Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: auyAqETWdGR6Yf6DwquZwMPhCzdeX6wnEFyIgEY0cf4=
Subject key identifier: 7A:C4:19:B4:61:D8:57:40:67:61:2E:B3:10:87:B5:C9:F4:F4:24:78
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 019A725C892DB2EFD0661FBA68314D4D9D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 172C
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: MArQ/u0xYWYTNj3BlSUa/hFYqYdI7fAIsU++buJEpFQ=)
3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:89:2d:b2:ef:d0:66:1f:ba:68:31:4d:4d:9d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=7ac419b461d8574067612eb31087b5c9f4f42478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:49:b6:f0:49:ce:08:4a:b1:7a:3d:3e:b5:
d9:6e:63:19:f3:47:8a:18:cd:c9:1c:3b:15:bb:c1:
1b:ed:23:3c:bf:de:76:fa:69:8b:1a:ee:83:39:7c:
d9:0f:f3:4f:9d:27:15:83:b9:1c:17:c9:14:c1:79:
d9:47:bb:ca:fc:a0:14:01:ab:75:60:5e:b2:c4:cb:
a9:0b:44:cf:c3:68:33:77:58:fc:05:ff:f7:6a:6d:
8d:b0:3c:21:53:3a:cd:d9:53:40:e3:62:b8:7a:f7:
93:2b:3e:c1:c9:39:0c:a9:a3:c2:30:21:a5:9e:a5:
2b:3d:a3:e6:55:3d:fa:ad:75:3d:65:6e:bb:7c:ec:
cc:84:f3:e3:2c:12:63:c1:ef:8c:3c:34:ea:77:55:
81:dd:b7:cb:ad:cc:26:12:53:50:ca:83:a1:9e:c9:
dc:8d:98:d8:a1:46:00:65:e0:b6:c2:49:39:e2:83:
56:09:4e:64:6f:32:20:6e:c9:3f:1f:3c:a4:4a:89:
43:ca:95:b2:68:bb:b5:ba:ba:84:1c:1e:d0:97:31:
e0:fe:3f:d0:69:98:c0:68:f6:dc:ea:99:8b:78:a4:
a7:4d:a9:c8:d5:31:b7:6f:91:11:c9:bf:bc:7e:8f:
5b:d8:b1:fb:ab:e8:64:3e:dd:d4:a8:3e:52:96:d4:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:19:B4:61:D8:57:40:67:61:2E:B3:10:87:B5:C9:F4:F4:24:78
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b4:ac:06:fb:21:5c:9d:72:32:b9:c5:36:91:a8:46:1a:be:
13:20:31:9c:a7:81:3e:a5:dd:47:6a:cf:0f:d8:4b:86:71:3c:
a5:ee:79:d6:34:63:e6:f1:f7:de:9b:ee:58:8e:cf:4a:a5:f4:
ad:51:2b:fe:fe:ef:94:42:b6:d3:5b:c3:8f:b7:90:04:fa:16:
7c:0d:ac:10:76:bc:e6:3c:a6:76:3e:55:2d:f3:d2:33:6b:f7:
f3:b7:21:25:df:2d:d8:f2:d4:05:c6:60:32:b4:2c:bf:34:fd:
47:c3:5a:22:f5:b8:2a:57:20:50:45:44:df:48:d1:61:d1:04:
a2:32:bd:f4:ce:f6:0a:c7:0a:24:79:7b:32:23:26:01:a8:59:
e7:04:eb:f2:7a:3f:c0:d5:19:10:91:84:1c:bb:9a:7c:d2:d8:
d7:a1:61:7c:46:db:a2:74:65:ff:35:93:27:ad:5b:7a:eb:b5:
7d:f0:75:18:0b:50:ba:fd:cd:8a:cd:ca:65:5e:a8:14:76:48:
2a:b0:cb:4e:59:4e:0a:9d:e7:75:cf:d7:00:b2:57:10:af:34:
97:65:63:65:ad:db:a1:83:2b:03:18:75:07:a6:25:8b:9f:60:
a3:fa:1d:0c:72:21:5c:9e:f4:0e:f3:c5:70:d3:cf:a7:5a:5b:
4c:9b:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:10 2025 by rpki-client