Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: zJ7uTxWuV6emLllmWDMlp92XYYB+C3JuWPzE4hQEU1A=
Subject key identifier: CF:8C:F4:5E:FE:AA:4F:A1:0B:AE:7F:0E:A9:01:96:C8:FB:18:60:39
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0197580060EE4C41FE9932D02078C623B54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 125A
Signing time: Tue 10 Jun 2025 04:01:49 +0000
Manifest this update: Tue 10 Jun 2025 04:01:49 +0000
Manifest next update: Wed 11 Jun 2025 04:01:49 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: brcayyzJQCwk4082PAGcufi/CbyCQAkodetQvhVAanw=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:60:ee:4c:41:fe:99:32:d0:20:78:c6:23:b5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 10 04:01:49 2025 GMT
Not After : Jun 11 04:01:49 2025 GMT
Subject: CN=cf8cf45efeaa4fa10bae7f0ea90196c8fb186039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:63:7d:5f:9d:b9:15:8b:2d:be:03:7e:6a:
aa:50:f3:e2:5b:83:5e:ca:48:f0:43:a3:68:dd:c5:
78:cd:b7:7a:6f:c5:4b:05:66:e8:bd:da:3d:21:fe:
76:a8:b4:68:a7:e9:3a:30:ab:ed:c3:6d:d5:d9:55:
b4:c0:0d:85:78:ff:74:05:df:d6:4c:45:a8:59:93:
76:cf:88:87:43:81:a4:3e:f5:3b:fd:88:aa:a6:f5:
85:f0:d7:ba:f1:4b:b9:6f:5c:3b:80:a3:9e:49:3c:
6b:83:0d:ca:2e:77:f7:ba:be:fd:6e:a3:82:6e:35:
cd:39:7c:d9:78:67:d6:d5:7a:01:fb:54:75:7e:67:
7c:c8:c1:ba:60:5c:f7:c9:f8:50:32:16:4c:32:31:
f4:2f:92:40:78:04:e5:f2:8e:50:24:79:5a:f0:98:
8d:b4:a2:67:ef:59:81:bc:40:1a:ff:9f:cb:ca:79:
c3:64:1c:03:ef:b6:f0:c0:17:57:c1:d4:a3:c4:cb:
41:41:ff:dc:24:ef:50:34:c6:67:c6:c2:04:bf:37:
9f:d5:1b:5e:9f:20:9e:21:44:51:82:62:d3:47:47:
8a:c1:98:3f:2b:50:04:42:7b:bb:7d:24:51:4c:29:
a2:d9:1f:35:84:72:47:92:9f:57:01:36:06:89:95:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:F4:5E:FE:AA:4F:A1:0B:AE:7F:0E:A9:01:96:C8:FB:18:60:39
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:27:6b:c3:8a:05:78:e2:ea:e0:33:bd:93:e6:06:7e:a6:c8:
75:e3:e8:6f:9c:4e:82:e6:14:64:05:28:46:6c:08:5c:80:56:
09:88:5d:8b:86:b8:fc:f8:16:d9:dc:5f:ea:f1:1e:46:b9:85:
23:27:fd:34:38:3f:c9:6d:21:f3:83:dd:3f:69:1d:97:44:8b:
17:fa:0c:83:55:d7:87:de:9a:dd:a8:75:cc:13:c3:2b:ac:90:
d8:69:d8:98:36:a9:a0:e8:d9:bd:d6:eb:48:fe:bd:d5:ab:84:
b0:22:16:a4:2e:fa:25:a3:77:4a:da:47:75:e0:24:80:f5:0f:
bd:2a:3b:e3:66:a1:2d:72:f0:3f:4b:1a:6b:55:00:2d:a9:5c:
0c:b7:14:06:8c:cf:67:e5:97:4e:5e:bb:bc:28:55:26:5b:6d:
ec:df:b2:92:7e:8c:3e:59:c8:14:89:d7:74:a4:b8:48:ed:9c:
95:0a:64:ff:f3:b3:cf:d0:4c:ed:f8:bb:90:78:40:f0:e4:52:
c8:f1:f5:d5:67:e3:26:07:93:e1:f0:c6:c1:b1:f9:fa:17:06:
8b:de:9f:f1:a8:db:ea:ab:59:a8:c1:4b:5a:80:19:93:66:6b:
ab:8e:07:a3:8c:0d:c7:60:a4:d1:0f:94:a3:b0:22:da:b4:93:
69:c4:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:43:16 2025 by rpki-client