
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: LSv/GGAZKP2wbDnQNJeymzr/Kyub2jSRidD1pFUX+cg=
Subject key identifier: 74:6C:7A:58:35:D5:ED:85:6B:97:D9:24:31:04:29:AB:63:67:28:01
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 01987C40B8BBB8C82B1336469D2224940FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 1628
Signing time: Tue 05 Aug 2025 22:01:12 +0000
Manifest this update: Tue 05 Aug 2025 22:01:12 +0000
Manifest next update: Wed 06 Aug 2025 22:01:12 +0000
Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: ESx9wOfMNxnjQtCwEyDQYbjTblKzPABAjhh94G94Lpo=)
3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:b8:bb:b8:c8:2b:13:36:46:9d:22:24:94:0f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Aug 5 22:01:12 2025 GMT
Not After : Aug 6 22:01:12 2025 GMT
Subject: CN=746c7a5835d5ed856b97d924310429ab63672801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:39:ba:75:a1:48:ad:85:2d:ea:ca:ec:3f:
19:b3:74:2a:58:2c:c3:cd:85:86:21:2c:c6:e4:44:
10:aa:e9:bf:b2:f4:7e:59:0b:5d:63:29:2f:4d:b4:
64:a8:3d:ca:60:aa:4e:c8:94:3f:53:56:89:4d:42:
47:7c:14:7c:64:79:6b:b8:fb:c6:f0:c4:c0:60:06:
6e:fa:94:4c:d7:bc:31:16:70:4a:25:1a:21:2b:b9:
08:46:80:69:6a:03:59:c4:b7:34:94:55:66:af:c5:
a2:ae:62:b0:80:9f:93:eb:2d:7a:54:8d:4b:55:57:
ce:7e:25:a3:2a:68:7d:3b:3b:b0:f6:e0:aa:bf:6b:
ed:86:0f:b1:8a:be:d7:c3:21:4d:55:16:c8:e0:ae:
05:8e:96:48:30:9b:68:88:78:22:ac:cd:32:12:e0:
18:b1:c6:b1:f4:0a:a4:22:b2:29:a8:60:77:6b:c8:
13:05:cc:34:67:a1:5b:6b:dd:0f:63:2f:55:53:20:
c2:44:13:9b:2c:df:5f:00:51:9c:3b:85:0e:80:f2:
46:73:0b:9c:4d:dc:10:df:17:c3:fc:71:d2:4b:a2:
55:7f:40:f2:ef:2b:52:24:67:f7:56:d4:af:f2:52:
3a:39:5d:48:f6:3e:e4:c2:d4:f8:6d:d3:77:2f:e0:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:7A:58:35:D5:ED:85:6B:97:D9:24:31:04:29:AB:63:67:28:01
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a5:e3:46:a1:71:f2:a5:a0:b5:5a:62:71:fb:cb:68:10:28:
da:10:c0:c1:1e:2e:d0:b2:d4:1e:63:85:a0:bc:a8:19:d0:ad:
68:ea:de:74:5c:33:9f:e8:b0:02:92:30:d7:19:17:dc:57:35:
60:8a:e3:32:cc:a5:9c:87:d9:ab:c7:05:d0:af:b2:ca:3c:31:
aa:d6:ff:aa:0f:8d:48:4d:0b:08:15:6b:76:3b:79:c5:84:0e:
75:26:4c:a0:ed:ec:89:c0:56:b6:09:3d:4b:cd:a6:44:ed:af:
19:1f:1e:51:ba:8f:23:7f:c8:ba:68:aa:d7:4a:80:a0:f5:79:
62:9a:87:93:8c:a9:72:66:2f:ca:10:de:6c:ae:b0:bb:ae:d1:
f1:39:62:61:34:18:2f:a4:41:62:0d:ff:58:cc:e7:54:a2:31:
a6:5c:89:d0:e2:d0:0e:d1:01:06:78:06:19:9f:be:f7:f1:c7:
c0:91:7e:76:e8:0f:b2:eb:a4:d0:33:db:b7:b0:b6:96:b8:bf:
72:6d:c3:09:27:41:69:80:66:63:f3:8e:62:2f:cd:ae:48:a6:
6f:ed:1e:88:57:ad:98:99:94:d5:35:e9:23:92:b7:31:40:48:
bb:26:27:7d:ec:48:1b:22:4c:79:5e:17:69:6f:d3:f6:47:17:
3d:ac:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:36 2025 by rpki-client