Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: BDAe60T9cBKimOXKRdR7M+tUKKMSDUNkJ4qDTT/1yYQ=
Subject key identifier: C9:87:5D:9C:D2:C5:5B:A9:F2:25:7C:B0:12:0A:6B:F3:1E:95:BB:9D
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 01988E0F8A952DC5BA5535754D8EA3275A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 09:00:39 +0000
Manifest this update: Sat 09 Aug 2025 09:00:39 +0000
Manifest next update: Sun 10 Aug 2025 09:00:39 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: KyggjnZ19o5wWHZaXYOpFvQmWx/e7DQoS+iAJVXwsrM=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:8a:95:2d:c5:ba:55:35:75:4d:8e:a3:27:5a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Aug 9 09:00:39 2025 GMT
Not After : Aug 10 09:00:39 2025 GMT
Subject: CN=c9875d9cd2c55ba9f2257cb0120a6bf31e95bb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:0d:bf:ca:f7:2d:5d:88:56:2a:86:f6:e3:
79:02:bc:ab:1b:f9:40:e3:68:7e:22:be:71:02:ec:
31:8f:29:e4:c2:e3:3e:ad:ce:4f:8f:d9:92:dc:3a:
a0:ea:3f:60:91:0c:b5:93:03:3a:8d:d2:73:c0:f9:
0e:70:93:38:5a:71:68:74:b9:9c:cb:87:af:f7:35:
cf:1b:cd:52:74:97:19:19:15:70:ea:68:14:bd:ad:
14:89:fa:91:aa:fd:10:a3:c5:e9:0d:31:c2:82:c0:
35:c8:de:92:f7:07:67:28:b2:72:c7:f8:20:8b:c3:
6a:bb:53:e4:6f:aa:bf:ea:b2:c9:60:29:3c:0e:7c:
dd:e7:a5:13:9e:cb:8a:bd:f6:e2:28:cd:f4:b3:d3:
8d:ba:a2:d3:6a:fd:de:1a:6a:2f:75:61:df:a3:ac:
9a:ca:27:ad:35:8d:9c:27:1d:eb:0c:83:31:f2:80:
59:f1:5b:15:22:4f:01:bc:36:33:50:2e:a8:7c:d9:
b6:34:e0:04:c1:f2:84:2f:69:db:19:a9:3c:3e:43:
07:2d:04:45:26:10:1b:98:c5:07:8d:ae:0c:62:ca:
97:9a:85:e0:d9:b0:8f:c6:64:74:90:b1:04:0a:80:
0c:53:7d:33:50:99:3e:0e:71:f3:64:ff:a0:a9:b6:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:5D:9C:D2:C5:5B:A9:F2:25:7C:B0:12:0A:6B:F3:1E:95:BB:9D
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d9:81:fd:3d:42:c4:53:0a:d2:85:37:cc:b1:d9:81:e7:1d:
c1:04:3b:d9:17:04:56:f3:28:c8:ed:7c:de:1c:5b:8e:5a:5e:
7f:99:c7:f6:e2:27:71:fa:75:3f:eb:4c:3d:95:a6:52:2b:1a:
04:ed:0d:de:88:94:c6:d3:50:d7:7d:a0:1e:49:87:77:94:ff:
9e:29:93:ad:e8:7c:0f:f0:5f:2e:48:2f:7e:bf:8c:b0:d3:77:
c0:e1:7c:12:dd:af:bd:fe:1d:bd:12:45:fc:75:1e:f2:52:9b:
33:8c:52:97:58:7a:cd:40:30:f9:02:8d:9b:aa:f8:39:07:cc:
87:2f:76:4c:c3:25:d3:3a:8d:a8:db:99:ed:f0:8a:81:9e:6b:
d6:8f:09:16:65:b1:83:72:a8:88:d3:ac:1a:1f:d5:f2:39:76:
b6:94:f5:e1:bb:2a:cf:3f:8c:42:cf:39:d4:da:6b:6f:7d:e3:
82:b5:5a:d6:73:09:a3:fe:9b:4a:70:51:7c:98:b5:42:77:76:
d2:49:fb:9c:a5:b9:85:02:58:d9:cc:8a:c4:52:1f:79:42:d8:
e2:e7:b1:0d:08:cc:52:e6:6e:8b:8a:69:66:d4:b8:7e:0b:ef:
f2:19:a4:d1:4f:6a:02:30:02:e5:2a:3e:99:c0:dc:46:58:34:
65:c7:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:31 2025 by rpki-client