Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: X5M1+sd5QQZbH9V9pGkAsVVyNJjH15gOqw3dHg/cuqY=
Subject key identifier: 01:E9:A8:46:6D:BB:A3:70:23:E2:A5:3F:48:7B:8B:27:A6:32:0E:D6
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019A71B85B234D4EED580F400DCD3A689F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0C41
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: SnZ/UiE5vx5iY3TtpVQgPjHeAHskA8aRu844ec5/t5o=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5b:23:4d:4e:ed:58:0f:40:0d:cd:3a:68:9f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=01e9a8466dbba37023e2a53f487b8b27a6320ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:d9:98:8c:1c:89:84:d9:0e:c2:6b:c5:3a:
bc:66:e3:31:19:73:1f:a2:ac:1a:d0:42:82:c8:5d:
6b:cb:88:3a:2a:e0:99:18:f3:12:03:0d:a0:9b:1f:
58:93:34:3f:a6:8d:45:0d:f5:be:59:0f:52:98:9c:
80:7f:ee:2b:b6:ae:71:ab:a2:0e:d4:b8:d1:b1:7a:
0c:79:8a:d3:c1:2f:35:fc:33:1b:cc:d0:d1:4a:93:
cc:ac:b6:a5:05:a3:39:4a:1d:c6:4a:ee:fe:64:a1:
65:38:23:31:c2:90:00:91:4c:92:20:46:ff:b3:e1:
7b:2c:42:69:af:13:29:67:55:7e:65:69:f8:59:fc:
46:47:87:1f:97:18:89:0d:92:38:2b:31:69:06:d9:
45:47:42:e2:61:3a:ae:86:d8:36:3b:56:bd:cb:f5:
c2:3f:93:4f:0c:c8:88:94:d0:91:32:06:04:f5:bd:
74:82:e0:8b:48:71:bb:61:a1:bb:e3:bd:cc:c0:ae:
e3:7e:c9:55:82:b4:73:bb:9f:bf:71:63:0c:60:d5:
43:12:f7:d3:2b:78:e4:a0:6e:28:e5:6f:a1:25:87:
e0:c2:a0:32:0a:07:a8:c8:81:59:3c:6c:be:9e:d7:
d6:49:18:42:ce:5a:d1:5f:b0:97:3f:2a:cc:c2:c9:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E9:A8:46:6D:BB:A3:70:23:E2:A5:3F:48:7B:8B:27:A6:32:0E:D6
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1a:cd:44:56:38:6e:e8:3d:c7:71:85:b3:65:15:31:cf:13:
e7:74:b1:a5:62:e1:23:57:9c:3d:13:9a:5d:ff:bc:e9:15:12:
25:63:4d:92:26:0a:e5:09:b6:73:a4:61:17:0f:d6:d4:a9:42:
03:b7:4e:38:8d:aa:9a:2f:12:30:71:de:45:0d:2d:b2:d9:a7:
80:df:73:f2:7d:ed:ec:c2:44:9f:89:cb:45:77:45:e8:80:f4:
83:b1:3d:f6:23:7d:66:cf:26:1b:79:ef:a3:f2:10:47:22:32:
c1:a1:34:da:e7:fa:83:f2:83:53:ec:f0:8a:c9:9c:19:e7:53:
34:fd:6b:b1:eb:e7:0d:54:c3:7a:7f:b1:c6:f0:2f:a1:6f:d5:
1a:3d:8e:b3:64:d0:6b:9a:f9:28:9f:00:68:f0:1d:8b:1c:75:
ab:09:30:b3:ea:41:fa:e8:a1:af:be:d5:92:25:35:79:fe:43:
b1:fc:e6:97:ca:6b:88:cf:9f:32:68:bb:57:6d:a0:1a:75:9e:
5c:08:e5:43:d1:6d:d8:93:ef:0f:c6:68:0c:b2:5b:c0:f2:bc:
4d:3f:9c:a1:35:71:0a:17:71:90:6d:0d:2f:cb:30:95:42:c6:
db:64:a3:db:f1:46:81:7c:75:2b:c8:c7:90:c2:8b:4b:af:ab:
39:ff:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:36 2025 by rpki-client