Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: QsATRvr1atCGIWjWp0tQU91r+/RENxABzU6ZTMemmRM=
Subject key identifier: 9F:BE:33:88:D1:43:EE:36:49:D1:9C:DB:77:4D:2C:85:CE:F6:D2:8D
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 01977007FFBB5E1625D16A9B27E57578738C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 14A5
Signing time: Sat 14 Jun 2025 20:01:01 +0000
Manifest this update: Sat 14 Jun 2025 20:01:01 +0000
Manifest next update: Sun 15 Jun 2025 20:01:01 +0000
Files and hashes: 1: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: MEVfQXs6kO1gXVW8yR7GAaVB8H+X1Mcvf9Zvya7kd+8=)
2: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
3: ozjUQxHmEATeBtgb_LyM3aKm4tQ.roa (hash: SCvwXmyf4wYWaXwbm/hei/KNEmH1H0hr2F8sJuDN8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:ff:bb:5e:16:25:d1:6a:9b:27:e5:75:78:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jun 14 20:01:01 2025 GMT
Not After : Jun 15 20:01:01 2025 GMT
Subject: CN=9fbe3388d143ee3649d19cdb774d2c85cef6d28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:e2:af:09:7b:4a:18:62:ec:88:4d:88:69:
90:66:26:ed:aa:69:d2:f2:1e:04:ce:94:76:13:7d:
0f:ab:11:c5:1f:eb:a4:f2:b5:85:15:80:c4:16:17:
ed:e0:26:1c:c0:9f:8c:5e:b7:73:72:43:79:68:56:
20:cc:b1:65:9e:d5:51:50:c1:d1:7d:5e:43:ad:12:
a9:03:ac:ce:73:35:2c:2b:da:1e:a7:be:31:e6:b1:
fe:06:d4:71:fb:37:75:05:21:0b:fd:f7:e7:3a:7f:
83:af:2a:d8:51:36:cc:a3:74:7e:74:45:91:1d:5b:
18:49:7e:65:80:82:35:50:ba:51:d9:05:8d:31:69:
ff:ee:61:6a:65:ff:2b:9d:4d:52:61:ab:c3:30:f5:
50:94:0d:00:3b:ce:45:a3:47:ae:47:df:a3:34:84:
21:42:66:69:26:c2:a9:30:f4:d3:ed:4f:99:e9:17:
91:5d:b3:22:b4:a5:a5:65:d8:88:16:99:94:90:17:
8a:ab:5c:87:d9:e0:73:2f:64:47:5e:e8:6b:74:83:
a1:ef:06:91:94:3a:cb:fd:67:36:cd:57:e5:10:ca:
0c:18:59:8f:04:7e:01:60:4d:0f:3a:67:ca:ad:cb:
69:4a:ce:fe:f8:2c:fa:f8:5e:bc:c4:3d:2c:ec:26:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:33:88:D1:43:EE:36:49:D1:9C:DB:77:4D:2C:85:CE:F6:D2:8D
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9e:63:9a:08:aa:43:d9:76:46:fb:f9:b0:3c:cb:e1:31:20:
64:91:92:4a:d3:9c:cd:25:f2:2d:38:66:a4:b8:4f:2a:37:46:
2d:9f:88:15:a4:d7:60:f6:f7:1d:5c:59:0d:6e:8b:cd:4c:bf:
d2:75:54:b7:4d:4a:d9:6b:47:04:4b:02:e0:80:bc:29:d2:a3:
75:ca:19:6c:6a:99:4d:e3:d7:f4:12:0b:e8:4d:bb:a3:00:13:
e0:69:d0:a3:ba:7b:85:84:ed:1c:af:55:c1:ad:39:22:60:9d:
bd:91:6a:e7:03:b5:89:6a:44:32:00:85:d5:63:3d:15:c7:f2:
04:49:f8:ab:84:ef:89:aa:71:21:98:e4:25:39:5a:f9:21:69:
d3:06:5f:dc:b3:10:79:31:34:3d:2f:02:70:6f:d3:e7:8e:0f:
d2:6e:b0:4f:19:3c:f3:ff:a4:b2:8c:18:81:11:15:da:45:50:
af:bb:06:5e:8e:49:d4:c6:9f:cf:9e:6e:5b:b2:71:a1:e5:9f:
72:7a:74:8f:83:38:82:1c:d8:6a:d0:b5:e6:3d:0d:7f:02:a3:
36:84:c2:1d:4c:08:b9:db:c8:5d:d0:e1:61:d9:d9:06:3b:42:
ab:db:fa:37:90:a2:b7:fb:c0:69:b4:2e:23:70:7d:9b:94:62:
3f:b3:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:08:11 2025 by rpki-client