Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: jJVi8cUkzsmfiV7eH9Wm7XqJZTpY8MYDU1aLJBbqK2o=
Subject key identifier: 3B:57:B9:42:21:38:C5:99:BE:96:7B:52:AE:17:87:01:CC:81:89:86
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 01975BDC2F70BF34352BC8BEB197DDE8EDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 125C
Signing time: Tue 10 Jun 2025 22:00:45 +0000
Manifest this update: Tue 10 Jun 2025 22:00:45 +0000
Manifest next update: Wed 11 Jun 2025 22:00:45 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: iUrKUkcgOrmRp0fdOGcqKKv2tTrl0hv1IIV+2BCSVsw=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:2f:70:bf:34:35:2b:c8:be:b1:97:dd:e8:ed:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 10 22:00:45 2025 GMT
Not After : Jun 11 22:00:45 2025 GMT
Subject: CN=3b57b9422138c599be967b52ae178701cc818986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:84:dd:8b:5c:6a:6c:81:ff:e2:6b:ae:2b:
84:98:54:b3:85:11:24:b2:53:7c:3d:0b:6e:be:8a:
71:9c:32:06:11:09:22:32:9e:68:a1:17:9c:d4:55:
06:d3:86:db:72:05:ef:82:a0:f7:06:e7:8e:c6:dc:
db:7d:6f:3a:a1:db:d3:dd:0c:42:c8:e1:d6:12:0d:
d3:a1:67:64:67:6d:76:71:6e:b0:50:ee:e4:73:b5:
10:40:7a:5c:61:a9:be:7a:e3:84:08:a1:fd:e8:09:
b2:c7:50:66:32:e0:a9:80:e2:31:e7:96:1a:c8:70:
44:97:ea:3b:3a:03:17:91:6c:0e:b2:6e:b7:ab:19:
c5:d2:75:00:a1:74:ee:02:b7:a1:d2:89:be:f7:1f:
80:a2:d4:fc:0f:d0:5b:b7:e7:a0:fb:96:12:90:85:
84:f0:e7:2f:b6:9e:11:50:71:87:20:37:c0:a7:e6:
34:9e:9e:e4:92:ef:2f:98:2f:89:c8:5b:27:ee:ac:
b1:ca:a0:eb:08:53:7d:6e:36:01:4a:2a:4b:49:a7:
cc:58:07:fb:2a:49:1a:b3:c2:11:42:53:1c:06:bc:
3c:f7:17:6d:fe:18:0a:b3:d9:3b:0a:32:a2:e6:c4:
2e:43:91:e1:16:81:3b:65:9f:29:e4:f3:c6:93:44:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:57:B9:42:21:38:C5:99:BE:96:7B:52:AE:17:87:01:CC:81:89:86
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ec:93:56:cf:48:60:ae:f7:1d:3a:d5:37:af:2e:66:dc:3c:
04:44:50:69:52:7a:4c:dc:e5:39:54:f9:e4:7e:9f:14:cf:e0:
40:65:af:6b:d0:51:67:2e:a4:11:60:7e:f0:8a:77:e3:12:fa:
65:67:5a:3d:2d:1e:ef:f6:b2:c4:99:4e:08:26:47:72:c5:b3:
66:7d:b4:1f:81:3a:b5:ea:b8:e4:d4:95:63:da:bf:f4:f4:7a:
c8:87:bd:e2:a1:7b:ba:97:0f:de:d4:84:ce:be:5e:14:86:8b:
70:01:d7:d7:1f:79:51:ad:ca:b1:d7:d9:91:7a:80:0e:8b:59:
b6:d4:58:4b:7a:c0:9c:91:e1:bf:b4:f7:a0:ba:64:c5:e7:ba:
38:19:38:89:72:70:a5:6d:4c:a9:e2:32:93:4a:53:91:c1:24:
fa:ca:88:69:f2:8f:a5:68:47:eb:5b:85:61:51:c0:6f:5c:3b:
81:09:01:5a:56:b2:93:dd:c4:fc:c6:92:d8:eb:9d:69:eb:b1:
4d:db:1f:58:27:0e:20:3c:33:ee:a0:f5:39:33:fb:51:4a:12:
0b:50:97:a5:2f:0a:5e:9a:44:43:65:66:76:be:f6:7b:04:48:
48:10:6c:a7:c3:57:b4:60:da:67:34:43:a7:b5:ad:65:68:c6:
14:c6:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:56:37 2025 by rpki-client