Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: BAONYn+JtKMiTVZgjEoZ72zo2q6P96Yjar4JEXZzjX4=
Subject key identifier: C5:2A:38:2B:3E:FF:1C:3C:17:D4:C9:00:F5:2F:E3:FB:18:0C:EF:4E
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0198469B4A5600855AD013B25D66FBC9C4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 11E5
Signing time: Sat 26 Jul 2025 12:00:38 +0000
Manifest this update: Sat 26 Jul 2025 12:00:38 +0000
Manifest next update: Sun 27 Jul 2025 12:00:38 +0000
Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=)
2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=)
3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: NwO16yAfimJRq/mpJBrilbJbB2JPlOrppMGGTuEMYAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:4a:56:00:85:5a:d0:13:b2:5d:66:fb:c9:c4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Jul 26 12:00:38 2025 GMT
Not After : Jul 27 12:00:38 2025 GMT
Subject: CN=c52a382b3eff1c3c17d4c900f52fe3fb180cef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2b:34:df:ff:0c:fc:da:f1:86:5d:21:ef:53:
2c:bf:55:6d:72:22:7d:81:25:2f:60:6b:49:c2:24:
38:81:01:77:84:47:b2:7c:60:01:a0:3f:00:6a:41:
5e:75:59:15:82:91:b8:92:7f:dc:06:9e:f9:f0:17:
46:db:67:b1:5e:61:65:b6:4b:3b:d9:e4:0d:b2:71:
b5:9a:e7:fe:5a:e7:d3:97:0c:77:06:be:d7:5c:54:
3d:f0:2d:0d:10:b0:0e:b8:f1:14:f6:c1:2c:ee:c8:
f4:a7:09:eb:f4:ce:ad:36:60:1b:ea:98:26:a2:6e:
21:94:a4:e6:20:12:40:09:0d:c8:5e:2f:81:52:f3:
bf:2d:90:f6:58:78:81:d9:95:a1:9a:24:86:ea:00:
24:f3:1f:31:42:1e:a6:a8:29:6d:76:c4:42:af:e3:
bb:72:41:15:ee:41:16:d5:b7:36:a5:3a:3f:fd:17:
9b:93:61:cd:cc:f3:e3:82:23:d7:37:17:9d:b9:c8:
97:ae:dc:3f:e5:d1:84:8c:53:d1:7b:b2:62:ce:4c:
1e:f9:e3:21:d5:0f:77:83:74:51:d7:66:21:ca:b9:
02:0e:4c:c2:45:c3:7e:26:d0:5d:83:e4:23:19:01:
5e:f7:f0:d4:1f:03:19:f5:e2:b7:c2:f9:2c:c8:21:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:38:2B:3E:FF:1C:3C:17:D4:C9:00:F5:2F:E3:FB:18:0C:EF:4E
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:38:31:0f:fc:5a:a8:4f:9a:96:ce:14:95:a0:af:2b:e5:08:
2c:28:ed:e0:54:c5:ad:af:03:32:b3:a0:60:94:e6:ff:5a:8f:
89:64:e5:47:10:ec:3d:40:66:ec:0b:34:b1:21:bf:85:cb:88:
e0:1f:9f:34:7d:ff:d7:e0:09:19:b6:82:14:da:e6:ab:2f:26:
32:9b:55:68:b0:17:65:f5:4e:2e:4c:53:76:1f:f5:62:25:99:
3f:77:b5:4b:3f:f7:87:64:fa:bb:2c:83:1e:5b:39:03:9d:83:
c2:eb:86:d2:8b:17:7b:0d:02:a1:22:ae:70:5a:aa:92:bd:c0:
b3:b3:cb:5e:c7:0e:56:2d:af:d2:d0:ea:1a:31:93:8a:55:32:
43:f4:81:5d:06:e6:93:4f:79:31:1a:fe:41:41:8e:0e:dd:f0:
df:97:fd:81:a5:a0:7f:6f:39:08:33:80:17:0b:5a:51:60:31:
79:48:53:38:71:a7:2e:a8:6c:e5:9c:0c:3c:e8:d7:0f:55:98:
27:ca:18:bf:0a:fa:c8:bb:22:4c:75:c2:c5:fb:73:e5:4e:77:
0b:e8:de:4b:d7:cd:b1:6b:33:4e:4b:fa:1f:79:f7:60:53:ce:
f8:1d:56:70:62:72:83:43:4c:ab:0c:3e:77:c6:fb:3d:68:60:
21:f7:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:46:28 2025 by rpki-client