Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: 3ukzAQlPGznHQzRzUbVHT2F9xPS0ui3nck4xnztq4QM=
Subject key identifier: 87:2A:CD:BB:6A:18:0A:BF:B0:12:34:14:63:C4:E0:67:D9:3D:E3:07
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 0199FB463062A4E934A55CD29E9466DB37E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0F55
Signing time: Sun 19 Oct 2025 07:01:45 +0000
Manifest this update: Sun 19 Oct 2025 07:01:45 +0000
Manifest next update: Mon 20 Oct 2025 07:01:45 +0000
Files and hashes: 1: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
2: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: V5TUciRlYts6lOAD8eZQ6s49gZegR9I/vLftVjSSozY=)
3: zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa (hash: /aNfoxAWWXZ24dSnA+fFMNRvHS3pHzntsjJo5PzS3sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:30:62:a4:e9:34:a5:5c:d2:9e:94:66:db:37:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Oct 19 07:01:45 2025 GMT
Not After : Oct 20 07:01:45 2025 GMT
Subject: CN=872acdbb6a180abfb012341463c4e067d93de307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:9c:58:ae:ad:52:e5:3a:89:3d:91:fa:9e:
92:5f:9a:50:53:72:5e:d8:ed:6b:96:bb:ab:c5:de:
e3:e5:70:13:b7:d2:25:ca:ef:18:8c:f8:3c:26:2a:
d4:cc:8b:83:b4:64:65:6f:e4:75:12:53:61:be:ae:
3e:a8:d9:73:8c:b3:29:03:74:34:7e:0c:c1:73:e4:
16:ff:11:0c:72:a1:22:74:f4:d4:6e:d5:03:d1:74:
66:55:bf:93:36:43:af:91:0a:5e:c2:c8:03:2b:99:
95:f7:a4:34:b0:fb:51:7c:69:93:e2:f8:62:70:51:
0b:03:54:b5:c0:96:13:df:c3:76:32:ba:44:71:2e:
6f:af:6c:5a:88:a5:55:47:db:ed:37:c7:59:6a:48:
14:93:33:15:5a:c1:e0:ea:52:2c:35:ce:e2:c0:a8:
0a:55:79:20:48:4b:00:b9:15:73:c7:e6:00:f8:79:
83:08:db:dc:d5:1b:af:ea:8d:85:90:a4:3a:34:0b:
2e:88:3f:16:ad:26:57:65:79:21:65:b3:5f:9d:0e:
1b:5b:c9:9a:7d:b8:69:2c:72:ad:00:2d:21:4b:f1:
25:0b:fa:1e:68:07:4f:c7:af:52:25:d3:d6:f2:be:
10:ea:ff:53:db:b7:da:6c:9f:44:50:3e:d7:89:7c:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:CD:BB:6A:18:0A:BF:B0:12:34:14:63:C4:E0:67:D9:3D:E3:07
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:73:1c:c2:d5:49:61:f9:19:63:50:ec:3c:ac:22:08:18:a9:
b9:c0:32:e2:7a:3a:0a:96:4d:aa:00:4d:fc:73:76:b5:32:10:
2d:5b:8d:55:1a:a4:1b:a0:fe:77:f7:9e:e0:0e:13:38:9a:6c:
a5:3d:15:7e:65:c3:7e:71:cb:48:66:ee:7e:cd:9d:97:67:dc:
c0:c9:b6:5f:3e:b7:5c:22:33:ad:03:c1:c9:d4:55:d5:78:38:
d4:5b:65:56:8b:72:ac:f4:00:3d:62:28:54:74:9b:f0:b7:c0:
78:ad:9a:ba:f3:d1:ee:e0:b2:38:7f:e0:1a:5c:d9:46:14:f1:
91:3a:c0:d1:16:ff:f1:f8:aa:41:5e:7c:ca:db:e3:cf:05:dd:
d8:08:a3:16:ed:0c:38:4c:79:ee:83:f9:eb:f3:98:e9:01:58:
03:f0:7f:d8:b7:aa:ab:da:69:2e:63:23:b1:af:14:30:5f:07:
ad:90:55:45:f8:44:44:93:23:30:12:87:9f:ce:db:38:54:fc:
71:08:99:00:7b:64:ba:20:be:38:15:eb:bf:0a:c6:c2:83:68:
67:0f:06:c6:17:a7:f3:54:e1:4f:0b:c7:c1:71:cd:91:8f:fe:
61:03:72:90:0a:bb:3d:16:b2:27:07:bf:42:30:33:f6:fa:08:
bb:0d:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:21 2025 by rpki-client