
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: 0UQWzA8U23YlJb/GDGXZtisI2TR+C1zAwJ/hoG22D3s=
Subject key identifier: 87:10:43:6C:D7:6E:D7:35:9E:2B:26:03:DC:DC:93:D0:7E:7B:07:00
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019881671AE055D4E6E581BDDF144A02CFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 12F4
Signing time: Wed 06 Aug 2025 22:01:14 +0000
Manifest this update: Wed 06 Aug 2025 22:01:14 +0000
Manifest next update: Thu 07 Aug 2025 22:01:14 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: OGwCagcnbKFaPSE+yLuWUccAZRB7NeN4w6TKtZ2jIFU=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:1a:e0:55:d4:e6:e5:81:bd:df:14:4a:02:cf:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Aug 6 22:01:14 2025 GMT
Not After : Aug 7 22:01:14 2025 GMT
Subject: CN=8710436cd76ed7359e2b2603dcdc93d07e7b0700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:a4:bb:1d:7c:be:fc:f7:c6:cd:2c:8c:02:
04:b2:f5:e0:2e:9e:67:e4:7c:b6:3d:45:ed:8a:bd:
28:6f:e6:95:ad:29:f5:dc:98:e0:c9:91:b2:fc:53:
e6:24:4b:ad:16:d0:a2:0d:bd:5d:76:92:11:b0:3f:
86:a1:6f:62:b3:34:b7:d9:59:c2:b3:b9:68:ef:65:
1c:53:bb:a6:c4:55:3e:33:21:b8:a2:f5:51:ea:2e:
8b:2e:ba:17:37:ee:14:c8:ff:cf:51:18:4f:e1:d1:
c6:4e:3a:ff:04:52:51:85:b0:84:dc:57:13:b2:10:
68:ef:09:08:bc:f6:0a:d2:fc:a6:3d:1a:5a:30:84:
1a:55:7c:c1:f9:52:cd:9e:dd:0c:fd:64:83:5b:48:
90:0a:d3:8b:d2:0e:67:d2:70:21:d3:cd:62:d5:5c:
d7:99:d1:6f:e5:70:6b:5b:1e:10:78:d4:8b:82:60:
f1:8d:57:ea:8f:d7:9d:02:12:98:8b:b8:e2:64:97:
67:54:72:b1:42:5e:5d:71:f9:b8:e7:90:0e:ae:1a:
c8:0b:a7:c1:78:c9:d1:98:38:55:e8:d6:2d:29:43:
98:20:79:53:f9:3f:78:5c:f4:34:c9:e2:ea:f9:53:
f1:01:34:c3:c4:70:98:72:77:59:98:e2:6f:e6:2d:
e0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:43:6C:D7:6E:D7:35:9E:2B:26:03:DC:DC:93:D0:7E:7B:07:00
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:69:9e:cc:14:3d:65:9d:27:c8:e2:1c:47:14:50:85:25:25:
29:a9:1e:c4:94:63:8d:66:ed:52:30:69:4d:9e:40:07:19:18:
70:fb:83:52:6e:72:7e:48:fd:dd:05:18:a4:5c:d2:af:76:52:
ea:b5:1d:60:86:50:55:3a:e0:27:a2:26:06:74:62:a4:8c:a4:
b0:3b:5b:ea:b9:6a:70:c3:49:63:4a:4a:84:63:3f:12:ce:22:
e7:a3:51:d5:77:66:66:bf:0e:a1:d7:07:f3:e8:0c:fd:87:14:
3d:76:86:48:6d:0e:75:37:26:6d:2c:90:25:d6:da:6f:04:48:
ba:7d:28:73:45:85:42:43:c8:47:1f:dc:b6:1c:68:d6:03:dc:
f7:d4:6c:6c:14:17:b5:ab:7d:1f:4f:aa:cf:cc:12:eb:22:ba:
e8:f1:ac:a6:3e:17:bc:f6:c6:ff:8c:4d:8d:15:3f:9c:e4:0d:
ab:5c:52:2d:15:02:ba:82:25:5f:47:43:0c:48:66:7f:34:f4:
76:95:14:c7:e8:88:92:9c:2a:69:68:49:aa:cd:29:5b:c1:ba:
ee:62:2a:26:21:38:f2:ed:92:8c:2e:2d:46:9a:6e:ef:cd:e7:
d4:0d:3d:5a:5a:4e:1a:78:80:2f:39:43:aa:d9:5e:60:8a:8d:
69:2f:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:29 2025 by rpki-client