Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: Ew5mF+xv95BgfYikwIefv5aI/xRqaduAjFdgWyOMURQ=
Subject key identifier: 78:5B:FC:B6:E9:2F:88:B5:7B:A5:79:76:FF:5C:80:BB:79:81:7E:5F
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019A52D14741D7AA5D6DDAEBBDB3189B149D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0CDD
Signing time: Wed 05 Nov 2025 07:00:38 +0000
Manifest this update: Wed 05 Nov 2025 07:00:38 +0000
Manifest next update: Thu 06 Nov 2025 07:00:38 +0000
Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: QDrfM4E1M3lAAazokc4wT0EDX6YMTp+TGtu55wcQ354=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:47:41:d7:aa:5d:6d:da:eb:bd:b3:18:9b:14:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Nov 5 07:00:38 2025 GMT
Not After : Nov 6 07:00:38 2025 GMT
Subject: CN=785bfcb6e92f88b57ba57976ff5c80bb79817e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:5e:2c:56:82:97:fd:2a:75:d7:2a:8a:46:
db:55:fc:79:15:a0:b2:71:4f:19:95:25:6b:91:51:
4e:60:75:48:76:59:11:9e:d5:29:63:0a:c5:36:96:
5b:b5:d3:e9:5d:85:26:a3:df:05:56:fa:de:e9:f9:
12:78:44:c7:42:3c:29:65:21:82:35:71:33:0c:a9:
37:03:40:32:d9:bf:1f:8f:61:ba:72:cd:82:9c:93:
c0:60:c1:39:35:12:0e:ce:7b:0b:dc:89:b4:ca:90:
ef:f5:d0:0f:3d:a7:b2:78:26:80:90:aa:bf:2b:51:
a0:2e:0c:a5:ca:bc:6b:43:f3:9d:c2:81:ee:a8:89:
71:8e:83:ef:c3:5c:7c:65:02:17:a9:35:eb:e5:5c:
e4:74:10:ef:11:15:9a:4f:76:8b:61:59:6a:84:f0:
d2:ae:1a:8a:0a:1e:f0:d3:f9:10:6a:3c:6a:c8:2b:
e2:ed:52:b1:c4:98:48:75:e6:46:74:23:50:ac:31:
b2:ca:c6:08:eb:50:e3:6d:0e:d5:33:41:28:2b:e0:
b9:9c:c7:a5:6d:10:1f:73:13:94:c4:30:83:02:5e:
86:01:31:a4:3a:f1:bf:39:f4:17:54:ce:ae:0a:f6:
46:1f:de:d9:8a:83:a8:28:57:c8:67:55:9f:60:32:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:FC:B6:E9:2F:88:B5:7B:A5:79:76:FF:5C:80:BB:79:81:7E:5F
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:6c:08:ba:4a:bb:a3:9b:e1:4f:f1:ed:f7:06:f5:b6:e2:
f5:bf:ca:82:ed:e4:d4:a2:f7:5d:21:d1:c9:f3:b0:0f:19:72:
4a:b4:42:76:9b:7f:14:4f:10:07:ee:c9:cb:bb:59:07:8c:8a:
0a:07:0f:fe:8e:ab:30:ea:45:46:8b:f5:90:93:14:0d:1f:16:
ef:0c:50:6f:44:04:bc:00:4a:39:28:0e:d6:eb:33:9a:45:69:
be:f2:ec:54:24:15:08:03:43:b5:3d:a0:d3:7a:7d:20:1e:e9:
0d:e9:84:d2:5b:60:4c:03:36:46:c6:29:e7:d7:96:0c:fd:85:
55:c8:39:7e:c1:03:ce:6e:ec:92:b2:70:38:88:13:35:1b:78:
a1:2b:5f:ea:06:fc:65:6d:52:78:ad:df:54:4f:11:6a:76:97:
53:16:4c:42:57:8c:c1:18:74:7c:07:09:6e:69:f6:0e:3d:ce:
40:e8:30:89:bd:e9:bd:9b:76:07:13:99:b9:25:29:39:79:48:
31:dc:87:70:c0:0d:af:24:2d:c9:fa:61:97:1a:8e:b8:97:17:
fd:78:af:f2:f7:69:43:af:8a:d9:5b:ab:0f:19:60:b0:6c:72:
c4:eb:f7:3b:5b:0f:fa:b9:c8:74:ef:42:89:8f:44:aa:67:ec:
2c:fe:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:22 2025 by rpki-client