Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: njj6gE9Hl2qmQDhcL8UGsIzNwOscFeVXa3q6wSVGFZM=
Subject key identifier: 8D:70:35:DD:8A:61:43:BD:85:87:60:6A:E9:5E:50:52:EC:FD:0B:E3
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 0198D6298A1812CA12CE09BEE0651D138104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 155F
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: BdEPl2Neefl4GoaE_iupoW4vob4.roa (hash: iJi1nUHFyZuED4JVs82b7kN1M64TmmDeD6kSjvIrHS0=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: UKpOxK8L8TP9J3VVpk3qcuVot7GswBQAcd1dMzmXwdk=)
3: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8a:18:12:ca:12:ce:09:be:e0:65:1d:13:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=8d7035dd8a6143bd8587606ae95e5052ecfd0be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:de:78:cb:05:82:52:25:96:16:e7:73:63:
c7:14:9e:38:63:4b:ea:1c:c8:af:cd:ea:cf:72:56:
fa:c6:7e:29:65:aa:ce:84:db:27:67:c6:b5:9a:0b:
24:b1:38:01:5e:d8:26:48:eb:66:1d:98:99:91:d9:
a5:1a:a5:fa:a1:dc:4c:46:9d:25:a8:fe:07:5d:aa:
36:a2:93:3f:6a:15:10:77:64:8e:0b:4f:50:35:3d:
13:8a:2e:64:ed:d7:72:cf:b7:f6:f0:4d:c2:99:d3:
c9:e4:f1:ab:73:ec:7e:06:d3:fc:b0:c4:29:0a:de:
0f:ae:a1:38:bc:03:b9:45:f8:9e:4f:ed:8e:87:db:
d7:fb:d7:9e:64:f8:12:19:4e:49:38:2a:57:d6:9c:
14:54:de:8b:ab:6d:12:84:98:f0:63:45:99:b0:d7:
e3:32:19:da:f1:bd:f7:d6:d6:06:c6:7f:d3:a7:d1:
b9:ca:13:7f:00:b1:18:ae:f7:55:f2:1e:72:51:dd:
77:40:e2:d7:21:e2:92:86:c9:9c:c2:13:87:79:96:
ae:f2:1e:a5:31:18:18:aa:ee:68:51:6d:34:e7:8c:
dd:e1:82:d7:f0:ba:24:48:a6:ce:d6:78:e4:be:3e:
86:76:19:f9:86:f0:38:85:1b:79:a6:4c:39:70:4c:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:35:DD:8A:61:43:BD:85:87:60:6A:E9:5E:50:52:EC:FD:0B:E3
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:96:c9:c8:cb:53:c9:fa:d1:53:25:e1:c8:52:ee:56:00:df:
7e:d3:ee:7a:3d:32:be:47:59:e9:81:bb:9b:2e:b3:a5:25:d6:
7b:5e:aa:51:33:75:0b:0c:d9:6d:bc:f8:8e:4c:bb:47:fd:e5:
94:c3:8d:6e:2b:00:b8:9b:c3:b4:01:86:44:4d:bf:f9:4b:2c:
a8:ce:bd:e6:27:8b:3a:cc:72:3e:83:8d:54:7f:28:29:07:bd:
ed:5e:56:ec:60:f4:ba:e7:76:49:ce:b9:46:d5:13:cf:ed:5b:
08:c0:47:bd:43:20:43:e1:60:6f:5e:5a:3e:d1:a6:44:45:a9:
99:3f:b4:06:e3:0a:fb:56:08:bc:d1:93:f3:3b:47:97:8b:ac:
8e:0d:8e:28:52:55:3b:65:73:a0:23:de:2f:f7:e2:60:2c:cf:
71:51:3a:12:38:6e:85:bc:6e:63:3b:17:36:3b:b6:09:6a:36:
ba:8d:64:f9:a1:a1:38:1a:01:da:4c:06:14:c0:b2:41:9d:11:
e6:54:37:ab:42:d3:a1:d1:c7:cb:1a:30:1a:10:e3:46:c1:43:
ca:87:91:2d:bd:81:ed:72:49:f7:08:c9:e4:af:ed:5e:b3:bd:
05:b6:c8:15:2f:b0:17:e8:c0:bf:86:8f:81:da:68:3c:b4:27:
a0:89:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:01 2025 by rpki-client