Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: XzUjnTX4FBUg4Vyo0YY5awafavvJ5Nl613yBln+d9cw=
Subject key identifier: A8:7F:FD:6C:23:08:0E:D6:36:28:49:7D:4A:CE:88:E2:75:77:66:97
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019747E72D56162D8C14CAADCFC513334137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 01:00:21 +0000
Manifest this update: Sat 07 Jun 2025 01:00:21 +0000
Manifest next update: Sun 08 Jun 2025 01:00:21 +0000
Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: axzNepoocV2iRBRCctIG3u+TqryhLtJeLUuaSw52k0w=)
3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:2d:56:16:2d:8c:14:ca:ad:cf:c5:13:33:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Jun 7 01:00:21 2025 GMT
Not After : Jun 8 01:00:21 2025 GMT
Subject: CN=a87ffd6c23080ed63628497d4ace88e275776697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:47:c7:bc:91:f1:a1:7f:be:80:13:b3:f1:
4e:d9:e5:1b:df:3f:96:49:02:9a:95:8b:ef:43:db:
6e:e6:2c:c5:e3:77:6f:c1:ce:d9:ad:0e:10:7f:5f:
42:44:9c:02:dd:28:c2:06:d5:92:8d:f0:27:55:b2:
de:19:5b:3a:30:87:3e:fe:7f:2e:5f:84:7c:50:bd:
62:b1:7f:29:29:da:b0:e8:70:7e:0a:78:21:0a:9c:
dd:b3:d6:45:a8:27:c4:58:8f:40:82:c1:a5:7e:2c:
3a:be:0e:74:52:61:60:46:10:d7:c5:b5:e9:79:3d:
a8:96:e9:1b:09:09:4c:b7:94:99:24:dd:37:54:2c:
17:36:f5:d6:15:b4:90:ff:55:96:28:f4:db:41:65:
28:8b:4b:30:c3:d3:e4:73:bf:2a:e8:16:ec:cf:e9:
c4:4e:66:e9:53:8a:0c:9e:96:d6:6a:f9:ca:4b:d0:
a6:2b:9d:a9:06:96:0b:8e:bb:4d:6f:bc:78:bd:4b:
e5:55:18:a6:63:fc:fe:bb:ca:a9:09:7d:15:53:aa:
27:d2:c1:49:b0:0a:42:8c:b6:42:41:79:7e:09:a9:
ac:40:1c:e9:ef:67:3c:82:f1:6a:0b:33:9c:9e:0e:
db:0c:37:f8:0b:30:97:e9:4f:57:45:7f:4b:71:7f:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:FD:6C:23:08:0E:D6:36:28:49:7D:4A:CE:88:E2:75:77:66:97
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:29:46:91:cf:fb:e8:cf:77:53:ec:58:83:f9:dc:32:27:2f:
6d:b9:87:22:a0:57:26:de:5c:7a:3f:3e:34:25:94:d2:74:d0:
d4:cd:0a:e3:fa:ad:bf:9d:7d:02:e8:d5:52:f8:db:b7:83:4a:
96:c7:d1:0b:ab:40:69:be:fb:18:68:9c:cb:00:70:ce:33:bd:
1e:9e:36:f4:d2:6b:c2:ed:ea:de:f7:83:8a:a4:9a:03:26:d3:
04:da:7f:5e:b2:78:4c:b9:12:d7:fa:a0:4c:63:f9:10:fa:e5:
cc:68:1c:58:9c:82:e1:e6:f0:7f:d3:33:3d:ac:34:19:81:af:
30:08:b2:b5:51:c1:c2:42:f8:cf:60:04:4b:2d:22:d3:52:d8:
ea:72:67:5c:8f:15:c6:52:57:6a:f9:cd:42:a7:2e:ee:1e:84:
95:4c:c3:87:60:49:16:02:52:ce:5b:7b:41:7e:72:82:46:93:
7b:92:4c:8e:d2:2a:88:5c:a9:1a:ac:a1:c6:56:0e:39:dc:ee:
e3:4f:eb:93:36:97:8d:a1:28:00:51:c6:fb:de:80:e6:e5:4e:
d9:cb:92:a2:e4:25:e1:cc:b0:02:20:7e:98:a9:9a:77:90:b2:
cd:fe:46:ed:3e:d6:c8:35:6e:0e:6a:40:49:1f:8c:04:b7:c5:
7a:ae:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:24 2025 by rpki-client