Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: +CHTwR8+IXlYxncMzDUl7DuNCsHLYfuu/PShjjJgfZ0=
Subject key identifier: AB:50:5E:BE:FB:93:B5:30:7E:41:E4:22:5B:8F:2D:53:28:54:9A:EF
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 0196C238F36DE5B05C55C570497C584B8976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 144B
Signing time: Mon 12 May 2025 02:00:34 +0000
Manifest this update: Mon 12 May 2025 02:00:34 +0000
Manifest next update: Tue 13 May 2025 02:00:34 +0000
Files and hashes: 1: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: NY4GCe0Td1qt1JTN92KeizKJWZLKD+YN2PRMsQebYd8=)
2: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=)
3: ozjUQxHmEATeBtgb_LyM3aKm4tQ.roa (hash: SCvwXmyf4wYWaXwbm/hei/KNEmH1H0hr2F8sJuDN8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:f3:6d:e5:b0:5c:55:c5:70:49:7c:58:4b:89:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: May 12 02:00:34 2025 GMT
Not After : May 13 02:00:34 2025 GMT
Subject: CN=ab505ebefb93b5307e41e4225b8f2d5328549aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:16:04:ad:92:32:10:5d:2f:df:15:19:1f:
0a:58:77:15:72:6c:73:e4:01:84:3f:a2:c9:d1:a0:
df:1b:55:81:c9:cb:43:f8:be:c4:6b:e1:c2:c1:c1:
25:de:2b:50:c7:0a:74:6b:a4:c0:ea:8f:66:3d:97:
7a:b1:8b:18:05:df:6d:6a:46:a0:fd:84:0b:f3:7d:
73:ef:83:79:77:86:f5:ea:df:4b:d4:17:c8:0f:8a:
c1:dc:42:e7:1d:8f:70:19:27:4c:ca:26:10:a0:d3:
ae:47:4d:66:31:cf:15:37:3e:a3:b3:0f:aa:77:1f:
cc:ce:6f:07:34:20:0f:7e:7c:11:db:aa:62:04:9c:
ec:7d:75:54:a7:10:d7:54:63:65:1c:44:07:74:19:
49:ee:3f:82:3c:4b:90:0d:10:68:be:f2:79:f2:ea:
ed:e9:10:0e:09:3a:15:57:bb:5f:aa:bd:64:33:c0:
05:16:94:6b:f6:45:5a:25:47:0f:2a:36:35:71:29:
44:7c:15:6a:94:93:ed:b0:28:e8:66:a9:e8:f2:1f:
7b:88:a0:89:85:fc:84:70:24:0e:7e:07:70:5c:21:
79:f3:98:af:62:a7:93:02:49:01:bd:ad:18:e7:7a:
5e:2c:c6:3d:51:c2:91:05:0e:5f:ef:b4:b7:a5:6b:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:5E:BE:FB:93:B5:30:7E:41:E4:22:5B:8F:2D:53:28:54:9A:EF
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9e:4a:97:b1:9b:75:42:43:a1:7e:2f:ee:2b:79:c8:92:dc:
c7:0a:42:60:ca:86:b6:c5:64:6a:04:19:04:7c:75:b7:bd:6d:
8f:5d:41:98:d2:fe:44:6b:03:7a:ba:3c:b8:08:49:12:78:5f:
9a:eb:dd:8e:4d:34:2d:35:04:da:16:8d:7c:7a:ef:f8:76:47:
0e:36:38:2e:21:0d:67:85:93:43:32:4a:07:ea:75:53:29:84:
59:38:80:1f:9c:4e:e6:c2:11:8f:3b:7b:b7:fd:a1:a3:4f:37:
99:09:85:bf:3a:4c:4f:bd:78:8a:1e:8e:58:1b:d4:39:9e:84:
69:8c:9b:8b:f5:a0:30:2a:80:aa:c9:7b:77:17:5d:40:62:c7:
5b:91:10:71:4e:55:f7:c8:1b:d4:9e:d5:0d:28:60:bf:fd:39:
8b:31:3b:8c:71:55:d2:67:2d:63:04:fc:0d:c6:2f:cd:1a:ad:
b2:bc:7a:8f:4f:d9:aa:e2:91:2c:19:c7:83:f5:78:e4:f2:aa:
00:62:1b:f5:d3:28:59:1e:7e:ba:83:74:cd:32:99:bb:ff:f9:
9b:37:ce:d5:13:ee:b5:84:af:59:c7:34:6a:24:4b:aa:fb:0e:
68:db:7f:8a:68:ac:ac:e6:f1:da:a1:e3:87:12:c5:e5:2d:7d:
75:f4:32:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOPNt5bBcVcVwSXxYS4l2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3
OTE5NTQwHhcNMjUwNTEyMDIwMDM0WhcNMjUwNTEzMDIwMDM0WjAzMTEwLwYDVQQD
EyhhYjUwNWViZWZiOTNiNTMwN2U0MWU0MjI1YjhmMmQ1MzI4NTQ5YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkywWBK2SMhBdL98VGR8KWHcVcmxz
5AGEP6LJ0aDfG1WByctD+L7Ea+HCwcEl3itQxwp0a6TA6o9mPZd6sYsYBd9takag
/YQL831z74N5d4b16t9L1BfID4rB3ELnHY9wGSdMyiYQoNOuR01mMc8VNz6jsw+q
dx/Mzm8HNCAPfnwR26piBJzsfXVUpxDXVGNlHEQHdBlJ7j+CPEuQDRBovvJ58urt
6RAOCToVV7tfqr1kM8AFFpRr9kVaJUcPKjY1cSlEfBVqlJPtsCjoZqno8h97iKCJ
hfyEcCQOfgdwXCF585ivYqeTAkkBva0Y53peLMY9UcKRBQ5f77S3pWuLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtQXr77k7UwfkHkIluPLVMoVJrvMB8GA1UdIwQY
MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt
NDVlYTM4ZGEyMjE4LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4
LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADp5Kl7Gb
dUJDoX4v7it5yJLcxwpCYMqGtsVkagQZBHx1t71tj11BmNL+RGsDero8uAhJEnhf
muvdjk00LTUE2haNfHrv+HZHDjY4LiENZ4WTQzJKB+p1UymEWTiAH5xO5sIRjzt7
t/2ho083mQmFvzpMT714ih6OWBvUOZ6EaYybi/WgMCqAqsl7dxddQGLHW5EQcU5V
98gb1J7VDShgv/05izE7jHFV0mctYwT8DcYvzRqtsrx6j0/ZquKRLBnHg/V45PKq
AGIb9dMoWR5+uoN0zTKZu//5mzfO1RPutYSvWcc0aiRLqvsOaNt/imisrObx2qHj
hxLF5S19dfQyRg==
-----END CERTIFICATE-----
Generated at Mon May 12 05:25:59 2025 by rpki-client