Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: Br48i5n6bj6zDqDSbFvjv7C6kkxgnFSxJwft79jxOnk=
Subject key identifier: 19:6E:D9:37:38:27:D5:8D:A4:39:FA:D9:3F:4C:D4:42:03:AC:28:7E
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 019676E86612812FA0CD8A04351B48C1B212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 1424
Signing time: Sun 27 Apr 2025 11:01:04 +0000
Manifest this update: Sun 27 Apr 2025 11:01:04 +0000
Manifest next update: Mon 28 Apr 2025 11:01:04 +0000
Files and hashes: 1: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: Mr05y0aOvKDSzjZv81rcptD/ouvX+0DydBXVNKzJisI=)
2: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
3: ozjUQxHmEATeBtgb_LyM3aKm4tQ.roa (hash: SCvwXmyf4wYWaXwbm/hei/KNEmH1H0hr2F8sJuDN8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:66:12:81:2f:a0:cd:8a:04:35:1b:48:c1:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Apr 27 11:01:04 2025 GMT
Not After : Apr 28 11:01:04 2025 GMT
Subject: CN=196ed9373827d58da439fad93f4cd44203ac287e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:c8:07:8a:6f:ca:b6:45:c7:fe:a7:fd:18:
b1:f3:ed:7e:27:17:ac:75:16:59:70:0b:33:59:fe:
8b:42:eb:fc:6b:f6:1c:ad:f7:ac:18:c0:63:0b:ef:
b2:20:8a:3b:e1:5e:92:1f:35:a0:94:fe:33:a7:50:
aa:9a:d7:41:32:a4:09:a5:36:43:20:af:1a:02:8e:
6a:d1:02:44:10:ca:89:2b:da:14:70:21:9f:18:b5:
4e:bc:0a:c9:68:3e:0b:ab:de:55:ce:dc:81:f1:a1:
86:72:76:cf:85:1a:0d:9f:32:f2:0f:c6:b0:81:bd:
bd:b4:db:02:8b:38:06:16:e9:c1:dc:93:b6:04:b9:
c8:c2:aa:c4:df:f4:19:87:aa:d1:24:11:61:0b:7a:
fd:ce:39:f1:f8:48:51:de:18:42:c5:2d:7d:45:c8:
bd:05:94:d5:94:86:26:a4:a3:74:87:9d:19:79:de:
2f:89:93:5d:5e:1e:e3:a4:5a:7d:14:37:aa:8f:23:
04:6a:0a:28:f9:54:75:bf:5f:95:ae:fa:d6:20:13:
49:e4:24:b7:07:83:be:9d:77:4f:be:dc:a9:c2:90:
23:75:ca:45:54:c9:89:8f:b3:06:05:8d:a4:6e:4a:
85:cf:b8:47:1f:6b:92:76:8b:43:bf:c1:d8:a6:9a:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:D9:37:38:27:D5:8D:A4:39:FA:D9:3F:4C:D4:42:03:AC:28:7E
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:f1:79:1d:20:bc:41:e7:b3:3b:bd:12:db:8b:53:33:84:
95:6e:54:28:66:f7:da:ff:e8:5d:42:2e:49:b2:20:ab:d9:99:
1d:27:b1:8d:21:8e:48:d7:61:7c:ae:aa:c8:3e:95:c7:0e:48:
e9:30:95:e7:49:df:94:3e:33:6c:71:c1:78:47:0e:91:bf:20:
63:b3:60:64:85:d3:8e:d2:15:f3:15:c6:6a:57:c1:35:79:01:
08:48:6a:65:11:9a:1f:30:4b:7c:6d:3f:e3:cb:50:98:95:82:
2a:7e:2f:1b:64:26:88:ce:cf:46:ff:4e:5a:a9:b0:2f:7c:88:
14:b0:7c:eb:d9:df:5a:3c:54:3e:38:6b:91:a3:2d:e5:b3:f6:
73:df:5d:15:94:e7:d7:6c:5a:47:b4:6e:9b:bc:e2:51:9b:d5:
31:06:48:b6:8c:77:9e:49:ce:da:af:60:6d:33:c2:0d:17:41:
98:74:e8:1f:14:4a:26:eb:fd:a4:d7:b2:43:24:7a:20:a0:d6:
38:b7:03:10:0a:5b:e0:94:84:45:18:27:bd:eb:3c:bd:7c:63:
d3:0d:10:6a:e6:2a:e4:d8:8b:66:0b:c7:34:4d:77:d9:d3:73:
f5:0c:9c:5f:59:56:3d:24:7a:d8:68:57:03:8c:91:65:05:28:
41:78:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:09:04 2025 by rpki-client