Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: bXiHqxZAqKepkcVlFgizTY53YI3DYhPzWndId5vgsyo=
Subject key identifier: 9E:12:9B:A0:C2:1A:FD:04:5A:96:F4:82:65:00:34:3D:37:5A:0E:4F
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 01974B561E2EC491A5609B0C3AD92B95B875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 17:00:24 +0000
Manifest this update: Sat 07 Jun 2025 17:00:24 +0000
Manifest next update: Sun 08 Jun 2025 17:00:24 +0000
Files and hashes: 1: FjIahcKt09OuzmKTy1-sTrhxfJE.roa (hash: vdC0TpdFOFzZCc1CfiRmwTujlsmnztXNdvUzRtn8G+A=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: sLRc1GnhSvxAwkVVz1V1UNi4fjdYKaiEh3xjpQIOmpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:1e:2e:c4:91:a5:60:9b:0c:3a:d9:2b:95:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jun 7 17:00:24 2025 GMT
Not After : Jun 8 17:00:24 2025 GMT
Subject: CN=9e129ba0c21afd045a96f4826500343d375a0e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:bc:c0:95:f8:a0:ec:c5:ee:a0:41:22:d0:
31:6a:89:00:e8:65:6e:6f:29:c5:5e:f7:4f:ba:26:
c6:96:de:f7:91:05:e1:19:fc:99:0a:ba:cc:c9:b5:
83:f5:d9:5f:07:9e:39:c9:b3:f5:c0:0d:9a:f8:3c:
77:64:fb:ee:ec:a0:6f:d8:38:22:7c:a8:bf:d7:dc:
29:0e:99:ab:65:eb:15:94:45:b9:4f:fe:3e:67:f5:
ae:8d:a7:1b:05:15:ba:38:4c:38:4a:21:a6:26:b5:
60:fb:2e:21:32:86:01:c8:1c:6d:cf:6c:61:48:90:
9a:6e:57:90:2f:ad:61:d1:d5:fb:c7:6a:45:8d:da:
4d:79:f9:0d:9f:fd:79:3b:39:ac:17:5a:b9:9a:3d:
f7:2c:0c:e7:6c:89:ce:48:9b:cd:8b:83:1c:d1:da:
7e:be:d3:bd:40:7c:8e:b9:52:c9:42:5b:94:50:b0:
cd:08:87:9a:da:21:7a:93:d1:0d:66:c7:a9:7b:e5:
d2:59:01:16:97:56:11:97:ad:cb:36:20:2a:54:4b:
29:8e:ed:75:dd:c7:c7:32:8f:8f:eb:81:de:cb:11:
d9:a9:c8:ee:ac:37:5f:00:3e:b0:31:59:2b:33:b5:
cd:09:06:54:f2:21:dc:c7:be:a3:ee:02:38:9c:b0:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:12:9B:A0:C2:1A:FD:04:5A:96:F4:82:65:00:34:3D:37:5A:0E:4F
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:30:33:9e:8e:6d:72:e3:bf:c1:d4:97:18:e7:dc:46:c8:36:
c4:58:f9:3a:27:29:ce:56:79:91:84:7d:cb:50:d2:d0:40:dc:
16:18:9d:7c:6e:8e:47:83:65:64:f3:30:bd:51:cd:15:3e:36:
e5:86:3d:a6:29:c8:49:f2:dc:9f:b6:5d:08:f8:c8:2c:ae:22:
71:62:7d:02:26:30:77:0b:c2:5e:95:96:cf:5e:a8:cb:71:9e:
72:77:9d:55:f4:7f:6c:55:70:7d:65:d8:93:43:9f:7e:9b:1f:
c4:c8:5a:f5:48:38:5d:34:20:e1:90:23:97:60:14:0f:1b:43:
9c:fd:20:6d:db:95:f8:8c:8d:87:36:23:fe:f7:ba:90:f1:d3:
be:47:8a:30:e9:2b:37:45:ac:46:c9:3e:f1:a1:19:78:f0:dc:
8b:4b:d7:0c:31:36:59:e0:67:50:a6:42:3b:83:f2:a2:71:c6:
fc:b1:19:cc:09:15:dc:68:3d:d8:35:30:29:e3:6a:76:04:a4:
ba:61:00:fe:42:d6:49:be:80:ba:c6:89:c7:61:ae:57:da:9e:
1e:29:19:1d:52:0b:47:d3:8d:b4:0c:64:11:49:2d:cb:7f:8b:
03:05:cb:0a:3d:78:aa:7c:f1:27:b6:98:6a:a5:8a:93:94:14:
14:21:e7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVh4uxJGlYJsMOtkrlbh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk
NjU5OTUwHhcNMjUwNjA3MTcwMDI0WhcNMjUwNjA4MTcwMDI0WjAzMTEwLwYDVQQD
Eyg5ZTEyOWJhMGMyMWFmZDA0NWE5NmY0ODI2NTAwMzQzZDM3NWEwZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSS8wJX4oOzF7qBBItAxaokA6GVu
bynFXvdPuibGlt73kQXhGfyZCrrMybWD9dlfB545ybP1wA2a+Dx3ZPvu7KBv2Dgi
fKi/19wpDpmrZesVlEW5T/4+Z/WujacbBRW6OEw4SiGmJrVg+y4hMoYByBxtz2xh
SJCableQL61h0dX7x2pFjdpNefkNn/15OzmsF1q5mj33LAznbInOSJvNi4Mc0dp+
vtO9QHyOuVLJQluUULDNCIea2iF6k9ENZsepe+XSWQEWl1YRl63LNiAqVEspju11
3cfHMo+P64HeyxHZqcjurDdfAD6wMVkrM7XNCQZU8iHcx76j7gI4nLCcfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4Sm6DCGv0EWpb0gmUAND03Wg5PMB8GA1UdIwQY
MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt
NzlmMDQ4YmQyYTdhLzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh
LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijAzno5t
cuO/wdSXGOfcRsg2xFj5OicpzlZ5kYR9y1DS0EDcFhidfG6OR4NlZPMwvVHNFT42
5YY9pinISfLcn7ZdCPjILK4icWJ9AiYwdwvCXpWWz16oy3GecnedVfR/bFVwfWXY
k0OffpsfxMha9Ug4XTQg4ZAjl2AUDxtDnP0gbduV+IyNhzYj/ve6kPHTvkeKMOkr
N0WsRsk+8aEZePDci0vXDDE2WeBnUKZCO4PyonHG/LEZzAkV3Gg92DUwKeNqdgSk
umEA/kLWSb6AusaJx2GuV9qeHikZHVILR9ONtAxkEUkty3+LAwXLCj14qnzxJ7aY
aqWKk5QUFCHnrg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:07 2025 by rpki-client