Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier: 21xEmV8HI5Xpg8265SPbXA2SjUgJ3dW6oFjMlpBk9MA=
Subject key identifier: 47:FA:05:AA:CD:92:2A:93:AB:87:F9:90:B6:08:1C:E4:19:5F:26:87
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 0199C420112CDD47BDD68516F5D150C06BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number: 04C2
Signing time: Wed 08 Oct 2025 14:00:59 +0000
Manifest this update: Wed 08 Oct 2025 14:00:59 +0000
Manifest next update: Thu 09 Oct 2025 14:00:59 +0000
Files and hashes: 1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: s1XyZQqJG6aOGUspMc+5MoK2yH/znmjrze5v5iX+hPI=)
3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:11:2c:dd:47:bd:d6:85:16:f5:d1:50:c0:6b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Oct 8 14:00:59 2025 GMT
Not After : Oct 9 14:00:59 2025 GMT
Subject: CN=47fa05aacd922a93ab87f990b6081ce4195f2687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:05:1b:14:53:86:63:82:b8:b8:33:5b:ff:
9e:a5:f2:f7:67:99:89:02:98:ac:f5:6b:98:e4:46:
c0:ea:9e:84:61:5e:db:dc:93:20:fb:1e:2b:6b:cf:
05:fe:f2:1a:18:83:6f:a0:f2:78:d1:57:99:b7:95:
fc:1e:e6:80:e8:42:55:e1:c5:fc:a3:1a:ee:d7:d7:
c7:6f:05:bd:b0:91:93:ad:53:5d:fe:be:1b:c3:df:
7c:a3:11:0b:ec:cd:31:74:d9:cf:0d:c0:b0:05:73:
e7:b9:79:d5:76:96:c7:8f:c8:0b:2a:3f:30:08:98:
21:d4:d3:59:cb:7a:0c:e7:fc:0f:d0:c0:db:fa:9f:
dc:52:fe:45:40:c1:37:94:70:c0:29:7d:a3:2e:6f:
55:22:19:d7:9e:52:0d:27:58:d5:38:8c:66:30:4b:
8b:ef:c5:74:4c:43:96:d9:b1:b8:13:20:93:60:5f:
1d:a1:1e:28:da:fc:f5:43:27:75:2e:1a:37:b4:94:
9b:43:f1:92:07:17:3c:ef:0e:d3:e5:eb:7c:3a:6a:
e8:74:63:82:a2:3b:4e:af:3f:ad:95:bc:7c:22:45:
9a:65:74:21:9c:9b:7f:45:47:15:4d:90:a2:a6:2d:
dd:df:b9:46:56:ba:d4:0a:4d:a6:aa:ea:0e:f1:24:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:05:AA:CD:92:2A:93:AB:87:F9:90:B6:08:1C:E4:19:5F:26:87
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:83:c3:64:05:d4:92:d1:4b:80:bb:3f:f6:55:5b:88:3a:9e:
64:bd:e3:50:33:91:d9:25:01:6f:96:d9:03:c4:5c:ab:e1:57:
0f:6e:fd:b2:82:a4:ce:41:d4:c8:4a:40:0a:ce:d2:63:0b:80:
16:24:40:6e:e0:7a:b3:32:6b:7f:4d:84:2e:c6:51:83:5b:f7:
6a:f6:9e:f4:e1:23:62:8e:74:e6:ec:5d:71:ee:7e:7f:06:24:
b4:05:e9:1a:ba:f1:61:14:e3:da:ae:43:bd:86:ef:5c:18:11:
83:97:3a:16:f9:03:3d:22:25:9b:85:a9:af:68:35:c3:38:8e:
93:5d:4e:d2:c8:6c:c3:cf:8f:23:4f:6d:1a:ac:bd:3c:cb:b5:
ed:84:90:62:ce:cc:35:98:95:ab:13:0b:3e:d8:be:bf:c9:a7:
cd:b4:84:80:a4:e4:0a:87:75:be:1a:8c:4a:56:5c:e0:b3:84:
7e:5a:dd:f1:47:d8:f6:6b:ee:a0:07:f1:72:0b:4c:79:7a:98:
88:42:de:18:c7:3f:0d:35:ef:c7:2a:d6:0c:c6:99:c4:92:d0:
05:28:2d:b9:c9:16:98:d4:93:64:c4:12:68:ac:88:92:2f:4b:
b8:7e:a4:5c:00:19:82:78:30:00:aa:a1:e8:1d:07:f4:d5:7d:
c1:24:3a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEIBEs3Ue91oUW9dFQwGv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWRkOGVhYWViM2E0NzhkN2U1ZGYzZTdlZTFjMzIzZjE2
NmJmMjgwHhcNMjUxMDA4MTQwMDU5WhcNMjUxMDA5MTQwMDU5WjAzMTEwLwYDVQQD
Eyg0N2ZhMDVhYWNkOTIyYTkzYWI4N2Y5OTBiNjA4MWNlNDE5NWYyNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbkFGxRThmOCuLgzW/+epfL3Z5mJ
Apis9WuY5EbA6p6EYV7b3JMg+x4ra88F/vIaGINvoPJ40VeZt5X8HuaA6EJV4cX8
oxru19fHbwW9sJGTrVNd/r4bw998oxEL7M0xdNnPDcCwBXPnuXnVdpbHj8gLKj8w
CJgh1NNZy3oM5/wP0MDb+p/cUv5FQME3lHDAKX2jLm9VIhnXnlINJ1jVOIxmMEuL
78V0TEOW2bG4EyCTYF8doR4o2vz1Qyd1Lho3tJSbQ/GSBxc87w7T5et8OmrodGOC
ojtOrz+tlbx8IkWaZXQhnJt/RUcVTZCipi3d37lGVrrUCk2mquoO8SR8qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf6BarNkiqTq4f5kLYIHOQZXyaHMB8GA1UdIwQY
MBaAFIWt2Oqus6R41+XfPn7hwyPxZr8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODIt
MWI3ZWMzOGU5ZjQ0LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODItMWI3ZWMzOGU5ZjQ0
LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIPDZAXU
ktFLgLs/9lVbiDqeZL3jUDOR2SUBb5bZA8Rcq+FXD279soKkzkHUyEpACs7SYwuA
FiRAbuB6szJrf02ELsZRg1v3avae9OEjYo505uxdce5+fwYktAXpGrrxYRTj2q5D
vYbvXBgRg5c6FvkDPSIlm4Wpr2g1wziOk11O0shsw8+PI09tGqy9PMu17YSQYs7M
NZiVqxMLPti+v8mnzbSEgKTkCod1vhqMSlZc4LOEflrd8UfY9mvuoAfxcgtMeXqY
iELeGMc/DTXvxyrWDMaZxJLQBSgtuckWmNSTZMQSaKyIki9LuH6kXAAZgngwAKqh
6B0H9NV9wSQ6kA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:56 2025 by rpki-client