:42:a3:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:DE:06:11:9E:06:97:CD:B2:BB:70:17:F6:F9:4F:77:3E:E7:E6
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ab:2a:9a:07:cd:cf:59:19:4a:2d:96:4b:ae:53:fc:f3:fa:
62:53:ef:fc:1e:b3:57:44:a6:6c:c5:4f:85:ee:f2:bf:ac:90:
fd:fb:8e:d7:60:ec:85:1f:b1:62:19:a4:f4:fe:2b:ee:52:e2:
58:1c:f9:d4:99:3d:f1:53:db:73:b7:13:0e:80:59:16:e6:f1:
f8:06:aa:4f:33:68:65:c2:e0:05:ca:fd:6d:2c:f1:3f:bb:e0:
06:4c:eb:38:ba:02:82:0a:6e:16:07:bf:5e:0f:45:3d:57:aa:
97:bc:88:fd:c0:c7:f9:97:6b:a7:2c:de:80:fc:78:43:78:f9:
56:cd:ec:24:53:c8:ec:06:e3:e6:c2:81:55:5d:ef:f3:11:d5:
cf:41:97:82:f1:1b:80:c4:4d:90:ca:64:f7:5f:a4:db:b2:da:
cb:75:bf:30:8f:73:89:fb:ea:22:13:e0:89:15:87:fa:b7:fc:
f1:51:39:9c:10:7b:bd:6b:6c:73:2e:4b:3e:9d:00:0c:30:41:
81:85:97:94:69:2e:b2:09:d4:8d:13:95:be:56:eb:e8:10:da:
fd:01:98:ff:66:71:59:01:7e:70:d5:f8:ce:0b:1e:2e:a5:9a:
82:f7:76:05:ff:ae:c3:ad:e7:04:3d:74:c9:f6:42:2a:68:92:
c5:4e:da:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ZbXtxXxSOtl/e74pKSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2
Y2YwMDMwHhcNMjUxMTA0MTMwMTQ5WhcNMjUxMTA1MTMwMTQ5WjAzMTEwLwYDVQQD
EyhjNzRhZGUwNjExOWUwNjk3Y2RiMmJiNzAxN2Y2Zjk0Zjc3M2VlN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXJ/KYTXy+9H1n72V5b5eI7TgWJ1
xQ2Z8zhTqw/AmIKj/1idLb4/SIw/kSdrSNNuXQ/FktviTed+NnZ0QRcJqdhIJGwf
+HtdgspU6SUwXJ0stUJjGpHAfAi6uuyaRXmOqdIcdEMVXNX65j3w+3q+Kyh2QGc7
qP9nxTdT4h8gjf5EbOiCkHFNGQ0nq+5wZPAeEu4xLe2ejMVB5HeZzsy/Unmh1o5/
CV+bPIIMLs4J9oLfrOpjZx76PMJfLbjata1VUWqD/VKwE66Mepbjwry+1SfETH9u
H6tMqkh6Uz2+XZPHK3NsIQfQYhX+s8M1RRxi0wOPtB9n6WWnFey8QqO3SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdK3gYRngaXzbK7cBf2+U93PufmMB8GA1UdIwQY
MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt
NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh
LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqsqmgfN
z1kZSi2WS65T/PP6YlPv/B6zV0SmbMVPhe7yv6yQ/fuO12DshR+xYhmk9P4r7lLi
WBz51Jk98VPbc7cTDoBZFubx+AaqTzNoZcLgBcr9bSzxP7vgBkzrOLoCggpuFge/
Xg9FPVeql7yI/cDH+ZdrpyzegPx4Q3j5Vs3sJFPI7Abj5sKBVV3v8xHVz0GXgvEb
gMRNkMpk91+k27Lay3W/MI9zifvqIhPgiRWH+rf88VE5nBB7vWtscy5LPp0ADDBB
gYWXlGkusgnUjROVvlbr6BDa/QGY/2ZxWQF+cNX4zgseLqWagvd2Bf+uw63nBD10
yfZCKmiSxU7arA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:05 2025 by rpki-client