Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
File: HAaGYxPWaK_oeYb65f95QfkoBps.mft (raw, json)
Hash identifier: O6d5I1dh8MSU9dVz+dk4NIaXhssxNECW2ShbivGo3Dw=
Subject key identifier: D5:9C:D2:5C:ED:01:82:89:FD:3C:CC:18:D5:B3:1D:5A:98:7A:7D:B3
Authority key identifier: 1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
Certificate issuer: /CN=1c06866313d668afe87986fae5ff7941f928069b
Certificate serial: 019A7225A49422CC6C9D18502FE37E1D8318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: HAaGYxPWaK_oeYb65f95QfkoBps.crl (hash: qSrxg5KhqPL4BZ9IQe5jS9XxUONS7UZmT6qCj/KcvRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a4:94:22:cc:6c:9d:18:50:2f:e3:7e:1d:83:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06866313d668afe87986fae5ff7941f928069b
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=d59cd25ced018289fd3ccc18d5b31d5a987a7db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:56:80:81:48:7c:19:15:a2:6d:7e:8e:61:c5:
14:95:31:65:b9:e4:38:22:45:d4:bf:5c:e0:32:89:
b4:04:cd:b0:b4:6b:1c:c9:d7:9b:89:27:eb:d3:02:
8a:3f:57:3f:22:b1:4b:0c:bd:a5:08:2a:51:8b:da:
44:f0:d6:7c:a9:0c:1d:8d:ba:b7:b2:7e:e9:3e:08:
91:82:27:03:3f:d3:da:69:90:63:44:d2:4f:6d:16:
71:93:3e:99:60:7d:96:1b:f8:42:ed:aa:5b:42:79:
5b:76:76:bf:da:05:0a:a9:81:c9:19:34:d2:ad:7f:
21:cf:f0:5b:6e:de:17:3d:07:61:98:25:63:02:64:
7b:94:85:27:ab:8b:78:25:e8:31:a1:4b:10:65:1a:
94:8f:d0:0a:0d:05:91:4e:5d:9a:6c:a2:8f:5c:12:
4c:d4:32:c7:ce:5f:a6:b5:b5:ce:10:ce:c4:f6:46:
da:71:68:16:8b:d7:6c:74:f7:b7:6e:e5:6e:3f:85:
be:59:18:84:9b:6e:43:0b:49:c1:8b:26:3d:ae:b2:
9b:fb:7f:e9:13:32:66:9f:2f:64:fd:34:ea:5e:08:
c2:b3:87:c4:98:46:f0:0b:36:c2:80:a4:8d:8f:80:
35:81:0b:e9:80:7a:1f:e9:f8:18:1c:85:6a:16:f5:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:D2:5C:ED:01:82:89:FD:3C:CC:18:D5:B3:1D:5A:98:7A:7D:B3
X509v3 Authority Key Identifier:
keyid:1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:89:04:dd:c9:d0:83:c0:8c:96:6a:6d:e5:c7:46:7f:52:43:
fb:21:96:5a:64:d5:27:aa:e3:29:9a:65:e6:7d:c7:8a:da:7f:
be:d9:a5:dc:ab:bb:e4:81:47:bc:3b:c2:60:8b:63:7d:b3:fb:
54:cc:e0:34:09:3f:d4:27:4d:ca:4e:02:d0:1e:d4:d4:0e:43:
e7:79:06:86:ae:36:44:c2:7a:6a:56:d6:4c:d4:12:f0:00:19:
4b:1e:12:c7:b0:8d:04:8b:c3:07:2b:62:4e:92:d5:c9:85:09:
18:ee:73:06:a9:42:98:cb:7a:4d:95:45:e7:b8:f9:7c:37:24:
7c:a5:ab:cc:61:1f:92:24:b6:cc:4c:c6:5c:35:9e:06:89:9e:
30:d3:03:82:b7:5c:9b:82:1b:86:6b:64:5a:d2:b9:cf:66:82:
ff:c6:fa:ed:bd:f6:b2:67:66:40:80:7a:39:e3:da:64:0f:9f:
32:d4:0e:84:fa:d4:06:bc:d4:c9:ff:97:07:02:e6:0d:c1:a4:
d0:e0:ca:6a:c6:ef:d5:30:c6:94:66:40:52:26:1e:03:ad:dc:
e5:54:88:6c:c7:3d:39:d2:d2:cc:c6:d8:93:7f:a3:4a:89:43:
60:a7:cc:27:8b:50:7c:f0:aa:e6:e8:12:99:00:68:55:ab:94:
50:f2:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:39 2025 by rpki-client