Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
File: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft (raw, json)
Hash identifier: QxqiPj4J+HM8/3ytWeT5vL8ME6in0X9Fd7CKK4yaGBQ=
Subject key identifier: 69:04:6C:EB:11:10:C2:06:34:52:36:58:4E:D5:9E:1D:C8:51:ED:81
Authority key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
Certificate issuer: /CN=89af8769339703da3b0cb5e831023d3bf63f022e
Certificate serial: 019874BDB5CD7DB96BA829BF51CD17B0A824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
Manifest number: 0EC1
Signing time: Mon 04 Aug 2025 11:00:46 +0000
Manifest this update: Mon 04 Aug 2025 11:00:46 +0000
Manifest next update: Tue 05 Aug 2025 11:00:46 +0000
Files and hashes: 1: JBBfWvBvIPbMFEPW3wW2A3eZfMw.roa (hash: HPVfysoAPIIkBoYBVqV/VP2S0bfAf3Hk6zV6kpgHup8=)
2: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl (hash: 5+82Ncqc4IL2DIIqd8DH2PkAg9vhG5TPZ94DmUU8s9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:b5:cd:7d:b9:6b:a8:29:bf:51:cd:17:b0:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89af8769339703da3b0cb5e831023d3bf63f022e
Validity
Not Before: Aug 4 11:00:46 2025 GMT
Not After : Aug 5 11:00:46 2025 GMT
Subject: CN=69046ceb1110c206345236584ed59e1dc851ed81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:99:a8:03:71:00:fa:7e:cb:67:f0:c6:56:
75:96:64:29:06:9c:b7:d7:37:81:ec:9f:12:d6:59:
50:ff:3e:fb:55:8b:8f:b5:6c:ce:6d:b4:3e:39:61:
65:ba:f9:a5:dd:4c:f7:2a:d2:26:82:00:41:f5:ae:
59:2a:7b:24:77:3f:40:9f:2f:80:a9:3c:94:b8:0d:
ee:5b:9d:28:83:b6:fa:d9:12:73:67:8e:b6:23:44:
01:50:63:71:96:4a:c1:89:96:03:d3:11:73:fa:08:
cb:d8:51:b3:ec:8a:35:e2:b4:ec:60:fd:dc:c7:12:
e8:14:22:b8:f7:4e:07:ee:63:60:7e:35:e1:72:59:
46:3c:67:aa:a9:8e:11:3f:c3:7e:ca:12:dc:8c:fe:
1f:f8:ff:18:96:9d:32:43:a8:29:3b:16:37:fc:2d:
df:99:2f:54:83:5c:d6:b2:8d:75:0b:27:83:76:48:
e7:c4:da:52:a3:91:ae:0e:37:7d:63:87:f3:16:dd:
84:07:ae:de:52:b0:a2:6d:d2:dc:a3:91:36:1d:8f:
b1:81:ee:01:fe:53:f6:d9:00:f2:dc:26:99:7a:89:
46:9a:d6:ee:da:ae:19:f7:a3:11:e7:09:a2:28:35:
9f:01:23:19:e3:e6:b8:21:25:a5:9d:e4:15:6d:4d:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:04:6C:EB:11:10:C2:06:34:52:36:58:4E:D5:9E:1D:C8:51:ED:81
X509v3 Authority Key Identifier:
keyid:89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:33:a7:6b:70:c4:b4:4c:93:3f:9a:44:47:6f:56:0a:16:
9d:43:d5:00:7b:c5:62:5d:59:46:9a:54:60:e3:1e:92:50:6c:
f5:c8:e3:6f:23:a7:f2:8f:1e:22:ac:8d:7d:a0:b3:df:da:1e:
d0:78:30:ea:e3:37:4a:22:94:44:9c:92:1d:e1:51:ee:0a:6c:
b2:0e:28:e8:ca:ee:c9:0b:85:cc:ca:4a:be:9a:20:ad:95:26:
35:5e:2f:51:81:12:70:17:50:67:56:ee:c9:6a:0c:e0:67:0b:
02:cf:ab:93:e2:b5:b7:f8:e2:2e:c2:93:4c:24:35:75:17:93:
1b:44:8e:18:66:30:fe:b6:c7:ca:af:69:cb:e1:cf:aa:60:c1:
b3:00:06:a2:4b:ce:46:7e:9f:9c:99:3e:06:dd:a6:eb:7a:cf:
f6:97:b8:d9:80:1d:63:e1:5d:e3:bb:7a:9f:c5:76:7b:65:ad:
37:6f:15:2a:b7:95:b5:cb:96:71:32:32:67:46:4a:0f:cf:b3:
5e:c0:61:d0:27:bc:81:19:7f:6d:60:59:0c:43:65:cd:7b:a1:
f7:67:c1:6a:34:33:e5:fe:34:b8:80:46:fa:8d:29:e4:ff:a8:
25:4f:d5:7a:9a:f0:8f:f6:fb:02:a4:77:dd:eb:cc:fd:f4:8c:
86:d4:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:11 2025 by rpki-client