Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: coTNDN02gKjeiJrmegQYOMWrdsWZumz/BtKeF9YCaoc=
Subject key identifier: F3:2B:A6:D7:3D:20:50:E3:0B:E6:02:F5:64:9E:0A:18:D7:E0:AC:D1
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019A522CD7E007BB3DA33CEB843C4065EB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 04:01:01 +0000
Manifest this update: Wed 05 Nov 2025 04:01:01 +0000
Manifest next update: Thu 06 Nov 2025 04:01:01 +0000
Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: bPj+JiWlalJzBc7jFvIFYPeAgEeyunPM3mtRucAoMAE=)
3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d7:e0:07:bb:3d:a3:3c:eb:84:3c:40:65:eb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Nov 5 04:01:01 2025 GMT
Not After : Nov 6 04:01:01 2025 GMT
Subject: CN=f32ba6d73d2050e30be602f5649e0a18d7e0acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:b2:66:6d:3b:fe:70:88:e4:c6:b8:44:06:
f5:77:7b:a1:f9:15:72:09:de:5f:cf:5f:dd:91:d5:
cb:0a:69:1b:63:02:c9:95:cf:5d:53:d6:44:ea:f2:
1d:70:b8:97:81:42:d3:1a:fe:a4:09:6e:2f:fa:31:
dc:14:c7:18:59:b2:56:8b:35:b9:0a:2f:4c:ae:a0:
d4:da:68:7a:45:fe:75:68:e0:af:02:1b:39:e1:6a:
52:75:7a:e4:9a:7b:17:4d:f8:c4:1d:38:73:f8:73:
4d:b7:67:a0:77:22:e4:9d:76:37:1a:54:99:a7:65:
3e:a1:0b:62:a3:ec:f8:bc:b9:f4:e9:d0:5d:61:12:
b0:8d:eb:c7:fd:0d:75:f8:95:16:f6:f7:21:78:b5:
7b:ed:34:39:e8:e5:1b:09:96:1c:6c:97:c6:25:1d:
68:25:f9:61:20:4c:b8:8b:ef:2a:4c:0c:48:65:26:
72:2f:2c:2a:a1:3a:06:5f:8c:a9:69:cf:6a:b6:f2:
bb:dc:f7:f1:9c:b8:ec:84:ae:ca:23:14:ee:57:ba:
c7:4f:25:92:51:bc:9a:3c:3c:e9:d0:0a:2c:8b:cc:
56:8b:29:a4:81:42:43:66:70:3b:0f:57:18:da:6f:
79:20:da:4a:f3:67:88:ec:03:ae:88:94:11:e7:bd:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:A6:D7:3D:20:50:E3:0B:E6:02:F5:64:9E:0A:18:D7:E0:AC:D1
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0e:0d:78:4e:48:42:4d:ec:17:46:49:58:49:b6:49:84:32:
e8:d6:a5:b7:1e:be:56:a2:55:e7:c7:f7:4c:ea:14:60:cb:ed:
24:82:ec:57:55:58:aa:2d:8f:f3:97:59:f8:b9:21:54:10:7b:
24:38:cf:33:63:37:c1:d5:18:40:46:8d:a7:f2:ba:5c:46:e0:
76:f5:f8:fb:b3:00:f0:b4:10:32:78:dd:5a:12:33:69:2e:49:
d3:40:74:cc:13:a9:77:cc:13:bf:01:2a:0b:13:00:af:bc:fc:
b0:63:aa:5e:fb:60:39:58:68:e4:35:58:ef:5a:ec:63:f8:da:
3c:a1:7c:e9:eb:53:66:99:e7:36:66:18:dc:41:83:f9:ba:61:
e0:ba:dd:64:e4:de:30:ef:a0:27:42:24:92:37:b3:bd:fc:0a:
83:74:dd:f8:22:ea:b5:4f:5c:71:36:d4:73:4d:06:f9:b7:ed:
ee:ca:a6:b5:12:8f:52:f8:f6:0a:ef:c0:a0:12:85:0a:54:3c:
65:2f:09:42:e7:a2:01:5f:58:4b:a5:8f:31:8d:fc:09:39:2f:
3a:33:52:18:16:8c:0d:3a:f1:43:0b:f3:e6:ce:c7:fe:c9:01:
fb:19:23:b3:8d:b6:ce:ce:91:7d:56:fe:c9:9a:29:8e:0e:11:
37:30:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:45:48 2025 by rpki-client