Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: HiArRAddvq1lxeChSLmy+stgDuUSaGgiSokdglztRFU=
Subject key identifier: CB:61:7C:49:61:D1:E7:29:AF:CE:48:4A:85:95:41:FC:B2:1E:0F:32
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019A1D9A5BE397734946BAAC139C0A40FB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 23:00:46 +0000
Manifest this update: Sat 25 Oct 2025 23:00:46 +0000
Manifest next update: Sun 26 Oct 2025 23:00:46 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: A+hA8kRb8vTOb8SjWw5g+3W11zYAqTlLF+gc8HBYLK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:5b:e3:97:73:49:46:ba:ac:13:9c:0a:40:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Oct 25 23:00:46 2025 GMT
Not After : Oct 26 23:00:46 2025 GMT
Subject: CN=cb617c4961d1e729afce484a859541fcb21e0f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:49:34:64:f9:fa:ef:14:2e:d5:71:02:47:
29:9e:3f:69:4a:3f:d0:07:84:f8:5f:06:58:39:2c:
44:d0:52:6e:15:3b:1b:e7:85:8d:18:50:b7:02:be:
63:74:39:83:ec:eb:c1:b4:7b:dd:19:a9:2f:78:e7:
88:bf:98:47:af:18:a0:bd:34:cd:2d:53:ea:26:cf:
6e:54:ce:5d:67:84:f9:e5:66:d9:96:94:bb:b2:50:
96:76:e2:7e:f2:9d:b1:79:d6:47:bd:9e:32:09:53:
d1:8f:4e:24:3d:51:fe:17:48:73:97:90:8b:13:aa:
25:c5:ce:5f:80:84:3a:fe:8f:40:24:d7:4c:f7:21:
db:bf:11:84:de:d0:64:48:da:eb:fe:13:eb:bb:c7:
c1:f2:d5:a2:5d:a7:86:04:7e:50:e4:49:14:f4:8f:
3a:62:55:8d:19:37:cc:22:dd:b5:96:7b:66:3b:99:
f9:99:38:37:58:22:d6:13:15:aa:1c:43:d2:86:05:
0d:8b:6b:c9:2b:b3:5e:cc:f4:70:94:73:29:4d:9d:
18:79:a6:a1:b3:12:18:8f:0e:39:87:d2:ac:4b:ff:
e8:da:66:f0:8c:c3:6e:8c:ce:6e:b8:82:b9:cb:fe:
e3:22:01:d1:13:82:58:43:ea:5d:71:0e:f3:9f:e1:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:7C:49:61:D1:E7:29:AF:CE:48:4A:85:95:41:FC:B2:1E:0F:32
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:33:6b:37:d5:04:cf:8b:19:54:0e:ee:e2:7a:34:a1:41:60:
ea:dc:96:eb:04:d8:00:0e:ad:70:a9:bb:c4:15:83:4f:c6:9f:
e2:c2:1c:1e:96:83:d9:5b:55:74:19:da:2d:3f:85:6f:df:88:
74:e2:89:2f:a1:54:43:b8:34:c0:87:28:85:3a:83:15:27:a6:
f0:61:40:b4:ef:5d:3e:d3:05:a4:43:56:c8:53:2e:1d:a5:67:
de:cb:f2:89:31:57:4e:83:51:1a:aa:f7:c4:7d:7e:c8:3e:8c:
23:40:51:2f:a8:63:02:c3:05:4d:c8:19:a9:3e:93:3a:b9:d6:
cb:28:a5:d8:00:1b:f4:cd:a0:12:65:a2:c5:43:b2:40:72:44:
e5:7e:5e:50:c0:e6:2c:7b:9d:24:f6:6a:f9:63:43:19:ef:b5:
4e:fd:b2:2d:d8:45:fd:a7:60:27:80:a2:56:7d:99:32:26:52:
1e:7b:c7:6e:b9:79:d8:62:93:8c:21:88:2e:d5:b0:f0:36:05:
c9:c5:13:cc:de:33:e5:69:02:f6:f7:6b:81:82:88:7c:9d:0f:
26:bd:03:f3:38:77:5c:1e:97:9f:86:c9:b0:1d:31:a7:87:d5:
dc:1f:09:20:d4:9f:4d:22:49:7a:c1:bb:f8:e9:64:97:97:2e:
89:dd:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:00:50 2025 by rpki-client