Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier: +4U937QjCzPko9ZjBEROXz1U6E7mwT/GCwmBWD1yUZ8=
Subject key identifier: BF:5F:48:4B:82:42:C2:C7:38:6E:E5:D1:CC:C1:94:F3:3B:C9:B5:1F
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 01985344515007C113F52FCCAD60E0AAB50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number: 0403
Signing time: Mon 28 Jul 2025 23:00:42 +0000
Manifest this update: Mon 28 Jul 2025 23:00:42 +0000
Manifest next update: Tue 29 Jul 2025 23:00:42 +0000
Files and hashes: 1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: F0mtfasklQB+WdCTDdHq+WQUTRKsCCtHKmwBnnL1dyM=)
3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:51:50:07:c1:13:f5:2f:cc:ad:60:e0:aa:b5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Jul 28 23:00:42 2025 GMT
Not After : Jul 29 23:00:42 2025 GMT
Subject: CN=bf5f484b8242c2c7386ee5d1ccc194f33bc9b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:5b:5b:0e:13:44:2e:c7:2f:87:72:26:88:
b6:96:02:7e:1b:7c:03:fb:79:9b:ae:4a:00:e4:ea:
86:e6:2f:0a:b6:44:ec:c9:ea:37:04:7d:a5:e0:3c:
dc:62:3a:50:9e:cd:22:11:f5:a2:7e:ba:b4:61:7c:
3d:06:db:8d:d8:13:d0:78:b2:ab:b3:5f:8a:3b:39:
2a:6f:30:1f:82:a1:77:b1:cc:d1:b7:2d:54:29:12:
1a:22:f1:10:b1:47:2a:fd:cc:3d:7d:2a:ae:dc:54:
9e:b1:e4:dd:03:89:fb:4a:4f:42:dd:59:a5:76:14:
05:ac:0b:e1:13:e4:89:f5:92:32:b8:69:31:e7:62:
96:e0:4e:59:2b:e7:81:f5:04:53:db:51:a9:a6:e1:
06:5f:96:79:9f:6f:48:72:90:c0:10:d9:4a:56:f5:
ad:a4:73:36:d3:70:fe:c3:be:cf:76:66:4f:40:e5:
0d:82:6c:b1:db:82:51:0f:6b:b5:23:6a:3f:9f:58:
85:f2:0a:58:d1:0f:23:16:dd:a9:cb:8d:a6:4a:ac:
4c:94:59:20:d0:97:76:02:c0:16:60:28:cb:d4:e0:
68:06:18:29:10:aa:23:2d:c4:64:4c:c4:65:39:44:
91:d6:14:6c:c4:8b:6b:9c:5e:50:6d:f2:a9:2f:60:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:48:4B:82:42:C2:C7:38:6E:E5:D1:CC:C1:94:F3:3B:C9:B5:1F
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ff:66:11:a0:a1:3e:60:d4:76:03:67:b8:61:10:b5:f6:94:
ee:e3:09:10:69:e9:11:2c:d5:5a:3c:df:e3:ae:72:d0:a9:68:
c5:ba:74:34:c0:4f:54:c2:43:54:ea:b2:a8:c8:e6:42:cc:62:
dd:e8:c9:e6:4f:db:55:12:52:d3:fd:89:ca:90:99:50:49:e7:
1e:06:52:75:b8:db:ad:ca:dd:f3:ea:d7:3b:02:f8:b1:c6:af:
d2:77:68:12:e0:ef:0b:61:f5:3f:18:18:06:b2:d8:b2:3a:07:
bb:e7:ab:d1:bc:85:cb:29:0c:c0:67:b2:72:9f:16:f7:48:89:
cf:11:65:18:81:21:8c:47:73:0d:f2:16:a1:2d:f9:f8:df:6f:
b9:08:12:99:8a:93:92:b3:6a:6f:3f:e4:5a:69:d6:e8:8a:57:
17:66:82:89:4a:78:e4:78:1d:dd:ad:90:37:c3:11:e2:9a:df:
74:7e:65:47:06:d8:72:39:bc:01:2e:94:b8:24:cd:3f:74:89:
25:75:fd:88:e3:72:a6:e5:2f:27:a2:da:52:fc:b4:c3:8c:b3:
dd:2b:55:79:c7:ec:7c:31:17:03:fb:d5:43:56:48:91:ac:72:
b3:85:c2:da:49:8b:72:3a:33:d9:ba:a8:0d:7b:df:86:d3:c9:
20:10:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:54 2025 by rpki-client