Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: gHY3HQQBNfipPo8Q+IQ4swpz4lmBjlSz3qgvHmuTKkQ=
Subject key identifier: 5D:67:99:0C:E9:7C:04:F6:17:79:07:E1:C2:39:6A:43:40:59:51:EC
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 019849667F5954DC81704A9B5AB4E8FEEC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0E1E
Signing time: Sun 27 Jul 2025 01:01:50 +0000
Manifest this update: Sun 27 Jul 2025 01:01:50 +0000
Manifest next update: Mon 28 Jul 2025 01:01:50 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: SDvpurl8BCE5KJwgtZBspa5yAfXs7PTulX0SXskkAgM=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:7f:59:54:dc:81:70:4a:9b:5a:b4:e8:fe:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Jul 27 01:01:50 2025 GMT
Not After : Jul 28 01:01:50 2025 GMT
Subject: CN=5d67990ce97c04f6177907e1c2396a43405951ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:b3:e6:ac:22:5f:c1:22:f4:ea:72:9d:41:
d4:10:fc:18:5d:29:38:ac:05:09:e3:b6:e5:d6:be:
d2:78:5f:59:87:ef:94:7b:e1:81:d1:4d:73:f3:3c:
9b:d2:ce:37:e4:ed:ef:83:0f:62:d5:29:07:4e:3c:
32:7a:90:38:f6:a3:45:80:5e:fa:aa:1d:40:b3:7f:
81:ac:ca:7f:0c:52:e8:6e:27:33:bc:2c:df:1b:67:
c3:a6:17:3f:ca:50:10:69:a8:01:73:96:cd:f5:ec:
77:c9:3a:91:dd:7a:27:58:c6:1d:78:f4:dd:59:26:
4e:1d:19:2f:4f:79:e3:51:1b:89:83:3e:4f:87:3a:
47:a8:98:06:a2:69:8c:d1:38:d3:b4:7d:e9:bf:92:
60:1d:61:24:b4:da:7a:2a:b6:d2:7a:0a:00:b5:20:
12:dd:95:b7:87:ec:d6:84:c8:f7:38:a7:75:17:26:
90:34:a9:f2:e3:a5:8f:5d:bc:fc:61:b2:46:d8:ad:
85:cc:f4:5f:5e:89:17:15:4a:ea:1e:57:93:22:0e:
be:73:d1:64:e5:f3:36:d5:84:6b:eb:a7:70:f4:a2:
e8:5e:b7:52:05:e3:19:f3:4d:e5:b2:7e:4c:28:de:
d2:e9:23:84:af:d6:57:7f:04:94:ee:6b:4e:5e:96:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:99:0C:E9:7C:04:F6:17:79:07:E1:C2:39:6A:43:40:59:51:EC
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:01:ea:00:70:d9:70:96:dc:7f:06:00:ba:65:6a:86:95:73:
af:b5:ce:02:88:ab:40:15:db:72:01:a7:4a:84:61:28:b9:2a:
df:9f:40:8f:fb:7c:1d:6b:3d:35:42:20:d5:b0:21:fb:3c:f2:
30:cc:77:30:69:5b:b1:35:b8:a3:7a:c3:3b:67:08:37:35:c7:
68:c8:12:55:48:d5:3d:81:ca:78:5f:7a:98:b0:bc:5b:43:c7:
52:a6:2e:5e:01:88:4d:65:ba:77:50:f5:a0:d8:6d:c9:d7:d8:
3a:ad:74:b2:29:4b:33:57:e9:6a:87:29:b5:01:0f:f9:2e:dc:
70:a3:1b:fc:23:dd:82:ea:44:8c:4e:c3:76:43:86:d3:60:0e:
e9:1a:c9:a6:ea:d5:7f:ad:24:2e:42:8c:a3:33:1e:21:f1:ce:
4a:91:4d:be:bc:2e:1b:ce:e4:f1:50:49:c0:b1:4b:84:e5:88:
c6:89:3f:60:1b:6f:9b:a2:fb:a2:ec:a8:65:15:fa:47:f3:b8:
a0:db:d6:08:89:11:7f:c1:7d:43:51:39:a8:b8:4e:fc:00:1f:
f4:b3:b1:7c:ae:eb:62:67:2d:a0:c5:b6:c0:a8:dc:fb:a2:4c:
78:f6:25:24:57:1f:9b:d8:ae:78:3f:6f:e8:22:26:2c:e5:e2:
41:24:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:44 2025 by rpki-client