Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: k5CnJBsiZuPLTL+u8euch292gN/Wlc7I45g4qxT9h5Q=
Subject key identifier: 8E:4E:C0:81:7D:B7:18:E1:EA:27:30:D3:DA:0B:A5:62:BA:93:2E:CB
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019858D8DB7B99291E9327DBA88B805954F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 151E
Signing time: Wed 30 Jul 2025 01:01:03 +0000
Manifest this update: Wed 30 Jul 2025 01:01:03 +0000
Manifest next update: Thu 31 Jul 2025 01:01:03 +0000
Files and hashes: 1: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: SziDyCsGFam2zcRJvHm4sUkx5YjWBITsgLyX1e9PDns=)
2: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
3: ypGsSdhwUPXWu7n8WEI-5JJ11R0.roa (hash: jJPrgo1Ck75SNnAuqJfOWcq15mWkd6Gj36byuNxQVnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d8:db:7b:99:29:1e:93:27:db:a8:8b:80:59:54:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jul 30 01:01:03 2025 GMT
Not After : Jul 31 01:01:03 2025 GMT
Subject: CN=8e4ec0817db718e1ea2730d3da0ba562ba932ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:a4:b4:57:e9:2e:74:e6:b8:17:7d:c8:a7:
1e:01:22:f3:c8:29:8f:68:61:e0:34:a2:28:00:93:
4e:a8:22:ff:9c:d1:c9:11:cc:bd:b7:e7:28:69:e3:
f0:a7:5c:68:b6:28:c0:d9:3b:a8:f9:4e:cb:48:c5:
d1:31:fd:79:44:47:1f:b7:e4:0a:6a:cb:e4:e0:5f:
d4:17:80:1a:33:b5:80:68:47:19:62:7c:36:6d:79:
57:42:f1:1e:9a:6b:c7:6a:c0:99:9f:2c:d7:80:9c:
3d:18:eb:72:2b:2b:10:03:f4:da:db:f4:5c:d5:6e:
1d:2a:9e:79:46:b3:d8:b2:ad:4e:40:55:9a:64:45:
27:7c:1a:ae:d3:d1:91:e1:55:10:74:85:55:ce:e3:
93:32:df:af:7c:ef:cd:57:21:4e:a6:83:21:1e:72:
c1:95:00:b4:ca:eb:f5:b2:40:8b:f7:75:fc:4a:1a:
29:2d:a1:38:e2:f0:cc:98:3f:c6:c3:58:8d:b3:60:
7f:fc:d7:3f:e4:88:cc:18:b3:9a:ae:41:d9:3a:ff:
6d:a6:f0:cd:fb:b4:25:9e:9f:53:70:42:cd:d2:8a:
04:04:c1:2c:34:01:91:6b:ef:13:6e:4b:d3:95:58:
41:77:99:38:19:1e:a1:8f:36:5d:6e:84:7f:c3:6f:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:C0:81:7D:B7:18:E1:EA:27:30:D3:DA:0B:A5:62:BA:93:2E:CB
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:32:59:4e:d3:a1:7c:71:7d:aa:01:7f:63:9d:fd:f1:0d:
ad:e4:f2:ee:62:d5:1c:f5:5c:75:3f:d9:74:9d:13:11:00:29:
9f:45:7d:e5:b4:37:c6:e1:0c:fe:e0:4f:f9:de:ec:4b:fb:51:
2f:98:4d:2f:60:f1:0e:e8:3c:41:a2:2e:73:b3:ff:5c:37:74:
92:4b:41:ee:3e:82:07:98:6c:f2:84:be:e1:31:b3:a6:af:75:
57:98:c6:25:68:fc:fb:a2:48:50:ca:1e:3e:1a:fe:5c:60:ac:
ee:74:84:de:04:c4:92:b7:0e:2e:84:34:f8:ac:1d:36:33:be:
4c:20:09:a6:ff:63:27:c0:11:ee:0d:da:8d:5b:ab:78:7e:0b:
74:70:0d:b6:36:c1:bf:06:47:ed:73:39:5e:6c:f1:73:7f:ee:
9a:7b:d3:b0:9e:a5:e8:44:0d:32:f4:4a:1d:1a:4a:0c:f3:bc:
40:a5:cb:f8:34:4a:18:6d:fa:41:2b:9c:37:53:3c:eb:1f:a2:
8d:c9:e6:d9:2a:06:ce:5a:5d:c2:54:34:65:0c:60:7d:a1:ee:
8d:84:f0:08:10:10:47:d5:d4:8e:7f:62:37:14:5a:ec:0e:16:
47:df:05:ee:a4:5c:93:db:f5:62:4d:99:a7:43:4d:a0:0c:b6:
a2:c6:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:39:28 2025 by rpki-client