Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: WdxWXrpsQcu18WfFO9IveZs9/ozs5bDGICwdiZJm5dc=
Subject key identifier: 06:44:4C:3E:28:D5:00:3C:0F:83:11:7A:78:FC:9F:AD:89:79:CC:07
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 01984A7821642D7CB43E5CF1152408A36A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 06:00:43 +0000
Manifest this update: Sun 27 Jul 2025 06:00:43 +0000
Manifest next update: Mon 28 Jul 2025 06:00:43 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: /57cTnaltSkUUah0evKSY+kEDa+vaL5y7eUjLaAReAs=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:21:64:2d:7c:b4:3e:5c:f1:15:24:08:a3:6a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jul 27 06:00:43 2025 GMT
Not After : Jul 28 06:00:43 2025 GMT
Subject: CN=06444c3e28d5003c0f83117a78fc9fad8979cc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:9b:b5:eb:6e:5e:60:43:63:be:2b:d3:f7:
85:ff:e5:cc:4e:65:14:fe:58:d6:a5:6c:a4:31:6c:
2f:6d:8a:02:d3:5b:94:dc:eb:23:1d:f2:88:31:c6:
d2:26:b3:a5:91:60:dd:89:c7:dd:73:c2:0e:6e:6d:
a7:3b:4b:42:43:7f:be:02:d0:ef:e3:5d:57:fb:fe:
da:0d:b0:c9:6d:9c:b6:43:7f:0a:eb:28:07:ba:81:
b5:9f:30:19:d6:f5:fc:3d:1f:67:d4:3a:de:00:58:
ce:0d:7c:b9:96:0b:21:d0:78:30:ee:b6:0e:71:82:
2f:7e:ae:93:bb:ed:5d:55:b4:6b:24:c4:af:7b:16:
2f:1c:55:9e:27:64:26:5d:b7:47:e1:96:0d:1e:8a:
7f:e0:50:05:fa:12:e2:4a:91:19:af:f4:23:64:11:
fc:ca:b2:bc:03:c4:00:6f:78:59:e1:26:cf:01:57:
55:12:69:a7:a3:4b:d5:3b:46:ff:60:15:4b:47:ad:
ff:8c:76:59:83:07:eb:a2:3a:7c:d6:75:76:bb:29:
c2:57:40:cd:14:af:3c:7f:20:de:79:e5:89:4b:13:
2b:f9:84:67:15:8c:4c:17:2f:de:fe:11:72:2a:42:
e9:22:86:17:40:0e:fd:45:83:2a:7b:e0:ce:20:d2:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:4C:3E:28:D5:00:3C:0F:83:11:7A:78:FC:9F:AD:89:79:CC:07
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:45:53:19:20:88:65:74:63:07:bc:cb:82:38:fc:42:d1:92:
7b:52:56:c5:d6:af:20:8c:f4:ec:fa:5a:1a:c2:83:64:dc:5f:
8b:4d:82:ba:d5:40:ca:38:02:d0:43:3a:ec:6a:b7:3c:1c:6a:
89:e0:74:72:94:3f:01:bd:07:b9:c3:25:18:51:c5:26:9e:9f:
6f:bb:87:af:51:07:4a:49:c0:2b:cd:be:ae:c0:e6:d6:8e:75:
66:2d:99:2b:e2:27:58:5b:c3:95:ea:db:84:4c:a6:86:04:30:
7b:43:bf:92:24:63:cf:09:29:d2:06:7c:48:b4:64:fa:9c:3a:
0e:85:33:02:88:71:db:68:5a:fd:0f:93:32:42:19:44:f8:c0:
8e:33:76:21:e1:ae:2a:e9:ae:4a:6f:9d:7e:51:41:d3:f8:42:
a1:d4:6e:75:7e:f2:63:d4:f9:53:b1:39:ff:40:33:74:1e:2c:
69:61:22:41:94:23:a6:01:dd:34:6e:12:27:fa:e8:06:8d:c4:
8c:18:69:d4:aa:31:f3:f8:a6:92:b6:97:8f:59:90:34:f5:7f:
07:cd:04:0d:c7:bb:98:b0:48:97:b6:23:e2:69:c8:f2:a3:a0:
01:3e:0d:7b:d5:d8:58:4e:cf:6a:04:0b:43:23:cc:01:10:9c:
bd:21:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:51 2025 by rpki-client