Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: hvnbwr6zuXHOZQOC5QU+fEw3mCBcDkaK+tuTPlluy5A=
Subject key identifier: 11:D3:97:52:29:9A:9A:62:9A:9F:D3:CB:EB:A3:C0:57:F4:23:B3:F8
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 019A4E86A568B0547A70C53F7AFCA2D610BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: ZtY2KCbvpWvhcJspBqPi2E5D6TrfsdIbPK5z16iLU1w=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a5:68:b0:54:7a:70:c5:3f:7a:fc:a2:d6:10:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=11d39752299a9a629a9fd3cbeba3c057f423b3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:3e:48:e7:88:b7:aa:9c:f4:c1:0f:50:b4:
02:a4:ee:9c:1d:74:07:dd:e4:c7:48:60:77:ad:84:
08:e7:f8:ed:ab:e2:91:bc:37:47:e8:69:5e:78:24:
0a:e5:51:5c:04:3b:e6:12:3e:ef:72:0d:18:fe:78:
d7:48:b1:80:15:10:04:c2:ec:8e:e3:a8:7b:b3:a6:
b3:4f:db:71:53:43:f5:55:40:fc:50:fd:73:a5:9e:
0d:81:11:7d:39:67:c2:32:10:54:20:48:8b:1b:d4:
4b:99:29:ab:23:03:99:21:e1:4d:50:ba:03:bd:a8:
61:08:7b:00:68:6d:d2:d4:04:fb:95:d9:5d:6c:60:
01:f5:a2:11:7a:d7:c0:d5:7f:2f:f3:2a:09:8f:9f:
cb:f9:11:7f:1e:42:30:a8:4d:4a:81:87:15:18:ff:
02:b7:ba:36:1d:56:66:b2:04:12:b5:66:96:82:e5:
33:14:28:98:57:b8:19:03:04:56:f4:da:61:42:d9:
f9:d0:82:6a:64:e1:13:2d:b0:d8:f6:32:8b:82:14:
56:05:1c:fb:46:51:a3:86:39:b0:e6:66:16:88:8b:
ab:0f:d3:49:d4:26:00:70:18:05:63:a1:27:ad:35:
da:c4:94:10:e9:af:0d:46:85:2a:ac:28:0d:7a:17:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:97:52:29:9A:9A:62:9A:9F:D3:CB:EB:A3:C0:57:F4:23:B3:F8
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:20:2f:f5:0d:56:e1:fc:85:41:51:87:2a:4e:25:17:ea:a4:
60:ab:d7:34:2d:08:6a:a8:16:64:7c:2b:1f:89:9f:3a:6d:77:
b9:c3:d0:45:3a:ca:2e:c9:21:96:3c:52:1f:51:49:7a:ea:a6:
ec:95:86:5a:4c:09:ac:4a:74:fa:dd:1f:f4:a1:bc:fe:f8:2f:
da:1e:b4:b9:98:48:b2:66:d2:b4:4d:32:d5:1a:0b:27:00:2e:
52:bf:1d:dd:e9:cf:d8:a6:51:c9:c8:ef:38:57:6c:42:4c:a1:
0c:eb:74:76:d2:c5:ea:00:76:32:bb:79:ea:51:f2:a7:87:92:
3c:82:a2:16:6b:b6:23:a1:73:8b:78:ad:65:1f:d3:93:f4:d6:
67:e8:47:47:7a:57:eb:7d:05:76:71:1e:e5:03:e3:9b:d4:b4:
2e:3e:8d:f0:52:2b:bd:5a:d7:01:66:ef:e5:07:ce:9c:cf:5d:
df:6d:35:2e:65:c8:73:54:b2:00:27:28:8e:cd:1b:fe:9c:db:
f9:9c:53:ab:dc:8e:c1:c3:25:8b:e6:c3:6c:bb:ed:23:12:b3:
f6:45:39:89:b4:00:0f:cb:b2:f0:34:61:5c:bb:fe:77:46:f1:
dc:a3:e5:3e:c9:e7:ac:35:88:ea:9d:43:60:fe:0c:31:cc:b4:
9c:5c:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:02:34 2025 by rpki-client