Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: 3dHZJF190s2jKB2bKPDMS2ooBj2mDlp8orwGrQPmG24=
Subject key identifier: 82:40:76:28:68:55:D4:A0:27:E1:56:EC:C8:1B:ED:49:F2:4A:AB:D7
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 019A4EF48CA8D7B3CBDD45F918F1B7491E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0F2A
Signing time: Tue 04 Nov 2025 13:00:40 +0000
Manifest this update: Tue 04 Nov 2025 13:00:40 +0000
Manifest next update: Wed 05 Nov 2025 13:00:40 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: cLoXioEUDdrPmf8ZM+GVH0MGj9mzdymP35yqgj/QlzA=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8c:a8:d7:b3:cb:dd:45:f9:18:f1:b7:49:1e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Nov 4 13:00:40 2025 GMT
Not After : Nov 5 13:00:40 2025 GMT
Subject: CN=824076286855d4a027e156ecc81bed49f24aabd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:c2:ab:ab:f5:7f:42:83:ae:e3:17:40:3c:
e3:3e:d4:fc:91:e3:7c:34:d0:69:31:77:8b:50:54:
02:28:2a:77:12:46:10:90:27:cc:0d:fe:04:d6:90:
be:c2:ab:38:30:79:b6:0e:79:b2:61:c1:ad:0f:f0:
15:f8:dc:53:2e:6a:a1:67:40:80:1e:51:82:bb:18:
3f:79:cf:00:e8:00:8d:47:5e:ec:b8:78:4c:f3:39:
db:e8:47:12:ef:73:33:22:6a:9d:07:22:c6:de:71:
e9:a1:d2:66:ea:b1:09:5d:03:87:b1:5a:6b:d7:32:
25:a9:78:2d:2c:cd:2c:9f:37:bb:ba:c5:14:44:d4:
54:58:6a:32:76:2d:bc:b6:b8:93:c7:0f:99:34:b4:
f3:96:e7:1a:e0:b6:35:cb:6d:2c:ad:a6:c8:13:28:
00:cc:19:2b:e3:84:2a:2d:67:07:2c:5e:46:a5:9c:
cf:c8:61:d0:96:1f:55:6c:5b:97:1c:a9:1b:e1:79:
02:06:b8:7c:fb:4f:e0:08:41:ad:1a:9c:07:a4:08:
af:1d:bf:1f:cd:34:2e:e7:42:38:60:a8:2d:76:5b:
44:62:93:b3:c7:aa:0e:3e:f3:82:f7:5d:7a:a3:06:
94:6a:56:70:3d:57:32:36:09:12:c4:b3:58:08:4d:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:40:76:28:68:55:D4:A0:27:E1:56:EC:C8:1B:ED:49:F2:4A:AB:D7
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:40:c1:5b:bb:34:8e:77:cb:14:f0:75:b7:53:76:34:45:
10:f5:bf:35:85:7d:9d:5e:41:d1:fc:d6:67:dd:75:28:96:1a:
1f:f9:5f:1e:d6:ca:61:f7:d4:8d:32:86:1f:39:01:2f:df:44:
d5:4f:fb:27:a8:c2:0e:dc:c6:a0:05:25:c6:c9:1e:d6:b0:b0:
de:3d:7c:18:87:5b:23:11:26:4e:70:28:fb:47:ac:ea:23:10:
3b:cb:8f:f8:67:eb:52:df:b7:a2:47:61:ef:67:08:2f:ec:46:
c9:e3:37:99:5e:08:fb:68:2f:43:cb:2a:57:d9:35:41:b6:e0:
65:e8:45:5c:5e:8b:20:04:24:8e:8f:93:32:a7:5a:65:e0:f2:
32:22:d8:98:32:d7:11:58:f1:61:1f:81:35:6f:b9:ed:a0:56:
85:c9:c3:fc:81:0f:b5:79:64:55:10:5c:52:5b:b0:cd:e9:49:
92:60:99:1f:3f:67:01:05:03:6b:94:ac:a0:83:41:61:53:3d:
2e:33:56:9a:27:06:1d:57:79:f9:ac:c4:e0:b4:f7:93:8a:14:
73:fb:99:fc:56:82:cc:83:10:a9:3f:c0:6e:e0:66:e5:fd:d6:
a5:c1:e2:0f:81:9b:57:a7:e4:4e:26:3c:f6:0f:6d:16:b8:a1:
ce:b9:70:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Iyo17PL3UX5GPG3SR51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi
ZjZhZjQwHhcNMjUxMTA0MTMwMDQwWhcNMjUxMTA1MTMwMDQwWjAzMTEwLwYDVQQD
Eyg4MjQwNzYyODY4NTVkNGEwMjdlMTU2ZWNjODFiZWQ0OWYyNGFhYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufnCq6v1f0KDruMXQDzjPtT8keN8
NNBpMXeLUFQCKCp3EkYQkCfMDf4E1pC+wqs4MHm2DnmyYcGtD/AV+NxTLmqhZ0CA
HlGCuxg/ec8A6ACNR17suHhM8znb6EcS73MzImqdByLG3nHpodJm6rEJXQOHsVpr
1zIlqXgtLM0snze7usUURNRUWGoydi28triTxw+ZNLTzluca4LY1y20srabIEygA
zBkr44QqLWcHLF5GpZzPyGHQlh9VbFuXHKkb4XkCBrh8+0/gCEGtGpwHpAivHb8f
zTQu50I4YKgtdltEYpOzx6oOPvOC9116owaUalZwPVcyNgkSxLNYCE0RNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJAdihoVdSgJ+FW7Mgb7UnySqvXMB8GA1UdIwQY
MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et
MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2
LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdVAwVu7
NI53yxTwdbdTdjRFEPW/NYV9nV5B0fzWZ911KJYaH/lfHtbKYffUjTKGHzkBL99E
1U/7J6jCDtzGoAUlxske1rCw3j18GIdbIxEmTnAo+0es6iMQO8uP+GfrUt+3okdh
72cIL+xGyeM3mV4I+2gvQ8sqV9k1QbbgZehFXF6LIAQkjo+TMqdaZeDyMiLYmDLX
EVjxYR+BNW+57aBWhcnD/IEPtXlkVRBcUluwzelJkmCZHz9nAQUDa5SsoINBYVM9
LjNWmicGHVd5+azE4LT3k4oUc/uZ/FaCzIMQqT/AbuBm5f3WpcHiD4GbV6fkTiY8
9g9tFrihzrlwNg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:47 2025 by rpki-client