Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: wgO8oF3/+Po7AT1UCtLtkIkLOO+2wZ6YyKe/tm4JMwI=
Subject key identifier: 1F:DA:6E:7A:3E:E6:FA:70:D3:F5:F1:84:A5:1E:F2:42:B2:C8:84:F3
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 01965B709BDFBBF391EEC88C78939D57139B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 11D6
Signing time: Tue 22 Apr 2025 03:00:28 +0000
Manifest this update: Tue 22 Apr 2025 03:00:28 +0000
Manifest next update: Wed 23 Apr 2025 03:00:28 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: 21+4T3DO8Mu2DGD2SVZyWhwybtY67VmLuw7Q6T+bDLw=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: HiXwFWaPzRWDb6Zauf5Z5EdAs3E.roa (hash: 74lujDzOZ3dVJtH+CV4yLBEU59EeNeO0W4GkJWf9zl0=)
5: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa (hash: WKx5lXERuzuyJlW2GtZvrlS+h+sYN+rRqH+hf6H2l+Q=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:9b:df:bb:f3:91:ee:c8:8c:78:93:9d:57:13:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Apr 22 03:00:28 2025 GMT
Not After : Apr 23 03:00:28 2025 GMT
Subject: CN=1fda6e7a3ee6fa70d3f5f184a51ef242b2c884f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:32:95:1d:52:f4:d5:b9:df:87:e4:97:73:
a8:71:0a:29:7c:d1:28:44:1b:f1:eb:67:e0:e0:77:
25:45:67:6b:22:3b:1e:1a:94:4e:ab:57:73:06:5e:
c6:6e:87:48:4a:fb:87:50:3e:28:72:d6:44:74:2b:
2d:50:83:a2:34:ac:db:00:1f:fb:90:32:65:92:f5:
93:e7:30:25:37:74:f3:f0:f7:63:4f:ae:26:bd:ca:
65:e3:7b:4f:21:61:08:fd:c5:32:a0:b8:11:b2:d7:
58:dc:f6:e1:9e:c8:c0:9b:5f:e9:b2:47:51:42:01:
7e:46:bd:b4:51:7c:da:99:e8:cc:7a:fb:6c:0f:66:
58:b7:87:c3:5f:a5:2a:9e:2c:a0:08:b1:50:fb:0d:
12:2c:9b:76:7c:4a:71:85:94:c9:3b:a3:c2:02:33:
59:88:14:76:ff:f9:c9:75:36:90:07:18:ee:7e:72:
c0:e6:27:33:61:db:bd:b2:55:c2:b8:23:98:97:57:
a7:9f:72:ad:5b:ce:6b:d6:ec:ba:ef:8b:cd:0a:78:
b5:b9:27:fb:08:f7:55:a3:f6:c3:b2:8c:78:28:f0:
78:d2:85:d5:2f:0b:b0:ca:ae:2f:77:bd:7c:7a:0f:
fd:47:a2:8d:9e:b8:2e:d3:8b:51:97:b5:f7:96:1b:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:6E:7A:3E:E6:FA:70:D3:F5:F1:84:A5:1E:F2:42:B2:C8:84:F3
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:01:3c:53:0f:50:54:6c:7f:31:7f:fa:77:73:cd:f5:b5:ff:
6b:a3:bd:17:24:4f:84:82:de:f0:77:0a:89:39:b5:66:49:cb:
ec:d9:26:4f:95:f2:58:22:1c:90:eb:81:23:8f:fb:d7:8c:95:
ab:03:bb:8a:25:72:fb:bb:32:60:48:c6:ed:52:6c:ae:25:01:
ae:1b:37:cf:25:55:6c:47:c8:9a:38:3d:61:f9:52:23:13:48:
91:86:83:df:da:ae:02:c5:a3:df:aa:a5:c3:3c:f6:87:06:90:
ba:4a:df:32:38:53:b2:73:4e:58:4d:fa:65:c5:7c:f0:1e:1e:
da:5d:26:27:97:da:c2:be:87:49:8f:08:61:c0:6f:8c:11:d5:
6d:09:1b:77:8a:02:0d:a1:ef:83:83:d5:6a:aa:f8:b3:62:84:
14:01:e3:d3:96:2d:bf:6e:b0:93:38:0f:37:62:44:49:8f:74:
e6:a0:ce:c7:7b:c3:ad:c2:1b:6b:3a:d7:db:1f:92:78:02:99:
e3:c2:0a:ad:b0:00:ef:a4:b3:30:27:7d:dd:dd:0e:6c:a9:e6:
d7:73:d8:b3:c2:85:6d:74:d4:c9:71:8f:cf:aa:5f:9a:8c:9e:
cf:48:5a:d4:d7:92:f6:1c:32:b7:a6:ab:36:12:ff:66:86:89:
91:58:e2:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcJvfu/OR7siMeJOdVxObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjUwNDIyMDMwMDI4WhcNMjUwNDIzMDMwMDI4WjAzMTEwLwYDVQQD
EygxZmRhNmU3YTNlZTZmYTcwZDNmNWYxODRhNTFlZjI0MmIyYzg4NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4IylR1S9NW534fkl3OocQopfNEo
RBvx62fg4HclRWdrIjseGpROq1dzBl7GbodISvuHUD4octZEdCstUIOiNKzbAB/7
kDJlkvWT5zAlN3Tz8PdjT64mvcpl43tPIWEI/cUyoLgRstdY3PbhnsjAm1/pskdR
QgF+Rr20UXzamejMevtsD2ZYt4fDX6UqniygCLFQ+w0SLJt2fEpxhZTJO6PCAjNZ
iBR2//nJdTaQBxjufnLA5iczYdu9slXCuCOYl1enn3KtW85r1uy674vNCni1uSf7
CPdVo/bDsox4KPB40oXVLwuwyq4vd718eg/9R6KNnrgu04tRl7X3lhtMTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/abno+5vpw0/XxhKUe8kKyyITzMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQE8Uw9Q
VGx/MX/6d3PN9bX/a6O9FyRPhILe8HcKiTm1ZknL7NkmT5XyWCIckOuBI4/714yV
qwO7iiVy+7syYEjG7VJsriUBrhs3zyVVbEfImjg9YflSIxNIkYaD39quAsWj36ql
wzz2hwaQukrfMjhTsnNOWE36ZcV88B4e2l0mJ5fawr6HSY8IYcBvjBHVbQkbd4oC
DaHvg4PVaqr4s2KEFAHj05Ytv26wkzgPN2JESY905qDOx3vDrcIbazrX2x+SeAKZ
48IKrbAA76SzMCd93d0ObKnm13PYs8KFbXTUyXGPz6pfmoyez0ha1NeS9hwyt6ar
NhL/ZoaJkVjiXA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:36 2025 by rpki-client