Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: WobGeKHA2yjcQ5TA7jexQdHYSuWZYRh7wfzcOnitFFE=
Subject key identifier: 44:51:7E:67:E2:AA:3E:D7:A7:D1:D1:E9:8F:63:1B:7D:90:AE:2D:65
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 019873E28CF9FE33C107340964789433B475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0E34
Signing time: Mon 04 Aug 2025 07:01:23 +0000
Manifest this update: Mon 04 Aug 2025 07:01:23 +0000
Manifest next update: Tue 05 Aug 2025 07:01:23 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: OyNyCj9sOfcCshT+QrLghVYaWpaaCiJ3a+l2iV6c8Gw=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:8c:f9:fe:33:c1:07:34:09:64:78:94:33:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Aug 4 07:01:23 2025 GMT
Not After : Aug 5 07:01:23 2025 GMT
Subject: CN=44517e67e2aa3ed7a7d1d1e98f631b7d90ae2d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:07:13:0c:c6:51:db:39:69:e4:55:bc:8b:
01:e3:09:ea:12:a5:f0:ea:d8:e1:44:b4:73:28:45:
86:1a:3b:f8:f0:99:f2:c1:2d:83:25:42:20:a1:bf:
d3:e1:0b:c3:b9:94:9d:d9:b5:76:00:71:07:b2:d2:
ce:d6:9d:e0:e4:d2:b7:4c:9e:44:83:82:75:41:57:
32:0b:13:bb:3b:cd:43:d7:84:27:1a:09:fc:42:3f:
bc:3b:52:f9:05:5c:8c:35:7c:b6:77:30:de:26:42:
35:57:1a:03:ea:0f:27:15:08:1e:71:65:4d:db:95:
ff:86:af:d2:c1:3a:b2:58:d2:29:4f:73:5c:72:fa:
b7:23:d4:f6:9e:98:7b:f9:2e:b6:19:13:73:80:5a:
ee:e1:7c:8b:97:80:4d:1a:f8:e6:0f:db:3f:59:79:
df:de:03:a2:36:96:1e:4e:5e:c0:c6:b9:99:7c:6f:
9f:db:43:72:49:90:e8:6b:be:f9:e5:e6:4d:79:5a:
c2:b7:24:f6:ac:fe:85:5c:b0:8a:52:7a:51:a9:3f:
d4:c3:11:07:1c:1b:fb:3b:ec:5c:98:42:8c:ed:6a:
e5:37:e7:37:e9:8f:ce:14:45:ab:26:68:e5:04:e0:
43:3c:cf:8c:7a:b9:c4:83:ea:47:98:89:b9:ab:31:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:7E:67:E2:AA:3E:D7:A7:D1:D1:E9:8F:63:1B:7D:90:AE:2D:65
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:9b:79:e7:00:5d:1c:be:ce:85:44:60:fc:f4:6a:c8:59:
a9:82:f5:4f:34:6b:35:70:d6:a8:e1:03:19:65:ff:51:ad:89:
7a:34:67:0a:96:f2:69:8b:01:be:c6:f5:5a:97:df:f6:b6:1e:
56:70:6e:f4:56:ec:82:1e:91:29:ca:a6:d0:86:7e:ef:af:eb:
d4:f1:db:f4:e7:df:1f:0e:82:3d:f5:e7:c4:19:79:e1:01:22:
f7:d9:e2:43:e2:0f:b5:19:0f:e7:47:52:a5:41:56:0a:09:11:
4f:bd:4c:2b:b9:83:13:c8:6b:1c:33:94:f9:72:d3:57:fd:70:
ce:84:b5:a4:24:e6:70:3c:da:5d:43:a4:8e:56:4e:e8:f4:97:
f8:39:19:2c:01:7d:d6:21:91:0d:12:c4:a6:d1:c7:5b:88:3d:
38:e4:ae:bb:53:89:c3:1c:14:b3:3d:06:de:c5:0a:b8:c5:a0:
1f:68:dd:5d:13:1c:2e:6a:13:ad:8c:94:67:41:f2:ee:fe:14:
2f:10:9f:84:1d:d9:99:4d:8a:92:35:87:20:17:c0:b9:26:ff:
ef:df:91:aa:80:12:06:85:12:b7:c6:4a:8d:e4:74:ef:11:80:
0c:93:55:29:31:35:99:f7:f5:71:15:26:0a:dc:46:31:53:11:
c5:4c:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:53 2025 by rpki-client