Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: 4wo9JW40ze4kiDulk3h5KxVIExMAoVOrJWvGtxqwWwU=
Subject key identifier: 7D:98:AA:1C:87:58:45:13:50:D3:87:D3:CD:ED:12:BF:25:9E:3B:14
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019A0F3A9D5AABF826D56A8F7A94B82AC09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 12AE
Signing time: Thu 23 Oct 2025 04:01:30 +0000
Manifest this update: Thu 23 Oct 2025 04:01:30 +0000
Manifest next update: Fri 24 Oct 2025 04:01:30 +0000
Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: keaSiaZpWDtX5f6k7WP0vcT9DHtHSCi/cC1zgYP3g/A=)
2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=)
3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=)
4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:9d:5a:ab:f8:26:d5:6a:8f:7a:94:b8:2a:c0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Oct 23 04:01:30 2025 GMT
Not After : Oct 24 04:01:30 2025 GMT
Subject: CN=7d98aa1c8758451350d387d3cded12bf259e3b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:24:4d:ab:05:9c:78:0f:bd:b6:12:36:ab:d2:
ad:17:22:bd:d1:bd:00:fe:77:d5:07:d6:23:c5:18:
71:c8:72:db:60:21:d9:28:f2:78:83:b3:70:20:83:
42:ce:43:cc:bb:a6:d5:1c:54:26:f8:80:e7:6b:39:
39:ae:a7:64:55:bb:64:c9:1a:1f:ea:91:bc:79:74:
ce:a9:c3:60:22:1f:6a:19:45:7a:be:97:c8:24:2f:
ad:9e:44:b6:4b:bf:88:49:c2:56:4c:c3:6c:84:e0:
59:76:ae:60:40:1f:82:23:d8:6b:d9:a8:fb:8f:c6:
26:d0:9f:16:b9:36:34:51:3f:75:83:68:1b:04:9b:
82:66:8a:c1:7a:42:85:be:98:e8:ee:a0:cc:27:17:
17:c2:d4:12:81:50:f6:d2:46:07:bf:99:c1:52:fc:
a1:d4:46:31:78:9a:9b:03:3f:37:7e:31:d3:15:22:
63:af:f2:1d:88:dd:c0:44:12:cb:a1:05:bd:9e:18:
f6:e4:eb:d5:8f:88:bc:57:3b:1d:08:77:59:ff:45:
51:5a:06:36:f3:50:3c:80:5e:ed:46:09:bb:d9:cc:
5a:22:00:4d:24:20:4e:87:6b:b5:d4:6a:be:36:3b:
42:49:d6:b8:27:6d:c6:5c:06:d7:1a:80:9d:74:ca:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:98:AA:1C:87:58:45:13:50:D3:87:D3:CD:ED:12:BF:25:9E:3B:14
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2c:c5:29:17:83:69:3c:20:ab:f9:99:e3:ec:12:cc:74:7a:
a4:9d:b0:fd:ed:1c:b2:94:cc:c0:06:eb:47:dd:21:d2:0e:6e:
00:fe:b6:0d:b8:91:49:2f:9c:47:a3:ee:df:b6:24:5e:7e:1c:
f8:2e:78:e6:88:77:9d:65:4c:24:f2:88:9a:6c:45:76:7a:7e:
1b:bf:ba:6c:bd:d0:47:d4:4b:48:80:2b:8d:52:f5:89:52:31:
97:e1:57:fa:fd:ad:e4:3e:f7:57:6b:15:d3:5c:94:9a:df:9f:
3f:16:01:ab:35:70:c3:44:45:aa:3e:4f:aa:8a:9f:ba:e6:ef:
db:7d:9a:28:2c:58:f4:20:25:23:ea:59:e9:3d:83:51:94:cb:
93:7b:1c:15:42:1c:bc:bc:c6:8c:bd:0f:1f:92:18:ec:5c:2c:
3d:96:5d:29:c0:ef:7e:c6:42:0c:b1:8b:fa:f2:ca:8b:4e:a2:
02:dd:92:cc:d7:3a:56:34:de:59:1a:ed:dd:dd:c3:3a:51:90:
9d:4a:06:f1:f4:75:fc:83:db:2d:16:bf:b6:04:b0:50:39:27:
cc:4f:60:89:f2:33:85:c2:90:0d:9a:c9:54:61:25:4f:c8:7d:
6a:2f:09:06:37:b2:f9:86:e3:58:12:9a:e8:a9:6f:0b:98:14:
67:ed:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:21:02 2025 by rpki-client