Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: apwGqF+I/FPW8NgXXU04Qi5hq9kwL72mXdvlmm0AXfs=
Subject key identifier: F5:B9:1F:57:49:E1:FE:AE:7B:99:E6:A5:6A:95:D2:F6:CD:22:06:9F
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 0199FBEB518CFB0E8E54271D8EC6FFBAD492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0C04
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: NpN0FKKIl9Qa+Rb8rv9hH+rbxqv8g4tMhoWDiO3iTJo=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:51:8c:fb:0e:8e:54:27:1d:8e:c6:ff:ba:d4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=f5b91f5749e1feae7b99e6a56a95d2f6cd22069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:85:c8:f4:db:86:9f:12:04:9e:8f:0e:01:
82:37:3d:0b:c4:5f:3f:40:4f:ae:b7:87:74:94:e7:
9d:1f:cb:90:01:05:52:8e:76:af:66:b4:86:df:46:
46:fc:17:88:64:20:cc:70:2e:82:f1:46:30:0b:1d:
1e:85:73:bc:6b:94:b5:84:9a:20:12:b4:f8:e1:16:
7a:06:4c:b4:71:3a:94:e7:9c:e1:b0:b4:c8:83:55:
45:bb:86:5e:25:08:99:bd:1c:77:26:39:91:99:9c:
2f:18:56:cd:f9:3f:03:7d:ee:f7:75:d7:83:53:10:
45:e6:92:85:8c:8a:89:77:da:63:ae:aa:8a:4e:76:
f2:b8:73:e9:7b:c4:5e:df:5c:3d:79:56:a0:26:dc:
a8:4a:07:19:83:00:e1:46:dc:6e:d8:31:8c:d2:b1:
bb:f7:e3:7c:ac:f0:f6:ad:a8:b3:7c:36:39:00:21:
4a:43:fe:ad:e8:a3:5b:4f:ed:65:b8:7a:32:d6:0a:
39:5d:5b:81:0e:38:4d:8d:62:ac:34:68:c5:72:b8:
dd:d5:e1:a3:41:df:dd:e4:f2:cf:de:8b:49:af:d6:
d8:f3:13:f9:bf:e4:92:65:df:89:7b:4f:b0:b8:24:
c6:b5:04:b3:45:ea:2a:fe:35:e0:7b:b8:b5:66:54:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B9:1F:57:49:E1:FE:AE:7B:99:E6:A5:6A:95:D2:F6:CD:22:06:9F
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:84:c4:4c:38:2a:61:e4:9c:fd:46:4f:92:5d:7a:25:29:07:
7d:23:26:01:90:55:89:ed:96:6c:94:ff:a6:4c:6e:33:e6:9f:
a5:2c:15:df:e0:80:e7:9d:8c:67:40:c3:66:ef:3f:41:61:b5:
dc:cc:dd:c7:49:d0:9c:04:d6:b7:87:5d:51:33:9a:3c:c4:ff:
c9:a7:50:98:63:e3:54:10:9b:8b:61:97:1c:89:32:93:2c:18:
e8:a2:21:57:fc:e8:50:ec:b2:49:a0:20:50:b5:e8:89:15:f6:
54:35:98:7e:c7:3c:33:39:f3:7e:10:d6:ec:f8:91:f6:4c:82:
fb:62:59:b2:29:03:d9:d7:64:65:0f:77:4a:d6:ae:0d:00:49:
44:51:70:3e:2d:93:5b:21:dd:53:20:e3:9e:3c:c3:cd:bd:8d:
ef:19:55:52:e1:34:b0:d5:d7:7e:cb:ce:74:36:86:33:c8:0e:
bf:6c:85:8c:aa:5d:5b:bc:13:01:b0:a5:44:dd:aa:23:ce:c6:
2b:05:95:b0:17:5c:cc:2e:23:ad:a7:57:79:c7:a5:e2:86:9a:
47:43:60:12:23:15:3a:d0:4e:79:bc:35:b3:04:7c:25:c8:d8:
b2:01:bd:a1:1a:d2:a7:9d:84:20:73:cf:9e:0d:be:2f:f2:b8:
2a:d3:5a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:20 2025 by rpki-client