Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier: 2tLNoZVkiDn3CtFReOruTMuBi+Uk7MifqJtdbQp6Nb4=
Subject key identifier: F6:26:12:A1:E5:A3:ED:67:2C:83:75:13:8D:87:A5:24:C8:FA:FE:BD
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 019A0035C0542D40DA01BD333F8898D5EB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number: 12AC
Signing time: Mon 20 Oct 2025 06:01:53 +0000
Manifest this update: Mon 20 Oct 2025 06:01:53 +0000
Manifest next update: Tue 21 Oct 2025 06:01:53 +0000
Files and hashes: 1: 0NC1N_A-fQvGxJ0y6M2HnKF7jRA.roa (hash: ui4M3nog1Gu32ZWTG5lmnhIcOo/8j6eCO17Kb4EZuZM=)
2: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: PCxlbEi9WJmxwW6KFjiRFcV2LTt9Fzwxf5bs+/Ft+3U=)
3: 4d1Pkq7-lWC3-1U-aIUJanzwNos.roa (hash: zZsUqZYfGAefG3I0e/YYA4kFIUGe+3X4rCm4R/YUXUc=)
4: Iiq1HkVTZWG93GXR5SmJNt8J3X0.roa (hash: ACz9bOMro7XmfGTKe0GkQ+qfpA1L29Dv5xB1Qya9/EA=)
5: ONL3PQ4OeKj9GolWXDmn2ruNHnw.roa (hash: rXKbdPmJw7wfX0tqsu5yb+15Jpu2GS0eUYlTZU0/zCs=)
6: rlSu8PBi6nqeGqAf18qNJl44Mq4.roa (hash: OJVJSdfw2izkHPFtKDpWYbt59YAxHvGayaJxgK3I62Q=)
7: vk-2RYHviyXKCP3eAAsgKKSkBv4.roa (hash: AV445OcWK5tkwYC3s0HKBp//h5gf47ykPfmI2RcuEUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c0:54:2d:40:da:01:bd:33:3f:88:98:d5:eb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Oct 20 06:01:53 2025 GMT
Not After : Oct 21 06:01:53 2025 GMT
Subject: CN=f62612a1e5a3ed672c8375138d87a524c8fafebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:a8:e4:2c:e2:2e:cb:df:15:cd:87:14:66:
bd:95:b3:17:fc:00:aa:8f:52:8f:72:38:5b:9b:cb:
b5:d0:6a:21:02:4b:1a:c1:c8:4c:4d:fb:18:c4:b1:
9e:72:84:33:24:43:ff:88:d9:8e:c8:7c:d6:12:f4:
52:3a:af:26:04:ef:4f:25:7e:27:72:c1:b6:dc:66:
a1:57:ed:d4:43:ed:85:0f:ec:07:a0:39:a8:ea:d1:
0f:b4:26:1f:7d:d8:21:16:ef:e8:5c:05:31:ba:81:
d2:80:88:26:eb:99:de:28:ca:b8:08:b9:77:f6:9a:
eb:33:e0:28:81:e6:95:25:59:d0:86:30:b9:a1:50:
5f:fb:28:c8:c7:19:bb:d5:89:73:cf:28:3e:f4:0a:
7f:c4:cf:4a:34:b1:83:29:7c:b4:22:50:23:d6:a4:
d0:74:96:dd:5d:19:29:37:6c:ac:a5:a4:64:33:a7:
f4:45:b5:86:c9:70:e0:02:61:d8:06:72:fd:7b:f3:
0f:5d:55:2a:98:33:67:b4:98:ce:46:43:a4:cf:dc:
4b:18:9d:bf:c1:41:55:4c:b7:4a:8f:f9:02:7e:39:
c9:e7:3b:93:d3:9c:c9:64:92:e2:10:f4:c9:59:2e:
f1:33:2c:52:df:8b:87:5f:5b:4a:6b:27:00:7b:4b:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:12:A1:E5:A3:ED:67:2C:83:75:13:8D:87:A5:24:C8:FA:FE:BD
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:48:00:17:bd:5d:b6:d0:da:ce:e3:ac:f7:c1:a9:e1:2e:c6:
93:0c:31:f3:ad:d1:30:18:31:89:ce:c8:e9:71:ad:41:14:68:
05:ad:2c:26:d8:e0:ab:c8:a1:da:13:38:77:9d:6e:f3:37:8b:
c1:0e:46:02:d0:fe:04:65:50:9d:fb:aa:e4:8d:d7:58:17:12:
3e:20:e1:a5:84:13:34:3f:1b:8d:7e:13:81:38:d8:22:6a:83:
bf:11:de:58:87:a1:95:f8:db:bb:57:e5:23:10:53:0a:6c:96:
23:a1:f1:e5:a6:15:98:1b:ba:05:cc:e4:48:65:cc:65:4f:af:
63:b2:d0:59:a2:fa:ec:a0:09:d5:7f:21:b7:0a:24:9b:a1:18:
a2:07:c3:1a:be:8f:0f:4f:ac:9c:7e:0e:d6:1c:a9:eb:d6:a8:
ba:fe:44:f5:28:4a:dc:6a:5c:14:3b:e7:e9:e3:de:3f:83:74:
38:6d:bc:61:47:b3:5a:e6:4c:72:f7:d1:e6:50:dd:f6:35:7b:
3f:3d:dd:c2:b2:8c:1d:26:54:09:5c:ee:73:d9:9c:f4:05:da:
71:37:a4:ea:f9:d7:74:0e:9a:35:74:47:3a:89:0a:fa:6f:dd:
76:64:f0:bd:49:3b:01:3b:71:3c:71:03:34:23:f1:f2:ff:29:
ee:c8:9d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:46:31 2025 by rpki-client