Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: Bbt894NxZDWrDLacF8WuORuREQNV2fK3QQWlDl8jWQU=
Subject key identifier: 6A:9A:55:16:6E:E7:67:D1:4F:CA:E9:78:C9:FF:C2:AD:7B:40:6F:6D
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 01975234CA541583042EA92C076F1F1A99AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1257
Signing time: Mon 09 Jun 2025 01:01:20 +0000
Manifest this update: Mon 09 Jun 2025 01:01:20 +0000
Manifest next update: Tue 10 Jun 2025 01:01:20 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: 6/1cEaCdCxW2ELyISA5ALuExjVLMMg3+0YXVfuR4W7s=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:ca:54:15:83:04:2e:a9:2c:07:6f:1f:1a:99:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 9 01:01:20 2025 GMT
Not After : Jun 10 01:01:20 2025 GMT
Subject: CN=6a9a55166ee767d14fcae978c9ffc2ad7b406f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:85:15:4a:3c:31:84:00:82:ea:ed:82:24:
f3:90:3e:27:00:22:ac:5d:97:9a:2f:32:88:73:68:
bb:a2:67:32:e5:73:87:9c:bb:e2:6a:e1:f1:f3:7d:
9f:7e:71:65:15:56:96:29:c7:9c:9e:44:95:a7:b7:
8f:5f:91:27:30:9a:ee:19:9c:43:10:84:a1:21:9d:
2f:a1:de:01:82:5f:54:7c:9d:d9:54:1b:23:15:4d:
14:2d:bb:6c:0c:70:de:bb:53:e3:c1:af:2d:a5:93:
37:c5:0d:e3:6d:cc:8d:1e:ea:47:1a:8c:83:78:c7:
e4:29:38:1f:d1:05:ec:b9:62:41:db:69:4d:d5:1d:
67:51:13:0f:e5:97:eb:32:44:07:41:43:4d:43:1d:
88:89:06:46:0b:cc:9a:50:1b:d8:83:81:5a:3d:96:
64:a0:ce:97:ab:c2:d8:5f:39:c2:99:de:be:65:9e:
35:54:cb:41:a9:d8:c0:b4:5f:65:64:db:33:69:dd:
95:d3:3a:a5:d3:66:01:a6:b3:85:be:5d:40:38:7f:
fc:19:a9:43:f9:67:a5:1c:de:45:e8:7d:fc:03:04:
27:21:e0:11:30:7c:bd:4a:59:0d:9a:b8:10:e1:09:
83:ed:78:cb:df:87:97:9b:3a:18:52:5f:14:8b:49:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9A:55:16:6E:E7:67:D1:4F:CA:E9:78:C9:FF:C2:AD:7B:40:6F:6D
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fc:52:e9:be:12:43:dd:0b:a4:52:bf:72:56:4c:7a:23:d4:
73:6a:ee:30:9f:17:99:b3:20:03:49:ea:be:12:87:97:0b:90:
8a:fc:53:73:d1:fd:5a:0c:f7:b4:d0:91:a4:03:9a:26:ee:87:
55:7a:5e:6b:45:61:a1:45:30:3a:27:9c:48:6e:b1:15:e0:8c:
85:aa:8a:15:20:97:ab:c6:1a:6b:93:d4:bd:47:0e:c7:21:82:
cd:22:3f:13:81:4b:77:30:cd:d1:5a:b6:1d:d1:c4:fd:30:a3:
a8:b7:98:9d:ff:aa:09:28:ea:19:a9:a2:69:b6:1e:ba:6e:1a:
80:4d:fa:5a:11:79:1e:0e:83:56:d6:f0:f0:51:43:e1:ca:1d:
7b:6f:4b:3b:36:14:3b:8e:3e:d7:92:56:30:0e:da:50:5e:9c:
3b:72:54:d5:df:b0:cf:43:b5:07:ea:6d:ed:24:60:bc:53:70:
19:f0:8f:41:31:26:6b:40:49:f9:fb:34:23:7a:e5:ca:76:8f:
34:b5:e0:8a:84:ee:32:6f:0e:df:ae:da:00:87:73:7f:aa:ea:
01:ca:00:80:af:bd:3f:9e:78:de:20:a2:64:58:b3:7b:a3:02:
50:eb:2f:c8:13:4c:f3:10:c5:2f:3b:41:1c:ee:68:b4:11:56:
94:d7:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:25:02 2025 by rpki-client