Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: LthllqdwaknVJcFdoRrffLnLfTqlrfEwGhe9i4hG9iQ=
Subject key identifier: B1:51:85:71:8A:05:0D:DF:BF:AE:F3:32:EA:5B:67:6D:04:73:49:B9
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019A722635CF9E2C8E97E485147911049940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 096D
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: w8KVI0XfZUmJ97I4SUEVEhp53vMhga5GfaeWzc8ZGPA=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:35:cf:9e:2c:8e:97:e4:85:14:79:11:04:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=b15185718a050ddfbfaef332ea5b676d047349b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:71:0a:14:d2:67:fe:07:74:f4:ec:fd:e7:
a5:5f:32:e6:2a:ac:aa:c3:6b:ea:b3:64:4d:2e:9c:
7d:9a:26:32:c1:53:06:10:ed:d3:80:34:e8:fd:13:
0b:56:56:06:9b:ea:d4:8a:c3:8a:6c:6f:7b:1d:e0:
5a:aa:a5:bc:05:4f:a1:d5:c7:89:2d:6a:fa:a9:52:
b8:1c:72:ef:26:fc:df:d3:01:2e:c5:09:83:0f:19:
a8:1d:67:f0:69:01:ab:85:60:7f:e2:6a:7a:11:3f:
78:50:18:d1:2a:9a:26:cb:e5:82:33:da:26:cd:3f:
5b:f5:b5:5f:ea:8a:16:e7:4c:d8:d1:e4:04:74:50:
cb:3f:81:70:5b:02:81:92:83:71:4a:85:e4:6b:cf:
06:9a:20:94:b7:5e:20:13:e7:71:0f:f1:a4:6b:3e:
c6:9e:ec:0b:f7:5f:0e:55:4d:d8:ca:3a:0f:2d:c7:
80:24:42:e8:76:cb:45:d2:5b:d6:93:ea:4f:b1:d2:
9a:46:58:97:5e:fc:8d:60:ae:41:49:43:6c:25:52:
45:f3:3a:12:f5:e0:38:82:82:bb:61:ee:51:e8:da:
5a:98:22:fb:c4:49:a6:78:f0:8b:04:1a:dc:37:e5:
97:e7:32:2d:21:d6:97:31:5b:46:e9:d3:ca:fd:d5:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:85:71:8A:05:0D:DF:BF:AE:F3:32:EA:5B:67:6D:04:73:49:B9
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:64:31:b7:18:a8:73:19:46:6f:fa:38:5e:d6:6b:01:be:41:
66:85:a2:7c:27:78:1c:c0:a6:1c:73:ae:3b:72:f2:1f:5f:a2:
ef:f7:a3:85:4f:1c:cf:0d:b7:6f:9a:75:7d:d6:bc:73:e0:74:
6f:3b:5c:63:76:ba:21:e2:0f:1f:17:c1:06:94:ec:b0:74:fb:
f2:b9:5a:0f:9a:60:be:41:58:13:90:53:43:ff:15:1d:1a:f6:
af:2e:51:da:9c:d8:ea:c6:6c:bf:b3:29:12:f7:f6:f9:be:d2:
b6:4c:86:14:fa:a5:63:ff:5f:da:e7:13:5b:b7:b6:9e:57:84:
82:dc:32:39:44:30:bf:75:70:86:77:4a:a4:6a:a2:9c:c0:3e:
d8:04:c5:a7:ce:49:0c:c3:1d:02:3d:cd:50:be:8c:bf:0d:99:
95:71:38:45:3e:cd:6f:86:6f:e7:27:87:10:22:01:5d:19:fd:
25:2c:d8:36:b0:19:63:0e:63:bc:9e:5e:68:92:20:39:8b:f5:
5e:6f:80:5e:f9:bb:83:7f:b2:01:33:25:e8:5f:e5:86:4e:21:
56:20:08:af:2a:b1:3f:c6:a1:cb:28:6b:15:4e:28:6c:92:80:
03:8e:af:ef:59:5d:b3:8f:49:29:a8:d5:ea:a9:2a:62:20:55:
29:5d:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:30 2025 by rpki-client