Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: YhtHb0DmvS21i03I0vggzyTQVW8DShngVYDrdsZzz/U=
Subject key identifier: DD:4C:83:94:9C:FF:A4:DF:C1:33:86:C6:72:CF:5F:DC:E4:64:F3:34
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 0199C7C5AF0B6D55EF4136979A626F59A1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0EE4
Signing time: Thu 09 Oct 2025 07:00:45 +0000
Manifest this update: Thu 09 Oct 2025 07:00:45 +0000
Manifest next update: Fri 10 Oct 2025 07:00:45 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: QSv8kdgoBzC+kEdxxsowTBj6opvYOLU43GDvTytiKbI=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:c5:af:0b:6d:55:ef:41:36:97:9a:62:6f:59:a1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Oct 9 07:00:45 2025 GMT
Not After : Oct 10 07:00:45 2025 GMT
Subject: CN=dd4c83949cffa4dfc13386c672cf5fdce464f334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:5f:cf:1d:ac:bc:e4:52:1f:65:8f:5a:dd:
05:42:67:60:b6:93:6d:a4:32:44:10:10:e3:77:48:
cd:e2:6e:83:42:26:28:62:b5:90:5b:ea:b3:fe:8a:
44:5a:9e:02:10:6c:99:1a:c2:73:f8:3b:93:ee:b7:
cf:3d:19:f9:80:a8:d5:65:46:9d:94:e0:2c:32:2d:
eb:64:45:ba:a1:9c:ae:ef:43:22:34:2d:e8:b1:b9:
b1:55:c9:5e:cb:21:d1:0c:af:da:f0:f4:da:00:28:
ed:92:56:14:7e:60:48:0c:c1:9b:d7:18:3f:31:06:
80:3c:6f:1f:a3:a7:c2:3a:96:e9:91:a7:fd:01:bf:
0e:b1:86:58:ef:22:ed:d7:b6:1f:e2:17:c5:65:79:
aa:89:97:e0:1f:f3:87:8c:e7:a0:3b:a2:9f:5c:6d:
72:d1:60:fc:76:73:c9:de:9b:14:0a:50:79:da:d6:
b2:60:8c:b0:50:33:87:fa:1d:8f:68:e7:9d:90:c4:
db:83:81:46:47:46:6b:8c:4e:1c:94:98:66:5b:da:
bc:a4:07:c1:b6:39:be:e0:36:cf:6a:b3:93:c1:53:
ee:07:6a:7f:9f:bd:d1:aa:6d:85:0e:10:b4:9c:2b:
18:94:12:da:04:2e:2a:2c:ec:c7:fa:7d:fc:6f:0c:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:83:94:9C:FF:A4:DF:C1:33:86:C6:72:CF:5F:DC:E4:64:F3:34
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a9:7d:72:88:89:27:86:25:16:da:51:4f:77:ca:6f:d1:ef:
68:b6:b7:ae:2e:fb:35:56:5f:76:6b:35:9b:dd:2c:46:90:86:
8f:ca:46:33:91:c2:ab:0c:fc:30:83:42:9f:4c:00:7e:2e:a1:
d2:b6:d1:87:7d:6d:a0:49:6a:98:ef:98:10:71:67:ec:34:d7:
c4:d6:21:f5:49:cf:a6:bb:01:5f:d7:13:f4:d0:4d:42:3c:b7:
5f:a3:0e:8c:fc:af:db:fb:5f:30:22:64:97:bd:63:ff:49:53:
7a:86:28:96:87:f7:f4:68:8b:b0:9a:56:56:b8:57:3f:14:2a:
11:e6:13:5c:5d:37:13:62:09:6e:94:b5:64:2e:52:70:65:73:
75:59:b1:aa:88:3e:98:dd:86:05:5a:ab:45:fb:69:ef:c8:4d:
4a:ac:5e:a2:d5:64:64:54:62:86:4f:da:01:37:63:95:4c:c6:
ed:85:1a:84:f2:9e:f1:31:37:b7:01:de:f5:38:0a:36:b3:13:
80:74:18:99:a1:ae:de:45:e2:80:61:21:a8:f1:66:32:87:5e:
c6:ea:09:e9:f1:7c:0d:a9:ea:db:f2:74:ee:3b:71:93:5c:b8:
ba:7a:75:20:4a:2d:be:9b:e6:3c:83:67:d5:44:9f:e5:38:bf:
eb:48:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:49:14 2025 by rpki-client