Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: V28jyLho2oEPGLLru713GdOTtzb55Akm40HzQcYWch0=
Subject key identifier: 62:FA:8B:31:F2:8E:27:3C:38:13:BA:5A:6D:6C:67:80:D4:31:7E:63
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 019A552DCCA0BB0ACECF7716BD37A30EC8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 095E
Signing time: Wed 05 Nov 2025 18:00:56 +0000
Manifest this update: Wed 05 Nov 2025 18:00:56 +0000
Manifest next update: Thu 06 Nov 2025 18:00:56 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: s4auwS9802RaxyAPt3je9+6x017r8FsWrQmhuP0xGME=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:cc:a0:bb:0a:ce:cf:77:16:bd:37:a3:0e:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Nov 5 18:00:56 2025 GMT
Not After : Nov 6 18:00:56 2025 GMT
Subject: CN=62fa8b31f28e273c3813ba5a6d6c6780d4317e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:47:87:18:7a:74:db:a5:1e:e3:83:1e:cf:
35:b0:19:5c:9f:fd:f3:78:d2:ed:25:7f:46:2b:ab:
bc:bd:8e:52:72:ae:b2:fd:5b:e4:5f:97:b8:a2:95:
25:0f:29:4c:69:4e:60:cc:70:b2:27:88:1a:18:14:
89:dc:a5:5e:c3:d7:c4:5c:41:ab:d5:ec:f6:47:d0:
ac:86:fb:15:a6:fd:3f:84:7d:aa:5e:b7:0d:ca:21:
2d:00:f1:c4:16:69:2a:19:0d:f1:eb:88:30:c4:cd:
27:2a:e4:47:4b:fe:a1:a9:d3:f3:4d:fe:f9:00:3b:
30:83:e5:af:70:f5:f6:98:de:c1:97:db:af:26:f5:
42:c3:45:e8:17:b8:11:5e:db:7e:0c:92:83:bc:74:
d5:a2:99:e0:79:4e:8f:0a:a4:5f:3b:25:22:3d:8a:
2f:64:bd:a3:3d:81:ef:f0:6a:e1:d2:ec:1e:8d:5d:
c7:0b:17:0f:fa:94:3f:aa:f9:86:f9:b7:cb:75:83:
c0:d9:e3:25:76:bc:39:f5:9c:d4:2a:4c:59:b7:fb:
8c:15:c1:2a:05:3a:60:dc:57:f2:0e:3d:16:bf:d5:
a4:2b:6d:a5:99:3e:3d:45:2c:97:36:6c:2b:10:e2:
6c:4d:78:3f:b9:95:4f:a0:d3:26:86:ff:ae:3f:e6:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:8B:31:F2:8E:27:3C:38:13:BA:5A:6D:6C:67:80:D4:31:7E:63
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:d8:f1:4c:5a:21:9f:95:1b:2a:b5:af:97:c9:4c:a4:15:
ae:b0:b7:ac:05:b2:5b:51:9f:43:9a:bd:24:40:22:38:55:b7:
06:cb:e5:b8:b0:d0:f7:d8:97:f6:17:a9:25:d1:18:a3:50:c1:
1a:12:d9:a8:e8:42:fb:e2:57:82:6c:63:2e:1f:69:6c:25:b7:
6f:fc:e4:d5:77:44:25:5a:de:bd:d0:99:46:1a:d3:0b:72:fc:
ca:ac:c2:84:f1:f0:05:9e:01:09:c1:ce:c6:ba:98:2e:f1:55:
fc:1f:5c:27:d6:bf:26:85:c3:b9:1b:73:3a:c9:36:00:db:cc:
7c:03:b4:84:76:e9:72:20:9d:00:9e:87:a6:6f:9a:48:07:59:
67:99:f1:db:fc:c8:c9:ee:61:fd:0d:a2:c6:fc:57:ad:f7:bc:
2a:1d:f0:a2:ba:4a:6a:70:80:a7:fe:d7:fa:0e:c2:a8:1d:a9:
cb:3d:da:36:df:05:79:d7:5d:1a:47:ce:58:13:41:9c:e5:16:
a5:5c:ef:aa:5d:3f:3e:39:46:7a:42:df:06:14:23:e8:03:ab:
72:dc:bc:ab:3c:0a:5c:69:a7:b5:f6:32:76:54:58:bd:7b:58:
1c:5a:0a:d7:60:29:da:72:bc:86:a4:ae:d8:91:08:14:ee:70:
0a:54:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:09:55 2025 by rpki-client