
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: DlHdYw5mzZjOoF4AqfO81Ux4wD8pCbCzk+Irshkfbj0=
Subject key identifier: B2:47:7E:1E:F8:AB:12:8C:CC:7E:C3:AF:8F:15:C3:F9:98:78:52:78
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 01975AC99301A87BBC93ABB7B1FDB2F101BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 17:00:49 +0000
Manifest this update: Tue 10 Jun 2025 17:00:49 +0000
Manifest next update: Wed 11 Jun 2025 17:00:49 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: DXIzXjNjL4YILjFGsAYRTbYEC7hMg6N5LaCwuU5ZKPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:93:01:a8:7b:bc:93:ab:b7:b1:fd:b2:f1:01:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Jun 10 17:00:49 2025 GMT
Not After : Jun 11 17:00:49 2025 GMT
Subject: CN=b2477e1ef8ab128ccc7ec3af8f15c3f998785278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:23:a0:7f:2f:09:e2:40:69:52:c5:d2:f4:c0:
dc:1e:39:c8:f7:83:0a:81:6e:c1:ed:81:51:39:a3:
bd:ab:15:80:98:b4:be:8d:0a:f9:4b:76:a7:4c:3b:
da:b9:fa:cc:a5:e1:be:de:ef:fe:1e:5f:2b:88:b1:
54:f8:11:ee:a4:c5:4f:f9:e0:f9:e2:53:98:22:99:
96:bc:53:eb:70:70:3b:cb:4c:09:48:7c:59:ec:ff:
72:d5:dd:80:55:47:af:5c:08:e9:0e:50:aa:9e:77:
0f:b0:71:7a:67:70:29:0b:d6:67:53:68:fb:5c:4d:
ae:57:d5:a4:b6:e1:d4:68:08:13:29:df:38:cd:2e:
3f:74:83:9b:8c:f5:32:1e:76:24:ca:11:b6:ba:84:
fb:bb:c1:4c:b8:13:e7:76:00:8a:59:96:e6:71:f3:
7c:c1:96:9d:67:e6:0c:c2:a0:ce:bb:aa:4e:3d:25:
a2:24:c1:9e:2e:52:d2:f8:f7:41:f3:4c:27:fb:a1:
8b:17:21:65:25:84:f9:4a:ce:01:90:e0:96:7d:7c:
cc:d5:47:65:07:67:05:2d:13:47:10:31:ca:42:83:
93:f0:2d:05:d4:a8:42:5c:5f:54:a9:d2:43:11:14:
c1:8a:a8:a1:64:cd:a2:ec:37:d7:10:26:1f:19:a5:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:7E:1E:F8:AB:12:8C:CC:7E:C3:AF:8F:15:C3:F9:98:78:52:78
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:cc:b2:c8:4b:68:32:54:9e:10:43:89:e6:39:68:30:40:
a4:28:d4:10:98:12:42:26:ae:83:8b:61:07:4f:d5:c9:ce:eb:
ae:26:77:3d:e6:23:c7:0f:29:29:f4:a8:a7:3d:6e:73:6a:c2:
b2:eb:20:72:6d:18:44:7d:4b:66:e9:4c:ab:9a:ea:16:3d:62:
6d:16:c2:f9:c5:66:f4:36:8c:72:c6:af:f8:ee:45:6b:ca:f4:
fa:0b:fd:86:51:36:8c:ff:9e:b2:20:54:bc:be:52:3c:8f:d0:
db:d8:df:e0:47:9e:43:9d:a4:2c:eb:47:ff:bc:8d:56:56:e3:
b7:0a:7a:31:fb:38:62:cc:f7:e6:b3:e7:33:f1:90:5f:12:9c:
7c:6d:88:29:36:b1:af:51:3d:b8:e3:60:33:02:06:31:80:00:
b2:44:40:ec:19:15:a0:a4:8a:c6:38:1a:eb:c3:1c:1c:a9:7f:
dc:31:75:29:9a:b9:f1:b4:f6:f7:27:1a:9e:42:6b:00:0b:a5:
82:b9:42:20:68:ad:d0:e5:e0:bc:52:7e:ec:4a:ce:96:d0:cc:
56:2c:67:15:2b:74:4e:8a:37:d6:61:54:a0:a3:40:cf:f9:92:
27:9a:6b:cb:37:00:9c:2b:24:1b:6a:83:2c:37:16:56:aa:5b:
ba:6a:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:03:33 2025 by rpki-client