Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: a27o1u+sIMja3d1K8PiJQrOOUqQyFtQ+8UedOjBm870=
Subject key identifier: E3:83:84:D5:52:6A:99:73:13:0B:0A:82:A7:44:28:C8:DD:4B:0D:10
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 019A1B74C8A7D1EAECCCA48C90CB82E92B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0675
Signing time: Sat 25 Oct 2025 13:00:29 +0000
Manifest this update: Sat 25 Oct 2025 13:00:29 +0000
Manifest next update: Sun 26 Oct 2025 13:00:29 +0000
Files and hashes: 1: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (hash: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: R2o3/YCPHc+Nh32XbLFjTu1vadbSyPQAyHjosqRUyTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:c8:a7:d1:ea:ec:cc:a4:8c:90:cb:82:e9:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Oct 25 13:00:29 2025 GMT
Not After : Oct 26 13:00:29 2025 GMT
Subject: CN=e38384d5526a9973130b0a82a74428c8dd4b0d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:df:ca:7c:e5:1f:b7:6f:17:51:ea:77:10:
d3:c1:af:f4:32:f4:db:ad:b1:bf:23:2b:00:db:78:
38:79:a3:3b:8f:3f:e3:ec:11:61:ac:e0:68:62:2c:
62:cf:fd:6c:ef:fe:fe:96:82:f0:63:83:1b:ba:66:
21:fe:e5:85:21:a8:e0:48:ad:b1:03:31:4c:15:ef:
0f:fd:94:57:8e:33:55:99:45:6c:eb:58:b1:4f:ba:
ad:97:90:03:fe:7b:5c:1e:40:48:ce:97:ca:be:8a:
78:7d:56:09:92:b9:4e:79:00:2a:25:a8:8f:30:ca:
db:8b:60:89:15:8f:69:bb:8d:38:09:6a:81:a2:0a:
f2:9f:ac:c7:47:71:4a:bd:a6:fc:be:ab:6e:56:d5:
49:2e:71:cf:b2:c1:74:7f:29:b3:10:dc:74:1d:a5:
20:59:57:95:b1:a9:31:5f:79:d7:bf:a3:0d:e2:56:
6b:64:fe:dd:9e:2c:43:ee:ef:f8:1b:97:7c:ae:96:
6c:41:76:3b:9f:3e:08:ae:26:2a:1c:0f:d0:c6:0a:
47:9d:f5:fc:0c:5c:14:85:51:96:86:b0:2f:a6:1e:
aa:7c:a2:14:2b:88:04:a0:c5:fa:24:2f:75:db:dd:
9e:1d:a3:d0:71:04:6a:a9:40:a8:13:4e:be:12:f5:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:84:D5:52:6A:99:73:13:0B:0A:82:A7:44:28:C8:DD:4B:0D:10
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2e:87:04:24:ab:fa:c8:d3:9c:6b:25:bb:07:2f:27:53:42:
26:d2:3c:8c:fa:c8:80:9d:55:7c:0f:65:6f:bb:6c:2b:4a:99:
30:51:f5:7b:a9:cc:6e:d4:0a:b1:42:80:41:c6:3d:79:a1:79:
9d:a6:b8:27:4c:90:a1:64:f0:e1:49:21:81:fe:00:c0:a5:6a:
81:d9:9b:73:82:41:33:22:be:97:7d:92:1e:67:38:4a:54:c3:
c8:4a:ad:9b:83:20:b9:23:46:b3:c5:76:06:57:89:9b:89:cc:
fc:de:3d:cc:76:fb:8d:48:ac:b6:2d:9d:8c:fa:5a:37:c3:a5:
a3:a5:66:c9:1b:f3:0f:15:d6:51:e4:d6:a9:ec:5a:63:5d:62:
0f:be:a0:3d:d8:84:c7:64:82:0f:88:97:ee:ef:c6:25:8a:f6:
78:58:36:a1:df:b7:b4:1f:46:b2:f1:a5:b5:e8:75:e8:f2:fa:
13:ef:f4:e6:b6:9e:4e:5a:02:5e:1c:53:30:41:ba:8a:a6:22:
5e:7c:e0:70:8c:85:33:9a:d2:a8:f3:db:20:78:c4:d1:b1:c9:
4f:83:e9:db:79:a9:40:67:55:66:33:bd:2d:9c:3e:c0:af:c9:
d8:3e:4b:e1:9f:f0:b4:1f:a5:78:6e:1e:aa:d7:c0:5f:4f:7d:
1b:78:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:57:36 2025 by rpki-client