Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: cS/mzUPbwOZBRxD0fuJlupd++6k0EcXE9gNg5LkSyec=
Subject key identifier: 54:02:34:E3:57:23:3F:B5:D7:96:10:32:47:5E:BD:B9:74:55:29:AD
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019747798026FD782B3DA6CDF904D34F9294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 1490
Signing time: Fri 06 Jun 2025 23:00:34 +0000
Manifest this update: Fri 06 Jun 2025 23:00:34 +0000
Manifest next update: Sat 07 Jun 2025 23:00:34 +0000
Files and hashes: 1: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: TPBIV1x+9JQ39rcIHwEEjOL9zLWTN63nty0tVRo3sCY=)
2: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
3: ozjUQxHmEATeBtgb_LyM3aKm4tQ.roa (hash: SCvwXmyf4wYWaXwbm/hei/KNEmH1H0hr2F8sJuDN8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:80:26:fd:78:2b:3d:a6:cd:f9:04:d3:4f:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jun 6 23:00:34 2025 GMT
Not After : Jun 7 23:00:34 2025 GMT
Subject: CN=540234e357233fb5d7961032475ebdb9745529ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:92:21:89:1b:f5:36:5a:dc:1b:6d:53:33:
da:39:99:31:04:b7:f0:1c:5f:70:1c:f0:fe:f1:ce:
ad:9b:a1:4b:1a:d4:6a:c7:5b:ef:3d:65:04:9f:a4:
82:5c:be:4e:c3:60:1a:8a:94:6f:ea:18:75:d1:b3:
35:8c:9f:a9:3a:2c:0b:cd:71:15:34:1b:ec:76:a2:
6d:9d:1a:0a:8a:07:a6:5a:aa:a3:6d:77:c1:d3:83:
d4:1c:c9:29:b0:65:04:af:e3:be:37:7e:4a:6d:d5:
29:3c:3e:c4:23:48:04:b6:34:3b:5f:54:99:2a:06:
60:b3:2e:b1:3c:9e:41:df:18:14:a5:da:7a:43:f3:
3f:70:aa:29:3c:4b:f1:d2:d4:54:27:c8:56:82:83:
d0:47:b4:2f:dc:bd:d5:59:61:65:eb:d8:a5:e0:67:
1a:20:c8:bd:56:17:97:c6:ef:68:bc:90:30:10:a6:
10:3d:22:ce:93:bf:65:61:58:a4:dc:77:67:b0:fd:
cf:2c:7b:93:7d:14:2b:7d:eb:ee:df:45:01:0b:b0:
85:f6:87:2a:e1:eb:b1:53:be:5c:38:30:c9:3f:92:
76:be:62:5f:cb:63:55:77:e3:e9:fb:43:23:e6:03:
7b:6f:0f:d2:4a:c8:88:0c:95:a9:af:66:d6:cf:f5:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:34:E3:57:23:3F:B5:D7:96:10:32:47:5E:BD:B9:74:55:29:AD
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:07:5d:cf:45:82:e4:df:17:50:23:cd:63:34:1d:49:7f:81:
33:c9:eb:06:f1:aa:0a:8e:ce:71:dc:bd:36:08:de:8f:aa:9b:
1a:7a:e3:61:c3:da:26:fe:ec:6b:9d:05:d7:8c:42:fc:85:00:
42:be:ab:14:ee:36:5b:b9:e6:b6:72:ed:d5:4c:00:34:83:a0:
2e:5e:82:54:ed:b2:12:bf:cf:58:32:2a:ae:57:47:30:b4:0c:
c5:7c:47:b6:75:c3:c6:7b:5d:4b:12:39:6f:c3:3f:f4:5c:63:
20:f1:2c:77:f0:cf:32:7c:71:83:a5:d4:a9:83:12:4e:a5:ff:
a4:b0:61:82:3e:55:4d:75:1f:c3:f2:44:15:51:9c:f4:f0:a9:
19:22:70:ef:9f:3b:b1:ce:ce:be:4c:27:42:c3:f4:75:b9:d9:
f8:10:7b:04:ff:ec:8b:f7:db:c5:0e:40:36:4a:96:b0:28:c3:
cd:36:07:20:d5:16:97:9b:a4:2c:c1:13:5e:89:20:45:49:b4:
a6:3e:eb:0d:95:76:20:6b:5f:b9:98:fc:f7:1f:27:56:e1:e5:
95:5b:72:d9:15:79:46:b9:3b:5c:78:97:b6:71:16:bc:84:8d:
b9:82:c3:17:5e:69:c1:13:73:7b:3c:93:77:43:41:ab:76:ea:
30:72:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:51 2025 by rpki-client