Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: 5a+orkqZpaqgjSSq93IVyGLSs7bRC4aOG7s4+08fli0=
Subject key identifier: CC:24:1E:DE:7A:F6:F2:FA:DC:B1:06:8C:AB:6E:B4:B6:45:C9:7B:4B
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0199FBEB9000B4C8C0DFC685D07C79AECFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 13B8
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: abymnHn8ilqUgSLXuXeBJf9SxT485eq3zm20UhyNTo4=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:90:00:b4:c8:c0:df:c6:85:d0:7c:79:ae:cf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=cc241ede7af6f2fadcb1068cab6eb4b645c97b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:86:08:58:2e:4f:5a:a0:b7:02:00:86:7f:
ec:eb:22:0e:a6:c3:6a:a8:3f:68:c5:09:da:e9:ab:
a1:ca:b9:a2:62:06:e1:6f:19:98:30:f8:14:a4:6d:
c9:bf:49:27:b5:b0:32:d3:97:17:dc:18:4a:31:e4:
67:f0:75:e7:49:23:45:c3:b5:8e:ae:b4:7c:df:88:
ec:bb:e6:f1:41:64:4d:4b:b6:b1:85:c0:37:ab:5c:
40:54:28:19:72:11:1c:f8:49:81:6a:e4:60:07:ab:
9a:44:7f:bc:18:44:15:be:82:48:89:f7:62:a9:18:
f4:38:71:bf:0f:89:d4:0a:df:91:57:2c:f7:99:77:
8f:3b:bb:02:0e:70:fd:d4:96:e9:bb:c4:80:7b:cd:
f9:40:e1:ed:ba:a9:0c:4e:4b:67:eb:19:18:cd:81:
ad:7d:e7:50:be:bf:96:23:cf:f3:e1:86:be:d6:56:
d6:1c:47:c3:d2:ba:83:16:11:72:83:e0:47:f6:ef:
21:2d:93:4e:6c:63:c4:b7:6a:d5:67:04:48:28:80:
27:c6:94:38:6f:af:d0:3c:85:d7:65:21:db:7b:54:
a2:e7:2d:66:6d:96:9e:59:98:5e:99:58:51:75:f4:
dd:cf:99:7e:a0:7a:5c:26:c9:ee:5a:ad:94:c2:fc:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:1E:DE:7A:F6:F2:FA:DC:B1:06:8C:AB:6E:B4:B6:45:C9:7B:4B
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:13:07:09:fe:2f:d0:23:8f:cc:76:57:89:6b:b3:a3:a0:2a:
3b:e0:05:d4:40:46:58:57:12:cd:a2:1b:34:5b:83:b8:da:b6:
30:93:d5:56:3b:e6:e4:45:c2:8f:75:fe:14:ce:40:de:a4:17:
a3:b8:e4:fe:c7:9c:aa:09:db:36:36:0d:ed:ad:f3:4d:ab:16:
07:b9:8a:18:ab:dc:c2:3d:3d:c8:75:e3:fb:5e:57:71:63:dc:
7a:3d:3d:ab:0c:30:d4:84:0b:48:68:56:6a:f3:6c:c6:b8:94:
df:5a:2a:88:7a:54:0a:52:05:9d:0a:8a:32:65:57:b1:1c:3c:
22:7d:9d:0a:bf:59:24:b9:23:16:17:0d:36:e6:cf:a3:36:39:
8e:2f:12:65:98:7e:7c:07:52:75:f9:24:a7:a7:d6:38:2d:b4:
9d:7a:80:88:00:b7:fd:32:9b:08:50:e9:0b:0c:b0:85:08:2d:
27:63:48:df:74:32:17:c8:85:21:8a:4a:7e:57:32:a3:bb:d2:
8c:86:98:e8:05:e1:09:f5:20:58:da:01:70:15:30:2a:92:63:
6e:2d:eb:4f:9c:cf:ee:8b:8f:c1:4f:27:a5:a0:d0:c2:bf:a0:
05:6a:fc:93:e9:5e:cb:6f:5f:b7:d0:45:cc:7d:36:48:ad:bd:
93:d0:7e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn765AAtMjA38aF0Hx5rs/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjUxMDE5MTAwMjIyWhcNMjUxMDIwMTAwMjIyWjAzMTEwLwYDVQQD
EyhjYzI0MWVkZTdhZjZmMmZhZGNiMTA2OGNhYjZlYjRiNjQ1Yzk3YjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqGCFguT1qgtwIAhn/s6yIOpsNq
qD9oxQna6auhyrmiYgbhbxmYMPgUpG3Jv0kntbAy05cX3BhKMeRn8HXnSSNFw7WO
rrR834jsu+bxQWRNS7axhcA3q1xAVCgZchEc+EmBauRgB6uaRH+8GEQVvoJIifdi
qRj0OHG/D4nUCt+RVyz3mXePO7sCDnD91Jbpu8SAe835QOHtuqkMTktn6xkYzYGt
fedQvr+WI8/z4Ya+1lbWHEfD0rqDFhFyg+BH9u8hLZNObGPEt2rVZwRIKIAnxpQ4
b6/QPIXXZSHbe1Si5y1mbZaeWZhemVhRdfTdz5l+oHpcJsnuWq2UwvwrpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwkHt569vL63LEGjKtutLZFyXtLMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhMHCf4v
0COPzHZXiWuzo6AqO+AF1EBGWFcSzaIbNFuDuNq2MJPVVjvm5EXCj3X+FM5A3qQX
o7jk/secqgnbNjYN7a3zTasWB7mKGKvcwj09yHXj+15XcWPcej09qwww1IQLSGhW
avNsxriU31oqiHpUClIFnQqKMmVXsRw8In2dCr9ZJLkjFhcNNubPozY5ji8SZZh+
fAdSdfkkp6fWOC20nXqAiAC3/TKbCFDpCwywhQgtJ2NI33QyF8iFIYpKflcyo7vS
jIaY6AXhCfUgWNoBcBUwKpJjbi3rT5zP7ouPwU8npaDQwr+gBWr8k+ley29ft9BF
zH02SK29k9B+jA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:27 2025 by rpki-client