Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: mU5laKN4z1WtNWagTXFm+Fc4BR9XjLBI1mXzJrv955k=
Subject key identifier: 30:BD:85:38:CD:46:BE:D6:07:5F:9D:C8:C6:45:A8:3B:A3:17:97:E7
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 01984A4134BEF6692991A6CA7FDB775D2AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 05:00:44 +0000
Manifest this update: Sun 27 Jul 2025 05:00:44 +0000
Manifest next update: Mon 28 Jul 2025 05:00:44 +0000
Files and hashes: 1: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: dQs/nH+dJewQMGbl6fchc27Fco5zIZGTMCQYFtRI70w=)
2: cakGt0BPf0eiXSoum2ks2bU2JjU.roa (hash: SdKj2O/1M+1PiGNRUnkBd4BW4j8l343Ya8DxtNwWNfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:34:be:f6:69:29:91:a6:ca:7f:db:77:5d:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jul 27 05:00:44 2025 GMT
Not After : Jul 28 05:00:44 2025 GMT
Subject: CN=30bd8538cd46bed6075f9dc8c645a83ba31797e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:ac:6b:98:1f:74:fd:04:01:fc:bc:ce:5c:
ab:60:72:cc:dd:bb:8a:76:bb:1d:0b:3b:2d:e9:ba:
7d:4d:70:e6:dc:89:54:cb:ba:b5:ec:88:e3:59:0d:
7c:43:72:5d:3a:92:ec:de:a7:90:ad:5e:d5:97:71:
17:71:74:56:37:40:67:e1:0f:35:ed:11:65:db:9d:
09:42:50:57:b9:e5:8b:e2:ef:de:84:ed:d9:0f:f0:
c2:be:bd:5f:33:91:bd:66:97:fd:7b:8c:63:eb:a7:
7e:50:fd:f0:e3:c6:6c:fd:b9:1e:cd:ee:46:b3:92:
59:7c:c7:7c:05:b0:08:04:61:99:d5:27:48:a2:c6:
b2:30:91:89:d5:9a:7c:ca:3f:b5:29:16:b0:54:54:
87:d9:f3:81:90:65:54:c9:0f:49:21:02:80:d0:1c:
d6:01:f3:19:5c:37:3c:1e:e6:64:90:d5:15:6d:b3:
5c:4e:bc:70:8f:c8:4a:b9:c1:96:01:38:35:a4:a3:
16:81:35:a6:35:25:c7:c0:c4:ab:a6:7d:e3:62:64:
70:27:8c:35:73:2c:90:30:ce:88:f8:23:d0:ff:3e:
3c:3d:f6:fd:19:ab:ab:09:96:99:b1:c8:2a:93:aa:
78:2b:71:c2:1c:66:bb:4d:9d:bd:ba:05:a9:3f:7f:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BD:85:38:CD:46:BE:D6:07:5F:9D:C8:C6:45:A8:3B:A3:17:97:E7
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fc:8e:70:e5:64:8b:46:37:43:64:41:4d:f9:60:fd:91:08:
3d:e6:d7:f6:51:b8:70:79:6e:84:c9:84:85:db:3b:71:3f:3f:
a1:89:86:10:96:f4:fb:23:d2:1d:d1:e7:9e:b8:cd:b2:ab:43:
36:d6:05:b3:8e:c3:02:70:2f:1d:20:b1:2e:93:1a:66:90:69:
a7:4b:39:a5:47:7f:ad:ac:11:47:63:3b:e8:47:27:7c:a5:d3:
7b:81:b1:3d:b9:1f:aa:70:95:73:6f:cd:33:c4:17:75:d2:4f:
43:42:e4:c8:93:f9:0e:87:7d:76:be:1a:16:08:6a:82:01:a0:
44:6e:cd:84:9d:0b:63:5e:43:ea:29:a6:89:37:cc:52:e7:0d:
6a:8f:8f:3f:e4:de:b9:3b:67:b6:42:0d:bc:10:ce:07:7d:42:
fc:34:3c:47:01:5d:69:f7:ab:9d:71:ff:bb:ba:5d:6a:be:d6:
16:64:14:67:25:ea:81:c5:17:a9:63:f4:c8:53:08:d9:08:88:
6c:bc:8a:cf:0b:13:ba:33:bd:e4:68:b9:98:f2:8e:1d:8b:f1:
9a:7d:02:ad:1c:91:3d:5c:f3:14:40:70:c7:ca:9a:e6:5c:6e:
7f:7b:95:be:25:de:96:94:06:a0:fc:ca:d8:b8:32:49:70:8f:
7f:0d:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:40 2025 by rpki-client