Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: w8ATi22H8ah5LFOdIQu2o17nAxMz8BJ8lvK4YsKrrtk=
Subject key identifier: 58:FC:3C:03:FC:9A:78:4A:98:D8:C8:5A:8D:DD:A4:28:BA:72:4D:19
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019A0D140FBA2984705ABAF5582ADF9DC187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 1600
Signing time: Wed 22 Oct 2025 18:00:09 +0000
Manifest this update: Wed 22 Oct 2025 18:00:09 +0000
Manifest next update: Thu 23 Oct 2025 18:00:09 +0000
Files and hashes: 1: BdEPl2Neefl4GoaE_iupoW4vob4.roa (hash: iJi1nUHFyZuED4JVs82b7kN1M64TmmDeD6kSjvIrHS0=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: ZbuCNrlU5jsInyxkmApwXyY3Q+HMADE4UjIo5AqqIRM=)
3: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:14:0f:ba:29:84:70:5a:ba:f5:58:2a:df:9d:c1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Oct 22 18:00:09 2025 GMT
Not After : Oct 23 18:00:09 2025 GMT
Subject: CN=58fc3c03fc9a784a98d8c85a8ddda428ba724d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:46:e5:9a:35:49:e7:db:b5:4e:7b:53:65:
37:67:c0:76:d0:44:fd:d8:af:0e:ed:14:eb:a1:8d:
cc:8d:00:a4:60:74:1b:6f:df:fc:72:16:1c:12:4c:
95:2b:1b:4e:aa:77:8b:9e:1a:14:c0:8d:1e:5a:93:
f6:c9:e0:c1:01:6d:77:08:ea:c1:78:11:33:e6:e0:
62:2b:a5:a0:93:36:a9:03:6b:13:f9:e7:cd:ab:2b:
20:80:28:0a:a3:af:13:78:bd:78:85:54:cb:61:f8:
f3:c7:4e:6d:15:dd:1e:44:87:b2:1e:f3:bb:f8:94:
59:f3:68:0a:ba:7b:ab:95:b7:a0:bc:40:2c:dc:87:
72:d2:03:7e:39:e5:b4:6f:6e:fa:e2:b3:1e:53:6b:
3e:c0:0f:5c:1b:49:10:6b:0f:ce:b4:91:ed:fb:35:
82:e6:e2:8c:8d:0f:98:91:eb:17:ff:86:1a:87:b7:
26:6f:cc:76:e2:fd:f3:96:e9:4f:f6:11:6e:ae:6c:
83:07:11:08:8e:08:88:2e:a5:17:19:ba:a0:db:1e:
e9:da:9a:74:31:bf:39:4d:38:b2:00:63:f7:79:3a:
c4:2e:1a:8b:c4:ed:f6:a3:2d:01:c5:90:6c:58:ba:
17:a6:50:ab:45:17:3e:4a:49:04:6d:cc:97:0b:56:
56:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:3C:03:FC:9A:78:4A:98:D8:C8:5A:8D:DD:A4:28:BA:72:4D:19
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:24:92:77:e9:b3:eb:71:f4:bc:3d:85:cb:a3:3a:79:f6:da:
79:4c:75:ed:cf:7e:31:b6:7a:0b:8d:61:39:dc:88:10:91:b4:
9a:3f:ed:15:de:04:40:ce:a1:aa:e6:b3:bb:dd:a0:81:02:f3:
5a:76:98:b2:c8:a0:51:21:99:13:2b:2c:df:db:bb:eb:6c:51:
22:0f:a7:47:04:c7:14:05:1a:69:23:3d:ca:04:7d:06:1d:47:
36:71:1d:4c:0e:71:aa:78:ab:35:a5:c8:b1:c5:a1:09:79:93:
04:a9:ab:9e:08:15:cf:c8:b3:d5:47:5b:36:9b:26:6e:18:dd:
c4:39:67:04:a8:84:01:b9:4e:00:7d:d3:e8:27:1c:67:c8:55:
3c:1f:2b:b6:30:2c:79:1c:b1:8b:65:c0:0c:ed:d2:d2:d0:56:
c0:37:86:fc:af:2e:a1:96:7e:30:41:24:33:ee:34:65:78:a0:
98:e4:a9:0f:98:03:af:bf:71:23:3b:b5:a3:74:0e:17:b4:a2:
27:b2:98:37:ff:92:c5:b0:21:ea:e7:b6:6e:5b:3a:f0:d3:2a:
df:8b:ca:a3:2d:93:fc:31:3f:c9:8f:fc:f2:eb:cf:95:81:99:
4f:9a:3d:33:af:15:67:d0:7e:7b:ba:ca:2c:4f:87:2c:be:97:
24:a1:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:08:35 2025 by rpki-client