Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: dka0xpoud0AQtH0391UyzHYApQ4MGoDVSMZPd0oMwHg=
Subject key identifier: 0B:4B:18:4F:69:5F:42:53:8A:9D:44:BC:A4:3C:EB:95:CF:41:F0:28
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 0199FBEBEC7DC2056F2284E133E7597C024D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 12A4
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: zuZBhjkMNasE6yx5j0TeqPEVjm8dgJbq9kvUe7gQ97U=)
2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=)
3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=)
4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ec:7d:c2:05:6f:22:84:e1:33:e7:59:7c:02:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=0b4b184f695f42538a9d44bca43ceb95cf41f028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:16:07:4a:b6:7a:91:50:bb:f7:11:e2:00:
43:fe:84:ed:79:d2:9d:a8:80:21:56:95:67:93:94:
bc:b0:41:c7:4d:0b:3e:3e:80:30:a3:59:4f:a2:f0:
66:41:6f:be:b9:d6:10:61:b0:f9:17:ae:e3:7e:d8:
9f:03:12:6a:07:d6:87:f8:ad:c2:5e:35:86:b4:f5:
9f:36:46:62:30:3a:1e:49:26:d8:e1:93:fe:b9:89:
8c:f4:75:77:fc:a8:16:0e:57:7d:aa:06:b6:9c:c6:
52:3a:a1:b6:20:dc:e2:23:02:8e:2b:43:21:b1:d9:
de:8e:61:18:cd:c0:24:2e:b4:c5:78:66:d8:5e:29:
09:d5:cb:80:54:35:d1:82:21:a1:7c:fb:51:2f:80:
52:26:1c:13:5d:66:2e:13:e2:af:03:6b:bc:77:66:
6a:b4:73:47:e1:57:1d:c0:f7:d1:81:f9:91:59:1a:
d6:72:08:b7:ee:16:6c:f4:ee:c9:3e:30:af:fc:a6:
e2:2e:e7:fb:75:ef:ea:16:56:2f:e3:41:d8:d3:18:
97:8d:b0:76:ef:19:da:bc:47:4b:a9:6b:23:c3:90:
26:a3:c3:19:07:a5:7a:2f:62:db:06:ef:d3:01:9e:
18:63:e5:fb:39:ae:f4:bb:47:fe:1a:6e:2f:7b:fa:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:18:4F:69:5F:42:53:8A:9D:44:BC:A4:3C:EB:95:CF:41:F0:28
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e6:05:9e:7b:19:47:6b:d3:74:a6:07:96:1e:c6:75:55:8c:
d9:b9:08:9f:32:c8:1a:be:00:39:ad:20:80:9e:01:21:a8:7b:
be:53:21:f8:c4:f4:ae:f7:41:6b:bd:ca:bb:ff:db:4f:e6:3d:
27:85:dc:12:79:bf:99:39:d6:52:d2:c7:c0:01:fd:7f:c5:42:
9a:0a:8e:a0:d4:11:fb:c6:fd:c0:d2:b6:3f:99:49:61:68:78:
12:22:fb:39:d0:98:bd:b1:eb:56:c2:33:ef:46:83:f2:e5:49:
21:d4:8d:58:a0:3b:3b:a3:84:8d:25:42:0f:05:47:a1:71:eb:
1b:65:6b:a7:b3:50:98:65:e2:30:5c:e8:02:83:8f:d9:41:2e:
b6:12:61:ce:88:e1:43:82:e1:e2:69:4e:08:60:8b:28:84:0f:
fa:e4:dc:74:4d:a4:7b:81:43:d3:e5:c2:a0:51:5e:49:eb:f0:
2e:54:e2:c3:04:37:99:d8:82:8a:b8:bb:6c:a0:f7:5a:bf:32:
af:01:12:2e:49:85:dd:17:ff:43:36:79:98:8c:14:15:b8:f4:
2e:0f:ed:e2:00:71:59:b0:8f:65:d0:79:a1:e7:63:28:ca:41:
9d:54:a1:9a:50:40:33:99:60:c1:04:63:b4:2a:68:c3:38:b5:
57:af:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:09 2025 by rpki-client