Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: bdChSXtfmYt7FGaOnZ/H7Boi0smo6Wg82uT4Af9t2i4=
Subject key identifier: 01:25:4C:C0:20:06:7F:5D:AB:56:D3:04:B9:52:F1:31:DD:90:57:E3
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019A4EF498CAD5E4DC7770A24496C743AF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0C2F
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: DCSOknz3G89bpZo3eWYiiaQQ32b6VT0CkwqtApuSBEA=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:98:ca:d5:e4:dc:77:70:a2:44:96:c7:43:af:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=01254cc020067f5dab56d304b952f131dd9057e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:9e:88:93:8e:85:b0:61:1d:ae:37:05:03:
3b:00:e7:2a:6c:c9:6e:61:ea:85:e8:64:f7:02:5b:
6d:26:5f:0c:9e:9b:2c:de:75:3d:96:bb:1c:50:e8:
a2:01:cf:ce:c5:cf:97:3e:27:4d:c4:4e:b2:f4:7c:
d8:e2:a5:62:c2:18:e7:aa:b0:35:c9:28:55:29:09:
e1:d3:4e:8b:89:78:56:42:0e:2e:6d:be:4a:3a:b1:
46:d7:a3:5b:2c:15:bc:4f:0c:e1:ff:aa:0b:f3:46:
ce:b0:8c:e1:f9:a9:3f:0a:5e:33:23:a4:18:41:f2:
23:2f:de:73:e2:c8:45:0a:b9:e4:b0:62:98:6d:a6:
be:14:9f:6b:c8:48:1d:20:a4:ae:c2:53:c6:51:92:
c6:f8:90:07:cf:51:d3:a7:32:51:d2:df:0b:81:e8:
b9:86:df:3d:02:69:5c:93:21:3c:cb:bb:fb:88:0c:
8c:6a:a4:a2:fa:7a:f1:fb:72:ce:32:81:7b:1e:5c:
81:b8:32:1c:bf:10:62:65:2f:a5:20:70:5f:6e:e9:
dd:8a:6c:99:ea:c6:51:b0:ce:35:25:43:46:51:43:
33:22:1d:b8:ca:51:f9:09:b6:3b:6e:dd:5c:53:b0:
71:35:36:ae:50:f4:a6:d6:97:8c:6c:6d:bc:64:72:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:4C:C0:20:06:7F:5D:AB:56:D3:04:B9:52:F1:31:DD:90:57:E3
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:3b:bc:42:f7:51:46:e3:a8:97:0a:9c:cb:9f:1a:53:50:
ed:62:9a:de:87:4d:75:2f:83:79:0e:18:1e:5d:45:79:5e:a6:
69:5a:9e:53:90:9a:d1:be:69:0d:20:9d:c5:54:b9:aa:43:4b:
73:ec:7b:0e:16:fe:6c:ab:d1:2c:b5:7c:bb:1e:56:e3:ad:cf:
d4:4b:e2:6e:23:28:91:f5:f3:04:ca:13:d5:17:44:3c:46:80:
1f:8e:fe:da:02:c0:c3:7f:7a:bb:c2:82:1e:bc:c7:e1:86:5a:
8a:4c:9f:20:39:2d:e8:02:8d:6c:8a:b0:50:89:0d:4b:f7:45:
61:9b:53:dd:92:5b:78:ec:60:3e:b2:2c:1e:97:00:59:d5:d2:
f4:9d:d4:55:3b:5e:8a:1c:47:80:a1:fd:2a:2b:23:fd:e6:8a:
8b:fa:84:f2:f7:19:f9:13:98:7b:b1:40:b0:b0:b6:63:da:73:
c7:a2:2e:a0:58:40:51:f2:38:aa:b4:56:64:ad:b0:0e:f6:72:
79:5f:f8:8f:8c:3f:15:cb:45:df:f1:8e:d4:74:e7:9f:1c:c9:
77:63:32:f1:bd:37:79:c8:2b:d3:b6:96:8b:43:b3:97:9e:97:
ba:99:2e:d1:bf:08:90:39:31:21:92:59:46:3d:e7:0f:5b:6e:
f7:ac:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:37 2025 by rpki-client