Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: FbhBSjUDNFVsQ32lgpQxFtDQXpj8BEtO46h0uHyV7RE=
Subject key identifier: C6:FD:AC:4E:3C:03:B5:7F:48:F3:FB:31:5F:42:EA:6F:8D:FC:0F:92
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 0199FC8FB1037C64490C05B2C10FF20298AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: XvXzH0gfIGRrjeI45yBFEEQlCuE66pb/GAGD3xpgpxM=)
3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b1:03:7c:64:49:0c:05:b2:c1:0f:f2:02:98:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=c6fdac4e3c03b57f48f3fb315f42ea6f8dfc0f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:34:4b:b6:da:c2:0d:b9:f0:ca:88:b4:02:
e3:ee:82:5b:bd:4c:13:77:81:58:f1:a1:79:13:c8:
aa:f0:f2:57:8a:ec:0a:a9:a4:e1:f6:06:2e:3c:33:
d7:23:7e:b5:d3:c1:64:9e:59:b5:7b:ed:dd:3c:45:
e5:c3:5a:2f:47:ab:4e:4e:09:e1:31:d9:00:6e:f9:
06:35:a4:4f:09:b7:f6:17:60:1c:c9:b9:f2:32:84:
e0:cf:01:50:db:31:74:69:22:17:c0:8f:81:02:e6:
79:36:a3:d7:e8:ec:f6:9a:50:67:bd:d3:d6:bd:69:
49:9e:37:06:b0:62:a4:90:6f:38:05:f5:01:33:8c:
b8:35:28:59:10:61:c6:cb:c0:b5:53:73:59:43:6c:
6e:95:0d:e8:6a:c2:7e:6b:18:7f:79:c0:50:79:80:
02:bf:e6:5b:93:1f:86:77:24:7a:d9:b5:dd:18:5b:
fa:16:2d:72:a6:4d:02:a0:16:92:2f:63:e4:e1:a6:
76:e2:97:e0:27:eb:c8:aa:8c:d5:13:7b:7e:25:b7:
3a:22:7e:b7:ff:d3:58:fc:21:82:8b:03:bf:e0:47:
44:0d:fc:23:41:da:e2:1e:8b:71:00:64:4d:2b:2a:
e1:19:99:b9:bc:6b:db:b8:3e:4f:d2:59:50:d9:37:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:AC:4E:3C:03:B5:7F:48:F3:FB:31:5F:42:EA:6F:8D:FC:0F:92
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1e:45:79:ab:b1:39:3a:7d:bd:cb:24:e3:6b:67:21:96:62:
67:45:8b:4d:42:cd:cd:7a:89:ed:3e:6b:4c:fc:f5:99:f8:ee:
f3:f1:38:80:76:d9:79:d4:7b:c8:4f:60:49:46:8d:7d:57:06:
aa:45:44:7a:66:0c:4d:bc:b2:7e:47:d8:0e:95:75:18:5f:d0:
59:43:37:63:dd:91:f6:94:b5:36:04:50:c7:fc:90:b9:61:e7:
7b:08:0b:83:93:13:86:e5:f2:3d:c2:1c:5f:ef:9f:ab:5e:48:
ac:00:9d:fa:c0:28:ac:74:f4:ae:9c:6b:7d:63:73:48:d5:4c:
1b:50:25:fb:0f:b6:f9:a9:c4:22:dc:46:21:36:d7:0b:3b:88:
45:73:d7:32:ee:44:33:96:04:80:6d:cb:ba:0b:0f:86:5a:26:
cc:2b:ad:7b:ee:4e:4c:e4:04:60:e1:0f:c8:dd:43:10:46:0f:
f4:8a:b0:cb:88:1b:0e:c1:a5:4a:16:83:8f:4e:33:07:95:9e:
50:b7:75:f9:3a:1c:c2:1e:6e:06:ed:14:95:01:bc:7b:09:8d:
f1:e7:c8:d1:41:02:f9:bc:a4:c7:6e:16:a2:dd:2b:66:b3:6c:
03:89:54:0e:b8:92:48:74:82:19:4f:98:a9:11:68:3a:dc:03:
27:51:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:57 2025 by rpki-client