Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: o2O1YdmEuzguGOK9JVXOyjTb/lEjcMx5UqaQJ+ALf0Q=
Subject key identifier: E2:88:C0:34:85:30:00:51:60:15:75:8F:7F:C7:03:07:97:88:F0:36
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 01974A43D8AA643D06CE294FA957BE8A7DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0D9A
Signing time: Sat 07 Jun 2025 12:00:49 +0000
Manifest this update: Sat 07 Jun 2025 12:00:49 +0000
Manifest next update: Sun 08 Jun 2025 12:00:49 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: lOiPul+R+KskZjRzj7t88OjgU7a6NVr6W/vVUfiGJRM=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d8:aa:64:3d:06:ce:29:4f:a9:57:be:8a:7d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Jun 7 12:00:49 2025 GMT
Not After : Jun 8 12:00:49 2025 GMT
Subject: CN=e288c034853000516015758f7fc703079788f036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:5f:4e:93:5d:2e:83:68:e2:04:2b:10:68:
55:1c:b0:78:ac:d6:fe:07:20:a9:f4:df:f2:3e:60:
96:cd:a8:40:26:d9:14:ec:07:2a:12:29:98:04:3b:
69:64:4f:4c:61:67:5d:de:6e:56:54:54:a1:68:23:
2c:c8:cc:f1:79:a0:68:c4:cb:f7:c6:91:13:e9:45:
4f:1d:7f:a6:f8:62:b3:cb:a0:ca:c1:3a:e2:38:a6:
68:57:b9:30:80:b7:6a:72:43:86:24:45:67:f7:d9:
89:f7:86:e0:13:e0:7a:34:0c:60:17:b6:e2:bc:de:
cf:6b:57:d9:0b:42:72:b3:fe:7f:ba:c9:69:50:fd:
5c:cd:48:f6:b4:a4:ff:23:97:5e:c6:9e:ef:4b:a7:
3c:f7:68:9e:e1:b2:de:ba:fa:d5:56:ff:57:a3:96:
5e:7c:42:1d:28:13:52:54:82:db:a0:40:f8:92:d1:
d0:ed:aa:64:5d:47:c9:69:b3:a1:4b:c0:65:45:07:
fb:60:a7:7b:06:ce:4a:23:a1:0e:f7:08:f7:cb:78:
fd:9b:d0:bf:56:2a:9e:80:88:6d:43:a2:49:cb:c1:
91:45:5a:7a:99:64:57:89:59:0c:6d:9f:90:af:b4:
a7:86:b3:e1:79:5a:15:1b:17:de:46:e9:18:bf:20:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:C0:34:85:30:00:51:60:15:75:8F:7F:C7:03:07:97:88:F0:36
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b3:84:d6:50:03:89:65:12:7f:9c:66:69:3f:da:fd:cf:1c:
ab:38:16:02:6c:2a:36:12:fa:c4:6f:0b:12:5c:35:92:b2:5a:
6b:42:08:b1:51:64:10:f5:52:25:31:4d:ce:34:e7:66:da:e4:
b3:69:70:91:c6:6c:e9:0f:de:14:63:97:d2:ba:db:2b:44:3a:
30:4e:8f:a9:a2:04:3b:02:75:26:86:cb:fc:14:07:7c:50:e6:
7c:1f:ad:3f:6f:41:95:e2:27:f6:e1:5c:e8:38:bc:b7:b9:ca:
81:3b:0f:e6:a4:86:7e:fd:a4:f5:b9:20:c1:8a:e1:b6:68:89:
4b:e3:3a:56:24:fe:85:82:68:19:08:54:c0:40:43:b0:d9:a0:
3e:08:04:c9:d9:fc:22:dc:5b:f7:eb:d2:cf:ee:9f:28:17:1f:
b9:1e:11:dd:a0:a9:11:05:98:f8:54:fc:35:06:a6:e8:d2:4c:
68:44:ac:42:c9:0d:21:d8:17:aa:83:1f:5f:a4:ad:c0:05:e4:
83:c6:fc:93:40:a1:9b:93:1a:03:1b:3c:53:de:fb:a9:09:d6:
8d:aa:2b:59:72:53:b8:1e:6e:9c:97:98:5e:2e:01:aa:ac:5b:
84:95:b7:f0:52:49:f6:7b:22:63:48:b2:90:c2:25:07:06:0f:
00:ab:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:23:30 2025 by rpki-client