Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: yp+bpdB40ynG12slZOjZfMaQMFUPWZOPg0B4GAy/VO0=
Subject key identifier: EC:EF:16:FC:43:59:B6:06:5F:45:CE:A2:2D:94:34:79:00:DC:08:45
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 01977AC2075A6A932111E145B952BE5DD05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 126C
Signing time: Mon 16 Jun 2025 22:00:25 +0000
Manifest this update: Mon 16 Jun 2025 22:00:25 +0000
Manifest next update: Tue 17 Jun 2025 22:00:25 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: BJ9KqwjOQd0sJMR/bEYfpT7W31guaVb1YsWnEn0gadM=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:07:5a:6a:93:21:11:e1:45:b9:52:be:5d:d0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jun 16 22:00:25 2025 GMT
Not After : Jun 17 22:00:25 2025 GMT
Subject: CN=ecef16fc4359b6065f45cea22d94347900dc0845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:62:68:9f:a8:ec:61:61:90:23:20:2c:30:
9e:c2:53:ce:6d:f4:99:4d:aa:45:88:9e:4c:4a:a6:
8d:34:02:13:3f:66:55:6a:d0:8b:6d:5f:97:c5:7e:
e3:e2:67:f3:aa:50:9e:0b:21:a3:31:2f:34:d5:9f:
68:58:2a:98:07:29:2f:a8:aa:f6:56:78:d9:98:52:
19:63:49:de:64:93:8a:f9:77:1f:26:0f:4e:fc:06:
22:37:8e:03:d3:62:77:62:0a:9e:39:12:69:da:e9:
14:e5:72:f2:4f:f4:71:1c:13:07:f9:bc:cf:c9:35:
6d:66:c1:b5:93:65:39:7a:c3:2f:f4:d1:d3:12:6d:
26:f7:27:c2:c5:d1:31:d1:f5:99:09:d9:2a:86:a4:
cf:c3:2c:78:9e:9b:f6:8d:68:c2:99:46:36:aa:b6:
1a:3b:d1:d9:1c:a8:a7:c9:ee:b4:93:20:fa:0d:21:
c3:7e:93:79:14:e3:2a:5b:90:53:89:8f:5b:3a:6f:
dd:6a:7a:fa:54:cb:96:5c:14:3f:e1:a0:d7:52:f8:
26:05:1c:e8:00:eb:02:2f:67:03:f5:57:4e:fa:0c:
53:c4:80:64:ae:48:6b:ad:47:1c:a1:1b:bb:33:b6:
27:b9:13:4f:69:a1:63:28:5d:81:ab:5f:26:5c:d9:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:16:FC:43:59:B6:06:5F:45:CE:A2:2D:94:34:79:00:DC:08:45
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:0b:be:90:f7:b2:54:ea:53:f5:e9:6d:e2:9a:f6:11:84:
c6:a5:3d:3b:60:6d:8c:09:62:95:a1:18:58:8f:1f:6d:d9:e0:
2b:70:6b:e2:ee:80:47:3a:a0:20:8b:9a:c4:f0:2c:1c:90:35:
e4:5c:2b:5c:0d:b1:b4:24:a9:65:9f:73:68:95:05:c2:34:1c:
18:27:83:37:a9:23:b7:67:30:91:09:3c:c8:07:d1:32:88:a1:
2c:c4:3b:8e:0c:66:45:1b:90:f9:e6:28:97:cf:79:ce:6c:41:
70:33:72:38:bc:65:e4:10:c4:9b:df:3e:6a:99:7d:f7:86:5e:
39:03:38:d2:ac:05:3e:99:f8:52:87:f3:9d:7c:49:8e:e6:24:
2e:5e:e0:46:5d:16:36:13:15:ed:9d:40:47:68:5b:d7:99:11:
07:53:f7:19:45:dc:f0:d9:34:81:9d:bf:2d:36:4a:11:c1:b7:
20:05:91:b8:7e:da:17:81:e7:71:48:23:a9:63:28:68:9c:f3:
19:90:5b:b2:a6:93:28:6c:2f:fa:05:c9:bd:f2:18:d1:80:2d:
15:bc:e6:9a:f0:2f:cd:e7:a6:92:e4:b3:8a:90:2a:ce:53:ac:
1f:d9:06:a8:ec:09:9c:bc:42:53:3d:f5:74:bf:3c:d2:0d:34:
b0:8d:c4:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wgdaapMhEeFFuVK+XdBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjUwNjE2MjIwMDI1WhcNMjUwNjE3MjIwMDI1WjAzMTEwLwYDVQQD
EyhlY2VmMTZmYzQzNTliNjA2NWY0NWNlYTIyZDk0MzQ3OTAwZGMwODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF5iaJ+o7GFhkCMgLDCewlPObfSZ
TapFiJ5MSqaNNAITP2ZVatCLbV+XxX7j4mfzqlCeCyGjMS801Z9oWCqYBykvqKr2
VnjZmFIZY0neZJOK+XcfJg9O/AYiN44D02J3YgqeORJp2ukU5XLyT/RxHBMH+bzP
yTVtZsG1k2U5esMv9NHTEm0m9yfCxdEx0fWZCdkqhqTPwyx4npv2jWjCmUY2qrYa
O9HZHKinye60kyD6DSHDfpN5FOMqW5BTiY9bOm/danr6VMuWXBQ/4aDXUvgmBRzo
AOsCL2cD9VdO+gxTxIBkrkhrrUccoRu7M7YnuRNPaaFjKF2Bq18mXNmi9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzvFvxDWbYGX0XOoi2UNHkA3AhFMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC8LvpD3
slTqU/XpbeKa9hGExqU9O2BtjAlilaEYWI8fbdngK3Br4u6ARzqgIIuaxPAsHJA1
5FwrXA2xtCSpZZ9zaJUFwjQcGCeDN6kjt2cwkQk8yAfRMoihLMQ7jgxmRRuQ+eYo
l895zmxBcDNyOLxl5BDEm98+apl994ZeOQM40qwFPpn4UofznXxJjuYkLl7gRl0W
NhMV7Z1AR2hb15kRB1P3GUXc8Nk0gZ2/LTZKEcG3IAWRuH7aF4HncUgjqWMoaJzz
GZBbsqaTKGwv+gXJvfIY0YAtFbzmmvAvzeemkuSzipAqzlOsH9kGqOwJnLxCUz31
dL880g00sI3Ekw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 06:17:38 2025 by rpki-client