Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
File: haz7mtOlDOFTMc_066iLzAe3ooI.mft (raw, json)
Hash identifier: oeZCQdEohuaFxJFe7wUlS8IfyYAUXSHn5BLoZ012APY=
Subject key identifier: FB:61:95:A9:DC:D4:64:F6:C9:67:94:54:3E:A6:C9:6C:A2:29:68:A9
Authority key identifier: 85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
Certificate issuer: /CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Certificate serial: 0198462D88DD5614AB5DD03F4761E296DF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
Manifest number: 0582
Signing time: Sat 26 Jul 2025 10:00:45 +0000
Manifest this update: Sat 26 Jul 2025 10:00:45 +0000
Manifest next update: Sun 27 Jul 2025 10:00:45 +0000
Files and hashes: 1: GNR7fo6zYUZ0aZ61h9x_BF8llVA.roa (hash: CFopZ6dmtVSvrmIdzz/ovM49rlPrGJS+jY6gLGQSqVo=)
2: haz7mtOlDOFTMc_066iLzAe3ooI.crl (hash: E6cFCnYbDuxCwZKwjKHYNaAskHHMO19Axo8cBkNSwnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:88:dd:56:14:ab:5d:d0:3f:47:61:e2:96:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acfb9ad3a50ce15331cff4eba88bcc07b7a282
Validity
Not Before: Jul 26 10:00:45 2025 GMT
Not After : Jul 27 10:00:45 2025 GMT
Subject: CN=fb6195a9dcd464f6c96794543ea6c96ca22968a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:2e:8c:60:7e:54:dd:e3:3b:b2:46:ae:76:
10:6e:1f:e2:4e:dc:90:9e:ad:42:dc:a7:e0:26:42:
8b:19:c7:4a:81:34:fa:e6:74:fc:cf:eb:b7:d8:d2:
39:b6:07:8a:6f:73:3d:a3:4a:f1:d4:48:46:3a:c1:
40:6b:f2:a7:00:04:a9:72:b1:b6:23:45:99:13:da:
d0:dc:62:94:21:be:c6:88:54:5a:c7:bf:a0:b7:f2:
4d:6c:f0:10:c1:5f:32:88:54:29:b8:5c:da:d5:24:
fc:43:03:d7:02:64:41:47:b6:c6:c6:93:6b:eb:7f:
07:b5:65:b2:ce:fc:d0:6d:3d:0e:b6:75:c9:27:95:
9c:2c:30:50:a5:a7:8c:65:57:d4:bd:cd:7b:c9:fd:
e7:a7:90:2e:45:21:59:92:b6:9c:14:d7:68:40:ed:
ef:5e:a1:4d:fe:16:ed:e5:5a:db:e5:5f:5c:54:04:
db:b2:c4:61:65:b3:bc:b8:6a:cd:d8:52:b6:17:eb:
06:ce:9c:fb:83:0b:ec:a0:66:12:0c:71:17:db:59:
50:06:79:52:c8:bd:fb:ae:ff:dd:f8:b6:fb:68:5b:
55:15:1a:fe:8b:98:6f:b0:2b:09:8f:51:82:ea:38:
bf:e5:7c:3c:d4:28:e9:38:14:b5:8e:b5:4b:f3:fb:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:95:A9:DC:D4:64:F6:C9:67:94:54:3E:A6:C9:6C:A2:29:68:A9
X509v3 Authority Key Identifier:
keyid:85:AC:FB:9A:D3:A5:0C:E1:53:31:CF:F4:EB:A8:8B:CC:07:B7:A2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haz7mtOlDOFTMc_066iLzAe3ooI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0bed52-b7cc-414a-9c88-6d77f065a2c3/1/haz7mtOlDOFTMc_066iLzAe3ooI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:82:00:18:8c:2e:2e:d7:d9:fc:30:c9:4d:29:a4:1c:70:
d9:c9:d0:74:e5:28:c0:78:ea:6d:d0:11:78:c0:01:8e:e8:f3:
42:f8:f0:32:0f:2a:4b:b5:7c:c1:2c:bc:19:30:49:6b:8f:3b:
5a:4c:3b:af:b3:33:57:06:02:19:9b:82:a2:51:4c:5b:3c:c6:
54:06:b5:65:86:55:8e:94:c7:ee:84:b0:77:cb:51:d5:5a:d7:
a7:b5:f3:59:b9:61:50:09:fb:b0:ac:e0:3f:49:8c:80:ce:58:
c8:fa:c5:25:fc:33:e9:c1:6c:8c:02:bb:83:68:fb:24:32:82:
e3:87:19:01:81:49:6b:75:f2:83:bb:48:4b:16:4e:af:20:31:
fc:75:b2:73:a4:f1:50:ef:be:17:e8:b5:05:cf:3f:64:e9:a1:
58:a6:d2:3a:53:d9:8e:b6:53:7a:e1:9c:2b:a0:6a:31:4f:db:
ad:5f:1a:9f:98:89:58:f3:b5:96:a2:02:57:11:73:96:29:6f:
ec:14:5e:c5:f0:89:c6:e5:19:ee:29:1b:86:28:1d:cf:17:65:
c7:09:4c:33:36:c3:16:08:1b:6b:0d:93:35:fc:21:85:7e:a2:
36:26:61:28:34:cc:b7:f4:ed:4a:9c:54:57:b5:87:38:b1:74:
d7:a2:9a:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLYjdVhSrXdA/R2Hilt9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWNmYjlhZDNhNTBjZTE1MzMxY2ZmNGViYTg4YmNjMDdi
N2EyODIwHhcNMjUwNzI2MTAwMDQ1WhcNMjUwNzI3MTAwMDQ1WjAzMTEwLwYDVQQD
EyhmYjYxOTVhOWRjZDQ2NGY2Yzk2Nzk0NTQzZWE2Yzk2Y2EyMjk2OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rkujGB+VN3jO7JGrnYQbh/iTtyQ
nq1C3KfgJkKLGcdKgTT65nT8z+u32NI5tgeKb3M9o0rx1EhGOsFAa/KnAASpcrG2
I0WZE9rQ3GKUIb7GiFRax7+gt/JNbPAQwV8yiFQpuFza1ST8QwPXAmRBR7bGxpNr
638HtWWyzvzQbT0OtnXJJ5WcLDBQpaeMZVfUvc17yf3np5AuRSFZkracFNdoQO3v
XqFN/hbt5Vrb5V9cVATbssRhZbO8uGrN2FK2F+sGzpz7gwvsoGYSDHEX21lQBnlS
yL37rv/d+Lb7aFtVFRr+i5hvsCsJj1GC6ji/5Xw81CjpOBS1jrVL8/syxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPthlanc1GT2yWeUVD6myWyiKWipMB8GA1UdIwQY
MBaAFIWs+5rTpQzhUzHP9Ouoi8wHt6KCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgt
NmQ3N2YwNjVhMmMzLzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYmVkNTItYjdjYy00MTRhLTljODgtNmQ3N2YwNjVhMmMz
LzEvaGF6N210T2xET0ZUTWNfMDY2aUx6QWUzb29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGCCABiM
Li7X2fwwyU0ppBxw2cnQdOUowHjqbdAReMABjujzQvjwMg8qS7V8wSy8GTBJa487
Wkw7r7MzVwYCGZuColFMWzzGVAa1ZYZVjpTH7oSwd8tR1VrXp7XzWblhUAn7sKzg
P0mMgM5YyPrFJfwz6cFsjAK7g2j7JDKC44cZAYFJa3Xyg7tISxZOryAx/HWyc6Tx
UO++F+i1Bc8/ZOmhWKbSOlPZjrZTeuGcK6BqMU/brV8an5iJWPO1lqICVxFzlilv
7BRexfCJxuUZ7ikbhigdzxdlxwlMMzbDFggbaw2TNfwhhX6iNiZhKDTMt/TtSpxU
V7WHOLF016Kafg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:04:58 2025 by rpki-client