Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: TeSdGFnmMqiE4nX37gCalliVVJFAJRbSUZiQgkI7jr4=
Subject key identifier: 07:4D:7F:38:0D:BE:4B:97:74:D8:ED:FE:0E:46:E7:D7:85:12:77:45
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 019873E3A8D701F693C90F395A298F1AAF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:36 +0000
Manifest this update: Mon 04 Aug 2025 07:02:36 +0000
Manifest next update: Tue 05 Aug 2025 07:02:36 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: K99kkMROYiTsvymLD6NWznhW5SZcSM15TF7ahsfAQe4=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a8:d7:01:f6:93:c9:0f:39:5a:29:8f:1a:af:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Aug 4 07:02:36 2025 GMT
Not After : Aug 5 07:02:36 2025 GMT
Subject: CN=074d7f380dbe4b9774d8edfe0e46e7d785127745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:99:ca:52:d3:98:35:26:5f:4d:c4:07:72:
c3:b3:f5:27:31:b4:46:0e:fd:4c:c0:ec:f0:10:7a:
b2:29:eb:5e:a6:95:9c:1c:b7:9d:d8:8a:a4:32:d4:
f6:a0:07:63:dd:ba:44:cc:3c:ac:99:e5:91:4e:7a:
a5:af:6c:cf:50:4a:a7:1f:f2:b2:d8:5f:04:1f:af:
7c:3e:64:4e:65:92:89:88:34:49:d1:f2:fb:a1:68:
b5:99:07:77:46:f6:2c:38:d2:35:b4:13:a8:5a:43:
8c:47:c1:e0:17:ee:95:14:65:37:62:bc:d0:34:b7:
9d:58:77:42:a1:4b:b3:f0:23:9e:d5:db:47:e5:54:
6f:ae:0a:f6:fa:6e:aa:91:bf:c0:cc:60:fe:6e:e6:
5c:91:b3:ce:51:99:e5:97:d4:2e:6e:20:70:b2:5a:
6e:bf:92:eb:27:24:3c:c2:a4:24:c6:35:72:a7:ae:
59:77:9d:36:94:51:5e:72:a8:29:52:fc:84:67:f6:
b5:46:02:cc:12:be:01:c3:ef:b3:db:08:93:36:2d:
98:27:d6:0b:93:46:bf:6c:ee:96:ca:80:89:ff:c1:
af:75:74:e0:21:3c:3b:83:dc:6e:a2:3c:a0:02:77:
5e:d8:0a:d1:b3:47:54:b5:7e:e0:4b:2d:7f:7e:2f:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:7F:38:0D:BE:4B:97:74:D8:ED:FE:0E:46:E7:D7:85:12:77:45
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d1:f6:af:9e:2f:02:15:9f:90:7c:63:1f:e5:c3:8e:9a:f3:
e0:f9:12:45:07:66:57:e2:c3:9b:de:b7:4f:39:d7:ea:10:22:
7e:87:9a:3a:87:49:f4:a6:ab:6f:f1:e2:9b:7a:95:2c:5f:e6:
32:83:a6:b0:b6:16:a4:f0:d9:0f:ec:0e:a4:6c:b6:b9:ef:fd:
2e:b4:27:fc:44:b4:d7:ad:aa:d3:c5:3b:51:15:77:70:d2:de:
38:d9:1d:dd:9a:8f:f9:ea:90:0d:d1:bd:eb:49:03:81:ac:7a:
e1:c6:6a:0a:30:c0:29:e7:89:fa:cb:a4:56:5d:79:44:03:4c:
d1:75:80:4f:45:2a:e3:c7:cc:08:ba:ba:f9:ee:27:2f:33:14:
9c:c3:9e:3f:4f:85:b2:99:51:97:d9:a1:bb:09:d4:1e:0e:42:
ad:ae:3b:f2:d7:d5:b8:e0:4d:8e:2b:21:49:6d:01:74:b0:6b:
01:bb:6b:1b:c8:17:73:ec:36:e4:2a:a4:77:93:5a:bc:e3:2e:
b7:72:f0:f5:62:76:66:ac:66:81:9c:65:47:fb:bf:a1:ba:b0:
cf:46:cf:bf:8c:0c:8a:0b:48:ca:69:65:af:5e:cd:59:20:8a:
b5:36:e5:78:30:41:51:8c:64:5e:1a:c5:6b:07:f7:19:f7:11:
9c:f6:22:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz46jXAfaTyQ85WimPGq9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2
Y2YwMDMwHhcNMjUwODA0MDcwMjM2WhcNMjUwODA1MDcwMjM2WjAzMTEwLwYDVQQD
EygwNzRkN2YzODBkYmU0Yjk3NzRkOGVkZmUwZTQ2ZTdkNzg1MTI3NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08CZylLTmDUmX03EB3LDs/UnMbRG
Dv1MwOzwEHqyKeteppWcHLed2IqkMtT2oAdj3bpEzDysmeWRTnqlr2zPUEqnH/Ky
2F8EH698PmROZZKJiDRJ0fL7oWi1mQd3RvYsONI1tBOoWkOMR8HgF+6VFGU3YrzQ
NLedWHdCoUuz8COe1dtH5VRvrgr2+m6qkb/AzGD+buZckbPOUZnll9QubiBwslpu
v5LrJyQ8wqQkxjVyp65Zd502lFFecqgpUvyEZ/a1RgLMEr4Bw++z2wiTNi2YJ9YL
k0a/bO6WyoCJ/8GvdXTgITw7g9xuojygAnde2ArRs0dUtX7gSy1/fi9IsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdNfzgNvkuXdNjt/g5G59eFEndFMB8GA1UdIwQY
MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt
NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh
LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNH2r54v
AhWfkHxjH+XDjprz4PkSRQdmV+LDm963TznX6hAifoeaOodJ9Karb/Him3qVLF/m
MoOmsLYWpPDZD+wOpGy2ue/9LrQn/ES0162q08U7URV3cNLeONkd3ZqP+eqQDdG9
60kDgax64cZqCjDAKeeJ+sukVl15RANM0XWAT0Uq48fMCLq6+e4nLzMUnMOeP0+F
splRl9mhuwnUHg5Cra478tfVuOBNjishSW0BdLBrAbtrG8gXc+w25Cqkd5NavOMu
t3Lw9WJ2ZqxmgZxlR/u/obqwz0bPv4wMigtIymllr17NWSCKtTbleDBBUYxkXhrF
awf3GfcRnPYiMw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:05 2025 by rpki-client