Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: W5JLlDAhwNenrdVkXiw2JYruVUeUu4Z4wVNKSIov2XA=
Subject key identifier: 7B:E8:F7:E5:A2:07:C7:67:75:7A:AD:2D:8B:C5:A0:68:3E:D1:F4:A5
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 01992255DEE0E5674166ECF1F172C1A36F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 167E
Signing time: Sun 07 Sep 2025 04:01:16 +0000
Manifest this update: Sun 07 Sep 2025 04:01:16 +0000
Manifest next update: Mon 08 Sep 2025 04:01:16 +0000
Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: 2bJBumnZHN4iTCXCfkPKyJ+xPrvQpqlJAxUdzBxz3aI=)
3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:de:e0:e5:67:41:66:ec:f1:f1:72:c1:a3:6f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Sep 7 04:01:16 2025 GMT
Not After : Sep 8 04:01:16 2025 GMT
Subject: CN=7be8f7e5a207c767757aad2d8bc5a0683ed1f4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:34:ef:53:21:4e:f4:a0:fa:4d:7a:61:c3:
4a:65:f7:14:cd:10:c5:68:54:3a:82:48:03:3e:af:
67:8f:8f:5a:a4:a2:d0:b7:58:2b:5a:94:11:06:1d:
bb:24:b9:2b:60:1a:5d:d2:fc:dc:e6:3f:9a:08:24:
df:9b:73:0a:99:e4:8b:56:6d:1b:d5:32:90:26:c7:
db:27:3c:09:b6:a0:29:31:89:4d:e4:e8:dc:f2:ea:
20:02:e5:d3:e8:d1:7c:dc:a4:90:50:d1:31:53:54:
32:62:e1:2a:3a:97:62:3a:99:b0:57:3c:13:d4:1a:
84:c1:41:3d:a2:42:8a:90:42:2d:a8:f1:24:ae:8c:
57:cd:2f:38:05:5e:56:d1:e2:b9:f2:7d:39:02:b7:
bb:fe:bc:46:48:d7:3b:a3:24:73:1d:54:37:ea:a0:
32:a4:cc:52:c0:0e:d0:d4:33:b1:a4:1a:f1:75:5a:
5d:01:c9:c4:4d:21:e5:db:8f:64:c2:6b:2e:b1:aa:
38:21:b4:74:df:e8:16:db:f6:a8:60:57:77:2e:f3:
2e:58:c6:c4:ad:fd:49:58:f3:34:e1:d1:b7:fa:5a:
85:a6:2b:fa:10:ea:a4:55:c6:81:c3:fc:d6:95:ae:
39:6b:da:ee:56:61:55:79:ac:6d:a9:bc:00:30:60:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:F7:E5:A2:07:C7:67:75:7A:AD:2D:8B:C5:A0:68:3E:D1:F4:A5
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a1:19:98:ed:9c:5f:06:c8:e2:e5:3b:e2:36:d0:58:dc:e4:
c1:44:a2:e5:24:13:5a:ae:a2:03:13:4b:5d:2f:33:db:1a:f0:
20:ba:00:d4:44:73:57:e5:62:8f:4a:1f:b1:52:69:4b:5f:4e:
89:74:c6:5c:81:3f:bd:94:1b:52:ab:1a:98:61:9b:15:01:da:
df:74:95:e3:ae:9f:6b:f8:e0:70:52:ed:48:49:87:e7:58:3d:
c2:50:a3:69:1f:58:e3:46:07:f3:9d:0d:b9:6f:03:b0:0f:c3:
8a:dd:63:97:eb:bd:f3:91:0b:6d:64:ec:b9:02:56:3e:b6:f3:
a2:5d:d1:e8:ec:71:e6:e1:7b:cc:c2:25:c3:3d:df:4b:d6:2e:
c8:4f:39:40:9b:73:94:f2:95:a4:08:c9:46:5e:a7:ab:b5:8e:
70:f4:40:d5:5c:f7:d9:20:3f:6f:09:b7:c4:99:1d:9b:b7:19:
3f:d5:39:4f:1b:49:82:55:47:6d:24:36:fb:89:25:4c:c8:fa:
52:9b:6e:8f:2b:e8:40:85:a6:bc:c3:e9:da:bc:2c:64:88:1c:
52:7f:fe:4e:96:78:42:19:a9:26:d0:49:ef:f9:7b:6e:c0:ed:
70:fa:bf:ce:0a:26:6c:ef:f8:a6:ff:92:21:7f:fc:74:38:47:
6e:d0:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:03 2025 by rpki-client