Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier: 1osZZqM16BJbn5/wEl5iYthWvrQ3hQRS0i1XVdfSXFY=
Subject key identifier: D3:F4:59:3E:FB:FD:D1:47:C3:E3:52:F1:5E:A0:E6:FF:FB:DC:BD:AB
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 01977D1EECE74AD7EFF4B252C5393678137D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number: B3
Signing time: Tue 17 Jun 2025 09:01:08 +0000
Manifest this update: Tue 17 Jun 2025 09:01:08 +0000
Manifest next update: Wed 18 Jun 2025 09:01:08 +0000
Files and hashes: 1: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
2: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
3: B97d26Z8zbvdgAX4-cqimsUhXM0.roa (hash: oZVbNKeP0bEDNNBWhDYVqEMaSVD4P4FH5yL5YJ/tIoc=)
4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: KUyBLTG3ydte3Z70UH1IS9rqwcAGQU0CDtLdOAgXURo=)
6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:ec:e7:4a:d7:ef:f4:b2:52:c5:39:36:78:13:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Jun 17 09:01:08 2025 GMT
Not After : Jun 18 09:01:08 2025 GMT
Subject: CN=d3f4593efbfdd147c3e352f15ea0e6fffbdcbdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:d4:c8:ea:bb:c3:a2:5e:88:89:12:a1:13:
0a:05:9d:bb:cf:5e:6c:e7:ec:82:eb:6c:63:35:5d:
e1:3a:e7:e9:07:51:75:5c:62:38:f0:22:f3:2b:c7:
a9:54:bf:c7:7d:4e:a5:7f:36:0f:02:5b:8c:62:8f:
b9:65:09:14:1d:ba:91:64:01:9f:4a:49:4d:3c:b2:
7f:b1:dd:1a:a1:67:79:2a:3e:ff:78:33:2d:f3:f6:
12:d3:7a:14:ca:f7:01:4e:13:73:17:15:74:19:de:
aa:58:06:18:40:8e:8a:93:1a:59:93:8c:41:42:33:
bc:da:0d:5f:ce:b3:51:61:5c:fa:08:42:07:fd:29:
5a:3f:23:70:35:10:ff:53:d0:71:ec:8c:b5:81:a1:
00:1d:ed:f9:3e:2b:0e:9b:50:a4:d2:6b:54:1e:74:
46:af:51:55:a4:82:31:23:4c:24:6d:c6:1b:14:6d:
f2:fa:a8:93:a7:bb:af:38:51:f2:e9:1f:cf:a7:1d:
bd:d7:37:54:63:db:ed:bf:7a:28:b3:4b:37:4a:c4:
88:9b:3d:74:a1:39:4c:7c:bc:de:bc:9d:4e:1c:b0:
2d:68:60:6b:1b:ac:1a:0e:31:00:f0:d5:0c:3a:ab:
e8:77:87:40:e2:cb:d5:02:c8:71:21:c3:25:64:1a:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F4:59:3E:FB:FD:D1:47:C3:E3:52:F1:5E:A0:E6:FF:FB:DC:BD:AB
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d1:bc:10:00:38:02:fa:44:02:06:50:82:d7:da:04:34:c3:
b5:67:26:fc:8d:45:a3:5c:e4:0d:cb:09:ea:b9:16:0e:5b:60:
44:33:17:bf:07:27:f4:87:7e:2d:4a:96:20:b2:1d:e3:f7:ce:
ab:54:07:dc:f2:b4:2f:84:a4:e9:fe:9d:60:b0:90:11:eb:0c:
0d:13:f7:9e:e4:73:e9:70:65:f6:6a:3e:64:6c:04:b0:d2:b1:
55:c2:e5:a0:a7:b5:cc:38:2e:0b:e3:d8:11:46:75:76:c0:6a:
34:56:34:f5:b6:84:3c:42:98:3f:06:57:e7:4c:13:60:0b:0b:
75:07:47:2f:75:18:ce:5d:d2:6a:cf:cd:4d:84:bb:ef:35:98:
60:4d:b6:51:43:59:cc:f5:dd:b5:6f:0c:f7:13:f4:a7:9c:78:
48:ae:e1:90:33:81:45:48:1f:6c:54:74:58:22:e9:7b:53:0e:
10:e7:2b:ce:ab:86:d4:d1:9f:ed:07:2b:85:c1:16:00:6b:ac:
01:12:b6:cc:04:55:bd:e6:be:84:1a:e0:da:f8:a7:cd:32:c5:
bd:ce:69:18:22:d0:0a:66:77:d3:2c:39:af:5d:55:b7:b4:0b:
7a:b5:8f:61:e7:82:da:4f:8f:c3:22:b9:5b:db:74:6d:bc:81:
0a:6b:0b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9HuznStfv9LJSxTk2eBN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx
ZmUwN2EwHhcNMjUwNjE3MDkwMTA4WhcNMjUwNjE4MDkwMTA4WjAzMTEwLwYDVQQD
EyhkM2Y0NTkzZWZiZmRkMTQ3YzNlMzUyZjE1ZWEwZTZmZmZiZGNiZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOvUyOq7w6JeiIkSoRMKBZ27z15s
5+yC62xjNV3hOufpB1F1XGI48CLzK8epVL/HfU6lfzYPAluMYo+5ZQkUHbqRZAGf
SklNPLJ/sd0aoWd5Kj7/eDMt8/YS03oUyvcBThNzFxV0Gd6qWAYYQI6KkxpZk4xB
QjO82g1fzrNRYVz6CEIH/SlaPyNwNRD/U9Bx7Iy1gaEAHe35PisOm1Ck0mtUHnRG
r1FVpIIxI0wkbcYbFG3y+qiTp7uvOFHy6R/Ppx291zdUY9vtv3oos0s3SsSImz10
oTlMfLzevJ1OHLAtaGBrG6waDjEA8NUMOqvod4dA4svVAshxIcMlZBq92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP0WT77/dFHw+NS8V6g5v/73L2rMB8GA1UdIwQY
MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt
YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw
LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9G8EAA4
AvpEAgZQgtfaBDTDtWcm/I1Fo1zkDcsJ6rkWDltgRDMXvwcn9Id+LUqWILId4/fO
q1QH3PK0L4Sk6f6dYLCQEesMDRP3nuRz6XBl9mo+ZGwEsNKxVcLloKe1zDguC+PY
EUZ1dsBqNFY09baEPEKYPwZX50wTYAsLdQdHL3UYzl3Sas/NTYS77zWYYE22UUNZ
zPXdtW8M9xP0p5x4SK7hkDOBRUgfbFR0WCLpe1MOEOcrzquG1NGf7QcrhcEWAGus
ARK2zARVvea+hBrg2vinzTLFvc5pGCLQCmZ30yw5r11Vt7QLerWPYeeC2k+PwyK5
W9t0bbyBCmsLAQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:07:29 2025 by rpki-client