
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
File: ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json)
Hash identifier: JpFInhfsUQs88bcHSjUNouHOn8c8ATIm0y79u2UkCss=
Subject key identifier: DA:2A:6E:83:1F:32:C6:D9:13:DE:CD:C6:6D:DA:35:C4:F8:8B:2C:7D
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Certificate issuer: /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial: 01987CAE9B3F81CC2BA6168690613A323DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 00:01:14 +0000
Manifest this update: Wed 06 Aug 2025 00:01:14 +0000
Manifest next update: Thu 07 Aug 2025 00:01:14 +0000
Files and hashes: 1: Gumma7CSH0QJDyYLGYO8JVucFbw.roa (hash: AHbFRK4oddEvM9hnH4lxRaSLOWlIxIkwfpWyReC2ymY=)
2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: AiHFEVVrWqPNYInj4QrvzR5SGHeEIxoiI55SyuEi4tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:9b:3f:81:cc:2b:a6:16:86:90:61:3a:32:3d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Validity
Not Before: Aug 6 00:01:14 2025 GMT
Not After : Aug 7 00:01:14 2025 GMT
Subject: CN=da2a6e831f32c6d913decdc66dda35c4f88b2c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:45:6b:56:63:1e:7a:e5:cb:a2:85:d1:e6:
6c:64:21:a5:94:65:e5:4d:4a:f4:00:54:6c:98:92:
5b:75:c4:b2:8c:07:fe:31:9b:d6:5b:cc:8d:b7:aa:
1f:33:a9:f4:29:47:98:0e:dd:34:b9:05:d7:3c:2b:
c1:d8:61:f9:03:41:a5:6b:15:35:35:94:bc:f5:89:
66:be:dd:dd:a4:f0:ba:f2:2e:62:cb:ee:ff:3f:ce:
f0:b7:13:47:b4:83:16:ff:08:ca:57:a5:bb:76:90:
eb:49:d4:34:71:01:27:05:b7:f6:ad:fd:1f:5f:fb:
d1:b5:58:a6:9c:23:a6:62:0a:53:69:de:5b:0f:52:
0f:26:0e:99:56:9f:b0:75:38:b1:10:f4:07:be:2d:
02:83:5a:a9:77:4e:d6:83:6e:88:8f:28:4c:e2:51:
da:53:3f:1d:de:5e:09:05:49:49:90:c1:41:32:73:
30:05:d0:b2:03:22:3b:0b:1d:65:19:35:57:d6:51:
70:c4:ab:db:3e:28:0d:cb:20:ac:a2:62:91:4c:dc:
97:37:f7:cd:ab:f9:7a:fc:0d:70:d6:62:05:2b:1f:
5c:cb:b5:5d:fe:6b:84:30:b9:5c:00:b3:6d:d6:3b:
ba:ab:5b:d2:c4:c0:1f:16:da:64:07:79:16:a8:42:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2A:6E:83:1F:32:C6:D9:13:DE:CD:C6:6D:DA:35:C4:F8:8B:2C:7D
X509v3 Authority Key Identifier:
keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:f0:44:68:21:49:93:17:78:e1:b7:ee:93:06:81:59:cf:
a4:08:c5:6c:66:b0:7d:91:b3:86:9e:05:4e:97:f5:e2:36:9a:
1c:74:5b:6d:5b:ea:c7:0f:f1:10:e8:d4:e3:ac:af:86:ac:a4:
e2:d8:7a:37:21:82:4a:a5:3e:5f:04:ae:e2:2a:62:59:7b:02:
9f:4f:a2:02:a1:fe:63:e5:84:d4:ef:44:81:b5:04:65:e8:5b:
0a:50:95:1c:31:5d:9f:7b:8c:fa:05:82:b4:85:ad:bc:db:16:
f0:20:30:17:5c:f8:5b:a3:6a:6c:fa:6e:90:62:d4:8a:c8:e9:
3b:c0:ab:36:0d:96:37:b6:d1:93:aa:11:ff:1c:10:9c:cb:8c:
91:e1:66:fe:38:33:a1:71:4b:fb:a7:34:51:0f:27:b1:b0:02:
8b:91:3a:6d:9b:d0:6e:46:bb:52:e3:dc:57:74:30:87:12:00:
ab:10:d8:3f:e7:16:d1:79:7e:3a:4f:13:d7:28:89:c9:8a:94:
d1:b8:f7:5f:a1:1b:6f:a5:f6:28:22:50:ee:d2:7a:89:0c:2f:
b5:eb:2e:df:b9:3d:23:96:aa:97:6e:90:d4:5d:92:4e:d2:9e:
72:44:1b:8d:c5:02:2d:d2:c7:8d:98:7f:9e:99:b2:77:73:1e:
f0:7f:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:01 2025 by rpki-client