Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: Au6l48PjzSt0Fhd85oaWFOsz766gV9wuo4TSTAT63Lw=
Subject key identifier: 92:0D:78:01:04:E3:93:15:D7:C1:91:EF:F9:40:0B:49:22:68:A9:D8
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 019A507506E1B944D2518FA699B564C16134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 20:00:38 +0000
Manifest this update: Tue 04 Nov 2025 20:00:38 +0000
Manifest next update: Wed 05 Nov 2025 20:00:38 +0000
Files and hashes: 1: BVP4OCAjXeBuYLTryI3p58Cue9E.roa (hash: GynK6g284SA7T19UvRRdioOJG3DySiSaR/JNDB0lXJg=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: M7z6NtUvjlFr4MmPC6eBe93JoMcQP3Xkwy80THNQz0Y=)
3: cakGt0BPf0eiXSoum2ks2bU2JjU.roa (hash: SdKj2O/1M+1PiGNRUnkBd4BW4j8l343Ya8DxtNwWNfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:06:e1:b9:44:d2:51:8f:a6:99:b5:64:c1:61:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Nov 4 20:00:38 2025 GMT
Not After : Nov 5 20:00:38 2025 GMT
Subject: CN=920d780104e39315d7c191eff9400b492268a9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:d4:f9:37:f6:5d:44:c4:e5:b2:15:63:2a:
13:22:27:64:bb:7b:7a:db:5b:f4:53:34:93:3f:80:
82:52:15:37:98:b4:a8:a1:bd:fa:ed:9a:40:11:de:
1e:5b:0a:b4:0a:9c:a7:1e:d0:e2:0e:49:d3:a2:21:
4c:c1:eb:c5:60:bf:a4:d6:2f:ad:5e:a0:cb:06:dc:
15:b5:98:d2:ab:39:34:20:0c:3b:77:c6:e9:b6:22:
91:0a:e5:ff:62:c5:5a:21:78:ab:fd:69:52:cc:45:
ab:d6:80:b0:fe:b1:63:c9:e9:a3:ab:01:bc:81:dc:
f4:01:4f:a0:bc:a4:2b:37:05:3c:62:04:c7:7b:b8:
42:95:d9:2c:6e:a9:97:f0:35:18:01:7b:7e:60:2f:
d6:81:99:67:5c:f5:05:91:8f:4f:cf:47:f5:1e:63:
d1:a9:70:a1:93:51:9d:41:16:44:d2:26:ea:d7:c3:
57:ef:f7:a0:6e:db:6a:d5:f1:d6:db:2f:49:21:8f:
00:77:b3:74:3c:47:d4:d4:14:69:b2:c9:64:53:72:
4c:6f:2e:f9:b0:88:d0:e6:2e:b2:0b:a3:ab:50:5b:
5b:d4:b7:05:f3:8b:eb:41:98:25:5c:1a:2b:3a:63:
0b:1b:9b:38:e3:cb:c1:f8:d4:16:9e:43:60:6a:c0:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:78:01:04:E3:93:15:D7:C1:91:EF:F9:40:0B:49:22:68:A9:D8
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:da:6c:84:e9:0a:15:46:7a:1f:2e:48:ec:b5:76:dd:83:08:
47:44:df:21:33:47:0e:47:ac:93:fd:91:25:61:0b:32:3e:d1:
6e:cf:59:e7:a3:99:90:80:0a:9b:23:26:f8:36:22:d7:14:f7:
25:1f:5c:3f:57:1d:cf:7f:96:36:03:75:d2:29:aa:f6:7c:6e:
99:d4:d2:71:18:48:60:23:41:bf:9c:30:73:f3:2f:1d:aa:4a:
74:18:79:1d:c8:a4:42:70:6a:94:a6:09:53:7d:02:58:43:18:
ec:0a:3d:19:4d:32:85:2e:cc:8f:66:95:df:8c:d6:f7:f3:21:
bc:08:48:4e:20:ef:9b:ba:b5:e9:34:1d:fe:58:99:5d:04:61:
9f:ed:87:2e:f1:d3:8a:6a:67:a6:ea:31:a8:cf:43:6a:0e:e5:
d3:83:71:f5:56:ff:58:a6:74:74:ef:94:49:e3:53:51:15:a9:
30:96:28:65:ea:15:59:20:b7:33:75:94:f6:9c:91:69:2d:14:
ee:5d:86:4e:b7:8c:23:69:9b:ce:2a:59:fb:dc:4c:43:d9:9d:
3d:c0:19:8e:11:cd:18:0d:d7:ef:ee:ed:bd:56:75:85:76:f9:
01:4b:1a:72:08:7a:4e:e0:76:06:03:b7:cb:5f:9c:93:a0:01:
65:07:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:51 2025 by rpki-client