Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: TotOA2cDurjaQnG/6qiU6i3xbtrUDmYVhOqV+LYQUdc=
Subject key identifier: B3:42:2D:AF:04:10:13:9C:14:12:6C:D3:5E:F2:B8:D8:DF:55:A2:9A
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 0199FE476CB188698509C6AF2D7730FFD253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0931
Signing time: Sun 19 Oct 2025 21:01:57 +0000
Manifest this update: Sun 19 Oct 2025 21:01:57 +0000
Manifest next update: Mon 20 Oct 2025 21:01:57 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: 2TiIhGq3X8cq57uVgqR/abODrR7VJeJaj54rvKnAHrI=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:6c:b1:88:69:85:09:c6:af:2d:77:30:ff:d2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Oct 19 21:01:57 2025 GMT
Not After : Oct 20 21:01:57 2025 GMT
Subject: CN=b3422daf0410139c14126cd35ef2b8d8df55a29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:72:58:09:1c:5a:ad:fb:0a:a7:78:56:6e:
94:a0:44:ab:60:09:34:b4:32:94:86:ba:d7:00:93:
fa:68:01:44:a9:ba:50:84:07:7b:69:4a:b8:45:f9:
90:5e:6d:c7:72:2d:ee:cd:7b:bd:6c:42:4b:09:ff:
e7:ce:96:65:82:6d:1f:a4:d2:fa:94:19:c3:74:8e:
8b:19:da:96:6d:39:cf:f7:5a:85:ca:db:f3:09:99:
86:17:48:4f:94:31:5d:42:99:37:88:23:58:05:76:
77:3f:9b:60:74:1c:ee:66:c8:c0:39:ab:05:88:d5:
fb:41:f9:bb:fb:dd:d0:7a:4b:1e:70:87:25:d5:3e:
ea:5f:9d:ac:16:e4:8b:8d:0e:63:e4:b3:fb:76:7f:
03:23:6b:60:58:d8:ab:c7:87:a7:97:35:6e:8b:a7:
07:18:36:c2:10:a8:1b:61:b1:83:7b:d6:1d:bd:df:
9a:5c:a3:9b:07:dd:b9:f6:2d:48:00:2e:81:ac:b8:
31:be:f9:48:6b:06:21:19:a3:79:7f:60:36:10:2e:
ef:c4:4e:6a:90:5f:0b:62:d1:2c:bf:9a:44:1c:09:
ce:aa:2c:ec:25:b7:3d:3b:9a:b8:14:1a:f2:01:db:
98:5c:56:7f:db:14:97:70:62:19:85:bc:b3:50:34:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:2D:AF:04:10:13:9C:14:12:6C:D3:5E:F2:B8:D8:DF:55:A2:9A
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dc:2c:1f:93:28:ba:aa:a1:1b:7e:e5:34:f9:97:b1:39:17:
87:bf:8f:a2:55:e0:36:53:39:5f:5d:98:32:2a:9f:e5:d3:1e:
58:dc:24:8a:ec:5e:8e:6f:4f:9b:9b:ba:99:4a:6c:c4:51:5d:
5b:0f:59:e4:39:6e:2a:57:1c:1c:d0:0e:07:89:9f:f7:be:23:
53:40:cc:06:e4:cb:09:a1:97:9c:a6:78:00:6b:3d:5f:6d:a6:
90:8b:28:ba:fa:21:04:aa:17:96:56:58:ed:dc:36:9b:5b:be:
38:d8:93:e3:4e:21:4c:b6:3a:51:31:45:ce:a1:5e:4b:d0:85:
1a:19:e6:e1:48:55:6c:71:6a:1d:a1:34:a6:6e:ca:fa:71:73:
3a:f1:20:25:d6:c5:f6:77:39:f8:7e:33:87:ac:bb:42:cb:35:
28:ac:e9:42:d1:f7:d7:92:c5:92:64:2e:0b:1a:7b:5a:fa:0a:
2e:1b:e1:ec:78:e1:c6:47:63:a4:39:70:4e:46:31:91:7d:b8:
90:95:54:6c:be:ad:a8:fb:ca:a9:72:21:8b:59:a2:d3:be:a8:
ba:e4:5c:70:53:a6:a5:d5:d1:55:64:eb:18:22:7e:c6:bf:55:
55:ba:09:96:dc:31:44:65:e4:ea:6a:7f:aa:b2:8f:e9:eb:32:
89:68:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:56 2025 by rpki-client