Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: LetYA5hnFmHzPN9FN6m8QhtcVdpkvQxj5ebpmdyhFw4=
Subject key identifier: 5F:61:6A:08:F7:E2:49:CD:AE:16:FD:4E:C1:22:1F:CA:35:6F:66:4E
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0198E5D36CD76A1F6A03BA13B8BE7975AF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1328
Signing time: Tue 26 Aug 2025 10:01:35 +0000
Manifest this update: Tue 26 Aug 2025 10:01:35 +0000
Manifest next update: Wed 27 Aug 2025 10:01:35 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: pjS619TNYOb0joir4bXouduUlNCp4/rkC9ElmTjB7Qk=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:d3:6c:d7:6a:1f:6a:03:ba:13:b8:be:79:75:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Aug 26 10:01:35 2025 GMT
Not After : Aug 27 10:01:35 2025 GMT
Subject: CN=5f616a08f7e249cdae16fd4ec1221fca356f664e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:d9:7a:69:47:10:dd:93:11:48:02:a0:07:
37:6a:e9:07:dd:da:b4:65:cb:80:47:14:ad:65:7d:
34:3b:48:07:56:04:f2:ce:ca:33:f6:86:dc:52:11:
67:65:51:46:17:85:0c:50:15:20:9b:3a:07:c4:b3:
e6:14:30:28:ec:e1:05:f1:f0:93:1a:94:d6:74:f0:
9c:4e:96:3d:15:8d:73:79:d1:99:44:6a:ee:89:29:
5c:e7:ef:7f:e5:cc:84:44:db:f2:d2:63:98:61:67:
df:7b:18:fb:5a:84:bb:e8:f6:9f:d8:fe:8a:da:80:
bb:9e:3c:d2:fd:0e:0d:dc:f5:0e:92:74:91:ad:47:
aa:cf:d6:95:48:78:fa:de:9c:69:17:2e:e7:fa:e8:
06:e7:bf:19:75:c8:c7:e4:b2:7f:0b:91:1d:df:0e:
30:b4:e5:b6:3a:17:db:36:5d:9c:ee:37:26:bc:96:
0c:15:61:85:f4:38:44:ee:fa:f9:d8:0f:d7:72:38:
38:fa:9f:b5:7c:c3:8d:c6:24:d7:80:37:96:7d:ed:
9e:4c:97:d8:94:a1:77:0c:4c:db:1f:75:0b:30:7d:
bd:3c:6b:21:26:af:95:51:a9:d8:ad:aa:84:4e:09:
94:5d:98:20:a8:5e:16:ff:dc:68:21:86:56:53:05:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:6A:08:F7:E2:49:CD:AE:16:FD:4E:C1:22:1F:CA:35:6F:66:4E
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:77:bc:53:59:51:25:72:a2:b1:fc:73:5f:91:22:09:a8:48:
fd:9c:4a:2d:9c:e9:3a:87:b3:92:81:d1:5a:13:45:76:8a:ae:
4a:ba:47:15:06:8d:ad:9c:06:f0:ba:80:d0:4e:ad:52:ab:45:
9b:0a:4f:1c:a2:ed:b2:11:d7:73:fa:d5:d0:9a:32:fc:04:40:
1c:b1:cf:f9:57:18:0f:60:07:fd:06:ee:b8:39:21:5c:98:3a:
61:ed:72:a9:ec:98:9a:ef:df:d4:d9:de:e6:34:a2:12:d7:71:
84:1a:0f:58:a3:8b:c8:bf:4f:d4:23:7a:7d:f4:60:5b:87:a2:
01:70:0d:ed:25:a7:0e:9b:1b:fc:07:32:31:1c:47:1b:c8:1b:
25:71:1e:68:cf:9a:29:38:8b:7c:35:cb:38:ed:d6:36:dd:69:
7c:61:d2:57:df:52:5a:c8:19:47:e4:e5:63:5b:8d:75:e7:be:
64:4d:ae:dc:bf:12:85:d0:7d:b9:3d:06:0f:8a:39:56:1f:86:
af:f6:57:08:df:23:14:4f:95:fb:cc:22:6a:97:36:f5:14:dc:
53:e3:38:53:92:52:e0:59:c8:4c:c2:59:bd:38:de:67:4e:b4:
72:18:c7:8e:4b:5d:df:5d:15:7e:29:9c:b9:fa:50:12:c6:d4:
26:fe:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 13:16:04 2025 by rpki-client