Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: wBUZhjYUFNDNKFzWQDid5ZDKYg8gLykwXe585odC8ss=
Subject key identifier: BD:F9:89:CA:62:9E:B2:76:45:54:63:72:E6:E5:87:66:13:A5:E7:82
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019A4DE2086284D5BED3D1977E3D9DDE9EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:50 +0000
Manifest this update: Tue 04 Nov 2025 08:00:50 +0000
Manifest next update: Wed 05 Nov 2025 08:00:50 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: y0f4gQcmPWwn3I2HDrZGHWybgah+1P4qoNwlo/1POTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:08:62:84:d5:be:d3:d1:97:7e:3d:9d:de:9e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Nov 4 08:00:50 2025 GMT
Not After : Nov 5 08:00:50 2025 GMT
Subject: CN=bdf989ca629eb27645546372e6e5876613a5e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:28:55:f7:91:be:68:55:df:38:6b:2b:e1:
8f:3d:e9:5f:64:78:36:d3:4a:b0:a1:dc:61:64:a6:
8d:1a:8e:f8:5d:7d:51:59:b6:e1:06:fb:3b:9e:bb:
80:3e:da:ee:2f:2f:46:de:d2:d8:7f:b8:c6:7b:71:
b9:64:3b:05:fb:25:8d:8f:8c:27:1c:7b:3d:c5:7a:
79:71:ea:68:e6:ec:74:e4:f6:e4:59:06:3b:be:f4:
db:f0:b1:e6:4f:e3:b9:a0:3e:69:71:1c:84:35:40:
24:12:96:78:57:b3:f8:4c:f8:1c:6c:d6:79:98:93:
dd:94:1d:ae:3e:5e:f8:d3:00:40:7c:19:3a:c1:ab:
a1:70:21:63:c0:76:6c:bf:8e:aa:1f:0d:29:fa:50:
a5:f8:5d:08:77:37:ab:3b:b1:be:f1:2f:dc:8e:49:
41:44:3b:ed:32:33:71:82:45:c4:33:a9:36:eb:e1:
e2:76:61:ca:ff:2a:81:6f:f0:67:d0:a3:4c:49:0d:
6d:fd:e9:ea:68:4e:53:42:eb:89:5b:5d:8f:e3:b3:
fb:6d:d4:07:3e:2a:46:8b:70:00:c4:2e:e3:1c:f5:
be:04:0b:ea:a8:34:a0:7b:3a:e1:6b:ee:79:5a:42:
91:a9:41:c3:4a:9c:7c:f8:46:01:7e:91:ab:77:a2:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:89:CA:62:9E:B2:76:45:54:63:72:E6:E5:87:66:13:A5:E7:82
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9b:9f:a7:b9:b3:00:11:b1:91:47:95:d6:0a:0b:33:3c:ef:
9b:5d:67:73:43:e9:2a:b2:f6:8e:83:1e:83:91:25:53:6d:2c:
50:7c:e2:52:9b:8c:18:24:51:5e:52:01:04:ae:58:bc:7e:8e:
20:7d:1e:77:8c:81:c3:99:cc:0e:c9:d0:3a:22:95:b7:61:69:
ef:56:55:3a:92:84:60:ab:98:47:2e:d7:f9:81:b9:c7:34:eb:
22:c4:37:37:77:12:a2:86:aa:e6:97:a5:2b:81:02:84:97:e6:
a5:b1:50:fc:49:10:f1:cf:a0:41:b9:b7:2c:35:42:ae:f9:38:
6b:cf:6d:db:d5:00:5f:a3:6f:4d:08:27:40:c3:fc:63:39:bc:
f2:e3:8f:f4:35:45:d2:d0:df:34:18:c8:56:ca:c7:7a:c2:88:
10:9f:f9:11:55:bc:e7:6b:a8:ff:41:51:5e:2d:b2:6e:27:19:
4d:8a:a7:4f:c1:44:5c:7d:bc:0c:27:07:f1:cc:41:0a:cf:43:
b3:99:69:60:3d:11:13:17:18:05:84:85:a3:4d:da:b6:5b:4d:
dd:a7:f6:20:c7:d8:20:ff:11:75:93:60:54:8f:16:25:70:bf:
4e:d4:05:96:dd:d4:d2:ca:a4:9d:c6:59:91:3b:47:c4:c3:cc:
33:29:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:49 2025 by rpki-client