
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: MdaX9+jS1IpMS9WIPs99fSHOEKXq45d7vdj+trK5eDw=
Subject key identifier: 69:32:8E:04:34:61:8C:52:F3:14:E1:7F:1C:37:6D:05:7A:DD:14:25
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 0199FBEBAE3F2CA1D05C828419C3575F0E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0EFF
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: h2hJAUgycVctIroKXjGNFm9bgwIBuMeTNSYfU1Loj+4=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ae:3f:2c:a1:d0:5c:82:84:19:c3:57:5f:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=69328e0434618c52f314e17f1c376d057add1425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:a6:60:e7:23:4b:29:fc:74:70:8a:8d:9a:
08:28:81:02:cf:38:b0:ad:72:b7:3f:b8:79:1b:6b:
37:1b:1c:b1:dd:7f:5f:b6:eb:ab:e4:d5:b5:01:3c:
05:95:4e:69:73:52:4f:59:f8:21:7e:85:7f:d7:08:
52:a9:a9:40:30:fd:9f:85:dd:71:fb:86:88:08:b6:
0a:86:5d:b1:72:31:ce:6c:97:50:3d:31:bb:a1:b5:
65:1b:b6:04:ad:22:e1:ae:5d:22:53:c2:bf:8b:fe:
25:be:07:67:ec:d9:33:2d:9b:16:7f:2f:c8:bd:a6:
20:19:58:e7:16:b4:25:c6:e6:3d:16:4f:b3:77:8d:
e1:66:81:20:e0:ae:31:b5:73:c6:fe:00:34:fe:89:
c5:ad:36:53:d1:24:db:ae:ff:57:4d:4c:9c:09:68:
ee:0d:57:fb:eb:0e:6d:a5:21:f4:e8:ba:dd:c7:c6:
15:58:38:3e:b4:d1:ae:44:aa:7b:10:ee:7c:d1:d1:
98:42:2f:38:e2:4f:2c:3f:65:14:ee:4d:80:71:d6:
ed:7e:40:b0:c5:47:b6:98:14:51:f8:63:0b:e2:21:
81:0a:c7:47:3a:f5:78:85:4c:dd:8d:aa:13:b6:6c:
19:2c:74:6e:37:3f:9b:26:63:35:82:70:f9:83:14:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:8E:04:34:61:8C:52:F3:14:E1:7F:1C:37:6D:05:7A:DD:14:25
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:ee:18:68:47:33:1b:b4:c5:45:73:95:65:05:74:ad:05:
f3:5d:4b:71:7c:17:86:da:29:ac:62:10:91:32:2f:6e:9c:cc:
fe:d6:78:93:ce:aa:76:a1:07:2e:a9:7d:d8:f8:bd:ae:f0:0a:
50:c6:46:08:6e:17:71:9c:02:20:8e:3e:c5:99:a1:66:34:bb:
2f:a9:97:a0:2a:6e:46:0e:ef:9c:53:ac:f7:7b:c7:9d:85:c7:
0e:e1:5b:4e:ff:c7:ca:99:97:70:af:bd:66:03:5c:81:a5:70:
f4:c2:c7:dc:e1:86:ff:4e:b2:99:c6:6a:fe:28:e5:3c:98:73:
76:a4:17:93:6a:a4:69:2b:41:2d:af:a6:29:df:61:09:99:1a:
c6:cf:57:07:ea:6e:4c:d5:de:ab:85:f4:db:4e:25:a4:6a:8c:
2c:e1:f2:fe:ec:c7:10:15:28:91:46:e0:61:92:d9:de:ed:4b:
4d:63:47:38:5d:f6:ac:9f:5a:3c:e2:80:19:87:bf:b8:06:5c:
6f:aa:54:6a:09:43:05:35:f5:e2:ea:bc:b5:78:74:e6:9a:3b:
06:4c:04:37:22:dc:87:94:02:99:cc:ee:cc:e7:aa:e1:e8:df:
94:16:91:39:c5:af:47:b6:69:5f:d5:82:80:c6:e8:e9:4d:1f:
ee:24:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:11 2025 by rpki-client