Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: 0ty3qaMsqU8WJnau8V0ghCdBlGRD1iUKweqGEn+SC+M=
Subject key identifier: 93:B0:7E:B6:70:7D:97:7C:9B:3D:33:4C:10:29:98:89:42:C9:68:B7
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0197C2376C55F758B820EE5AF60B7190427B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1291
Signing time: Mon 30 Jun 2025 19:01:41 +0000
Manifest this update: Mon 30 Jun 2025 19:01:41 +0000
Manifest next update: Tue 01 Jul 2025 19:01:41 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: NZhlzSq8vPgPUvQx6pTKZ+pfXM4RJSLCbl9RIPG2+/g=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:6c:55:f7:58:b8:20:ee:5a:f6:0b:71:90:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 30 19:01:41 2025 GMT
Not After : Jul 1 19:01:41 2025 GMT
Subject: CN=93b07eb6707d977c9b3d334c1029988942c968b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:c5:4c:1e:e1:24:19:c9:3c:43:2a:19:2e:
22:38:91:90:db:2d:d0:1b:58:fb:0a:1c:e5:ff:65:
2b:d7:03:98:a9:22:9d:2f:c0:dd:60:fd:ef:11:17:
79:16:7f:f0:8e:5f:c0:ea:e4:e1:6d:3b:6b:d5:57:
e5:29:b2:58:03:29:e4:3c:c6:9e:1c:5a:74:7f:49:
1f:38:cc:d0:f5:20:02:f6:27:52:04:a5:ec:b2:b6:
3f:59:59:85:1b:5f:fe:1d:8b:99:05:79:a4:bf:e9:
20:ae:0d:36:2e:db:17:c5:8c:cb:fe:53:98:db:26:
c4:52:dc:3d:68:a8:5c:91:eb:34:ca:a0:31:94:91:
07:54:83:a5:ef:55:c1:cd:98:1e:2b:0f:4a:6b:50:
99:35:8b:d2:86:ad:0e:30:c9:66:08:f5:a8:36:5b:
e8:fe:72:7d:41:41:e9:7a:18:4a:18:f4:16:b8:0a:
80:54:bd:d7:ee:ae:b0:0a:4b:a0:5b:ce:8a:4e:68:
db:0d:b9:91:90:d3:01:9a:51:2d:c2:f7:b5:c3:70:
e6:36:a8:ab:e1:41:3b:f5:0e:76:09:41:cf:0c:58:
37:2c:a2:36:43:c0:78:35:e4:a2:00:35:b2:1e:a8:
5c:d4:d0:3e:43:e5:fd:9a:1a:7b:10:b5:d1:3e:43:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:7E:B6:70:7D:97:7C:9B:3D:33:4C:10:29:98:89:42:C9:68:B7
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:76:07:d6:96:e5:31:a2:88:a2:91:ea:92:0b:fd:73:69:46:
25:15:25:a6:37:0b:66:75:4e:61:f5:b7:32:be:c9:c6:c2:11:
a9:b6:61:73:29:67:21:bb:68:98:5b:db:95:57:cc:e1:02:24:
22:73:f1:7f:4b:fa:b1:dd:c5:e1:2a:52:c0:02:b4:42:70:4b:
6e:36:83:f8:17:18:fd:40:4e:3a:e3:17:5a:55:36:ae:ef:84:
58:72:2d:8b:84:23:cb:0d:d6:bf:c4:11:f6:79:a2:77:0a:28:
16:23:d2:23:6a:18:1c:5b:b4:13:0e:7c:70:ed:71:6e:56:38:
69:96:c6:d9:1d:b3:d8:80:12:dd:6a:d6:76:24:ea:60:3f:62:
57:e5:41:48:4e:1f:fb:87:a9:bf:48:89:fe:0f:37:5b:52:ee:
a1:d7:b5:3e:33:5b:6e:42:40:c5:df:3c:62:8d:34:ed:46:00:
2c:be:8a:ab:02:b9:28:ce:0b:3d:27:93:c5:07:43:e2:44:23:
f8:26:4a:f4:31:61:52:1d:b6:65:d0:0b:7e:5c:38:5a:76:73:
ae:b3:07:6d:76:68:e3:04:90:b9:64:4f:b7:1a:6e:ef:46:42:
cf:6a:c3:92:04:c0:73:64:88:66:9e:5d:73:01:8f:fb:31:b8:
10:78:d5:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCN2xV91i4IO5a9gtxkEJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjUwNjMwMTkwMTQxWhcNMjUwNzAxMTkwMTQxWjAzMTEwLwYDVQQD
Eyg5M2IwN2ViNjcwN2Q5NzdjOWIzZDMzNGMxMDI5OTg4OTQyYzk2OGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuvFTB7hJBnJPEMqGS4iOJGQ2y3Q
G1j7Chzl/2Ur1wOYqSKdL8DdYP3vERd5Fn/wjl/A6uThbTtr1VflKbJYAynkPMae
HFp0f0kfOMzQ9SAC9idSBKXssrY/WVmFG1/+HYuZBXmkv+kgrg02LtsXxYzL/lOY
2ybEUtw9aKhckes0yqAxlJEHVIOl71XBzZgeKw9Ka1CZNYvShq0OMMlmCPWoNlvo
/nJ9QUHpehhKGPQWuAqAVL3X7q6wCkugW86KTmjbDbmRkNMBmlEtwve1w3DmNqir
4UE79Q52CUHPDFg3LKI2Q8B4NeSiADWyHqhc1NA+Q+X9mhp7ELXRPkNNDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOwfrZwfZd8mz0zTBApmIlCyWi3MB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHYH1pbl
MaKIopHqkgv9c2lGJRUlpjcLZnVOYfW3Mr7JxsIRqbZhcylnIbtomFvblVfM4QIk
InPxf0v6sd3F4SpSwAK0QnBLbjaD+BcY/UBOOuMXWlU2ru+EWHIti4Qjyw3Wv8QR
9nmidwooFiPSI2oYHFu0Ew58cO1xblY4aZbG2R2z2IAS3WrWdiTqYD9iV+VBSE4f
+4epv0iJ/g83W1Luode1PjNbbkJAxd88Yo007UYALL6KqwK5KM4LPSeTxQdD4kQj
+CZK9DFhUh22ZdALflw4WnZzrrMHbXZo4wSQuWRPtxpu70ZCz2rDkgTAc2SIZp5d
cwGP+zG4EHjVAQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:10:24 2025 by rpki-client