Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: ciIiu95VubHpVnGowoBrXrgHEBUameUhGV2WpSvSMrk=
Subject key identifier: 84:4E:A3:A7:DA:85:17:D8:6C:15:0A:D9:36:5A:16:74:9B:9D:D1:53
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 01989592ED2E677FDA7FC4DFDA1B441336EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 20:01:30 +0000
Manifest this update: Sun 10 Aug 2025 20:01:30 +0000
Manifest next update: Mon 11 Aug 2025 20:01:30 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: cN8I35mY2L9vhSNltIrv8higbY4NdtG3LLgYjOitAE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:ed:2e:67:7f:da:7f:c4:df:da:1b:44:13:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Aug 10 20:01:30 2025 GMT
Not After : Aug 11 20:01:30 2025 GMT
Subject: CN=844ea3a7da8517d86c150ad9365a16749b9dd153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:67:64:34:44:d7:a0:63:3d:70:71:94:7b:
a4:37:67:8c:dc:a1:af:70:b2:e8:d8:39:b6:07:e5:
dd:db:07:5e:8c:76:04:37:39:e3:45:ce:c2:98:79:
bb:95:79:47:5b:42:2a:06:16:8d:4d:1a:b9:c9:aa:
4c:50:31:2c:97:50:93:a7:98:cb:c7:1b:60:59:44:
35:bc:ff:2d:b9:fd:f3:36:1b:e2:3e:91:ea:2b:f9:
7b:dd:05:3d:57:1d:7e:24:72:5c:bc:90:62:6b:46:
3e:e1:b8:e9:2d:cc:25:52:a5:fd:de:37:32:57:29:
1b:5b:b3:fa:1b:de:2a:dc:bc:16:40:68:55:a6:97:
77:ec:b8:ce:24:a3:b2:54:ac:02:4b:2a:ea:d6:a7:
4c:4c:ed:13:f2:7f:69:11:08:65:e0:b5:b4:d2:17:
20:ca:d3:d2:55:dc:54:b9:1c:93:49:33:dd:14:0b:
b4:84:ab:9b:28:e8:25:82:7b:12:19:97:a8:a6:30:
c7:9e:3c:1f:64:ce:14:6a:9f:38:17:25:94:a8:bc:
ce:52:6a:d4:69:ba:be:b6:2b:06:8f:84:5c:66:28:
15:a6:b9:9c:07:08:21:1f:f8:0d:6c:fb:11:75:0d:
40:28:51:70:12:89:a1:d7:b9:95:8e:8a:fe:52:d7:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:A3:A7:DA:85:17:D8:6C:15:0A:D9:36:5A:16:74:9B:9D:D1:53
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:96:94:52:a2:28:6a:01:1a:0a:aa:cf:46:57:14:2d:e2:fe:
e1:02:ae:42:42:28:af:9e:da:58:29:2e:30:ee:41:ad:42:0b:
7f:57:06:4d:3c:79:5f:c6:d0:75:c9:e2:8b:99:4a:90:14:c2:
ea:1a:43:26:c8:6b:1a:6d:25:22:e8:09:e8:46:f9:67:2a:4e:
dc:af:a2:e5:1c:66:05:31:54:82:32:1b:cb:e8:63:d6:fb:9d:
13:e8:66:a2:4e:b3:5c:23:a7:30:86:7b:03:0c:8c:48:8b:35:
61:21:9c:8e:49:47:e4:3e:a3:40:cc:de:27:5d:b7:3e:ec:15:
dd:64:21:b1:31:cc:d8:fd:af:d5:e9:57:fb:b6:87:fe:a5:5c:
f5:d0:3d:32:76:b6:45:4a:94:d9:b6:cb:4b:0b:85:ac:d6:25:
7b:a5:c6:c7:cb:b2:ac:a1:61:ab:a4:68:fb:51:d7:9e:fe:e4:
35:92:22:76:d3:61:99:9f:1e:67:9b:e3:e3:b5:e2:23:bc:98:
f6:e0:a9:9e:7d:4b:47:df:8d:a3:f0:96:87:ab:81:3b:9b:04:
7d:63:7e:ca:36:34:c0:0f:4d:85:10:55:d6:2c:3b:07:bc:13:
3a:1a:c0:3e:1c:11:0e:e9:a3:3d:3b:ca:9b:d3:61:a3:fe:d1:
3b:2d:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:05:16 2025 by rpki-client