Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: nWqUnatgyKMU5HWDXbHrassGYFfj/R4APV3yUW4CEvQ=
Subject key identifier: 19:CE:07:66:F9:22:2D:5D:C4:13:78:A3:20:AB:50:0C:0E:B5:EA:E1
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 01976EF51CFB71CF35EC86BEB25010CC8994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0DAD
Signing time: Sat 14 Jun 2025 15:00:46 +0000
Manifest this update: Sat 14 Jun 2025 15:00:46 +0000
Manifest next update: Sun 15 Jun 2025 15:00:46 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: w7ODOQBTauCPbHN519IxtbzYW1j3uJq2XzIJgxeM/os=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:1c:fb:71:cf:35:ec:86:be:b2:50:10:cc:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Jun 14 15:00:46 2025 GMT
Not After : Jun 15 15:00:46 2025 GMT
Subject: CN=19ce0766f9222d5dc41378a320ab500c0eb5eae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:db:11:57:03:aa:c7:ca:64:8a:1c:52:cb:
23:92:61:cf:71:f8:dc:fe:bf:24:72:28:bd:ba:5e:
13:71:40:71:77:cc:a4:5b:0d:b6:a0:4b:c1:22:5c:
06:d4:7d:20:22:78:0c:5f:e6:dc:72:2a:bb:7b:43:
8d:17:15:76:42:8a:f1:2b:ed:28:f3:d5:9e:f6:b1:
30:bd:23:b8:2c:98:88:37:78:54:4c:b8:b9:d2:08:
02:3c:77:5a:cb:44:d4:78:07:d7:e4:e6:33:85:eb:
29:4b:27:bb:b2:04:90:dc:ca:9c:50:8c:ef:50:be:
fd:04:3d:98:c0:2d:b7:d3:17:f3:44:bd:3e:ad:a9:
c8:e5:39:fa:04:ff:ed:8e:23:ac:15:2c:32:6b:3c:
55:c8:2e:04:e5:4e:c5:a1:b6:f6:e6:48:c3:54:dd:
52:70:d7:e4:3b:c2:ed:f3:4b:3d:f6:f7:f4:21:79:
f7:74:e3:b6:f3:34:90:6e:14:67:63:46:fc:93:b9:
6b:a6:75:a1:0e:62:8a:22:c3:cb:7d:db:00:06:97:
7e:ac:24:0a:9e:cd:93:c1:be:38:cf:37:ce:94:c8:
2c:7c:73:34:45:e2:80:38:22:aa:3c:51:fd:6b:69:
68:17:04:02:54:1c:c5:35:c9:5a:5c:dd:1d:3d:73:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:07:66:F9:22:2D:5D:C4:13:78:A3:20:AB:50:0C:0E:B5:EA:E1
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1a:0f:2f:c2:58:af:0f:66:e2:30:fb:50:87:79:8d:4f:0c:
df:52:38:e0:8d:a4:14:55:a6:7a:77:2f:58:b7:9a:d5:a8:16:
ff:39:66:6f:56:37:73:15:2a:f7:dc:5b:7f:19:9d:e2:a8:02:
ce:bb:cb:a0:e9:77:7a:6c:0d:7b:cd:b0:66:8b:4d:08:c6:c4:
d2:33:1b:de:f7:e6:0f:64:8a:37:e9:03:e1:90:ce:16:e2:33:
55:74:9a:3d:80:99:ca:4a:a3:7b:b2:89:29:fd:fe:6c:0e:bc:
c3:2d:2e:7f:3d:58:9c:9d:7b:d5:dc:f7:31:6b:b9:e6:e2:c7:
8a:d7:a6:a6:2d:34:3d:c5:25:5e:09:aa:d3:6a:70:5f:5c:42:
4c:93:3e:ac:27:67:14:37:18:26:fc:54:0b:e5:45:82:d3:ab:
63:a1:99:51:90:82:48:00:cf:b2:1a:0e:2e:bf:d5:e7:e5:e9:
be:6e:bd:b0:63:ce:54:29:8e:ca:9e:2f:f9:6e:23:62:c0:d6:
be:c2:cf:cb:53:e4:2d:25:7c:75:c6:44:73:60:c4:3c:b9:16:
78:f7:6b:cb:f6:6e:27:88:72:25:51:d9:40:8d:08:a2:fc:a9:
4b:d6:c2:6c:bc:67:2b:03:0c:cd:5a:99:06:81:dc:8a:82:f2:
8a:de:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:23:39 2025 by rpki-client