Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: u7Q8+E3rB5eM3LvEs4JZU6cINgeADF/GGpMYZjbw41s=
Subject key identifier: 89:CA:61:03:BC:E9:5A:22:D8:1B:45:52:D1:E1:9B:01:1A:EC:D7:5B
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 01987D52BF4A0383A71BEBA85E44E55A0482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 1531
Signing time: Wed 06 Aug 2025 03:00:31 +0000
Manifest this update: Wed 06 Aug 2025 03:00:31 +0000
Manifest next update: Thu 07 Aug 2025 03:00:31 +0000
Files and hashes: 1: BdEPl2Neefl4GoaE_iupoW4vob4.roa (hash: iJi1nUHFyZuED4JVs82b7kN1M64TmmDeD6kSjvIrHS0=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: 6IIivVG41ez+XW7k5doSS0ps8yVHshbdHve4NE/g0QI=)
3: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:52:bf:4a:03:83:a7:1b:eb:a8:5e:44:e5:5a:04:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Aug 6 03:00:31 2025 GMT
Not After : Aug 7 03:00:31 2025 GMT
Subject: CN=89ca6103bce95a22d81b4552d1e19b011aecd75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:d6:a5:05:c5:26:aa:42:84:70:ba:3a:cc:
aa:56:62:13:2a:d2:5b:d5:37:bd:da:82:00:65:35:
88:e3:fe:78:eb:cf:59:0e:0f:d9:b5:c4:6c:01:16:
30:54:10:aa:13:0c:99:03:9c:3f:09:02:db:33:b9:
2f:37:2a:eb:30:48:cf:a1:b3:50:46:dd:48:2f:c1:
a1:ce:55:4e:fa:36:8a:15:b2:e7:8c:9b:09:e0:2c:
bc:b7:92:af:17:3d:b9:44:f4:71:43:20:35:3e:18:
ae:a1:85:4f:4e:b6:e0:a1:3a:27:3f:f4:a0:b8:5b:
aa:51:3e:63:08:16:bb:df:ae:3c:f8:a0:fd:1e:1d:
07:b8:29:0b:e6:93:7a:fa:8b:44:36:03:73:c1:2d:
bf:5c:7f:75:51:6e:5b:e8:07:62:26:a8:0e:25:c5:
fe:7c:f2:5e:9e:06:ef:99:8e:51:96:3f:68:29:8d:
4e:fb:a3:b7:9b:33:67:20:75:f3:c1:f2:9d:c8:06:
dc:b5:43:e5:dd:ee:22:99:fc:e4:db:48:ec:b1:23:
d1:e7:e0:91:d0:d5:c0:ef:46:f7:a6:91:85:17:c3:
1d:f3:35:e0:ae:cf:42:98:8d:37:30:36:05:a7:97:
42:48:dd:41:7f:7d:f8:9a:b1:81:01:15:56:6b:31:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:61:03:BC:E9:5A:22:D8:1B:45:52:D1:E1:9B:01:1A:EC:D7:5B
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:00:60:d7:e9:8f:c9:9e:c6:7f:79:5d:37:81:6a:a6:1d:d6:
3b:44:a6:4b:f3:d9:a8:c6:fd:07:d3:48:fd:c0:21:a0:39:f2:
4f:a9:87:ca:8a:f9:60:38:a3:9b:32:37:52:9f:fe:15:cb:72:
4e:f8:fc:4c:89:e1:42:4e:16:0d:a6:fb:0f:98:67:f9:6e:0d:
8d:f9:46:c4:e1:0f:27:e5:65:f7:0e:50:ec:aa:53:36:57:05:
de:de:6d:dc:51:cf:31:35:ce:12:1c:9c:5c:69:87:d2:91:06:
75:9c:ca:87:e0:5c:12:57:46:36:c3:8d:1a:ef:32:12:7d:12:
ad:f8:23:de:4b:89:0b:15:d2:94:50:00:9e:84:69:0c:47:dd:
b5:cb:b4:03:60:4e:7c:db:db:e8:cf:b7:66:ae:a6:b0:7e:26:
7b:1b:6e:dc:ec:62:93:1e:cf:ab:f5:7b:e7:d9:46:7f:9f:65:
6e:25:3d:b1:8f:fd:79:0d:74:bf:da:af:64:15:b4:6b:98:0d:
0d:ed:2c:4e:f2:cd:61:85:f7:27:b3:cb:6f:d5:66:49:7a:6a:
f2:f3:e2:cd:75:af:e6:46:d0:68:e9:ea:e5:f0:c3:96:04:7f:
3f:0e:10:ab:b7:f7:ef:92:00:66:cd:d3:0f:e9:22:3a:67:6c:
34:93:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:37 2025 by rpki-client