Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: 6sHsb7fsDg+xoPQZsoXxxStlTymI1dBeWGLTAoazv+U=
Subject key identifier: 6B:0D:12:DE:59:7C:85:E3:79:26:89:67:9B:F4:60:FA:3D:ED:EC:BC
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 0198D73BD2CF040456ECE3DA3601187DE90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:01:18 +0000
Manifest this update: Sat 23 Aug 2025 14:01:18 +0000
Manifest next update: Sun 24 Aug 2025 14:01:18 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: plrOmJcH1SjfJJlYWJEVkgTL0UtqYvAQkeaN9IAVmRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d2:cf:04:04:56:ec:e3:da:36:01:18:7d:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Aug 23 14:01:18 2025 GMT
Not After : Aug 24 14:01:18 2025 GMT
Subject: CN=6b0d12de597c85e3792689679bf460fa3dedecbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:7c:7f:b6:0b:78:23:71:ed:9c:ab:f7:cd:
9d:af:82:9d:93:b6:cc:01:db:38:5c:60:44:0e:35:
ef:29:57:9b:77:f0:3a:7a:4c:6f:52:de:a8:02:ff:
ce:fb:66:3b:11:2c:0d:ef:d3:ee:c4:64:17:89:2c:
0a:f2:9b:27:90:20:33:06:0d:49:83:73:b8:94:d8:
9b:f0:33:2d:21:53:fb:f7:1b:29:dc:5c:ea:d2:76:
b4:71:91:91:ce:47:cb:d2:16:e0:73:12:56:ca:9f:
29:84:e0:fc:de:5d:26:ac:19:ff:85:c1:2b:fd:e0:
27:2e:a9:67:48:56:2a:23:91:bf:25:9b:ba:9f:de:
ff:0f:89:61:85:7b:51:55:64:59:59:1b:07:31:11:
ca:82:d4:14:91:4c:b5:de:80:a1:ba:d5:03:90:bc:
a0:46:76:70:49:66:40:f9:ec:94:47:d7:cc:fa:ff:
27:bf:ae:d1:0e:fb:f8:cb:b4:c2:b0:8f:c8:8b:9f:
c4:e1:d8:6e:d0:ce:16:b6:1a:06:13:b1:ee:52:67:
69:b1:f2:a3:a1:37:5e:d0:7a:89:81:e3:f8:eb:ed:
a4:dc:b9:86:eb:63:c8:08:9b:78:45:74:1d:75:51:
a2:9d:b7:8b:43:0d:e7:9b:37:dc:46:3c:3f:52:d3:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0D:12:DE:59:7C:85:E3:79:26:89:67:9B:F4:60:FA:3D:ED:EC:BC
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:96:22:80:90:fa:29:76:ac:4a:d7:4c:ac:26:6d:cf:e5:cd:
e5:fd:d9:cc:d7:61:e5:d0:04:95:b6:80:a7:67:61:1f:33:a5:
51:ec:3c:bb:27:82:c1:75:72:d0:0e:8c:2d:40:1b:0d:32:1f:
1e:c7:ed:30:df:d2:68:dc:2d:22:0a:29:c7:a8:74:3a:f2:26:
50:f3:4d:c4:39:50:47:3d:bd:e8:b1:37:ca:4b:df:9c:ab:2f:
cc:ca:80:bf:98:55:d6:d0:3d:e1:b7:22:e7:47:6a:53:ef:ed:
c1:30:d9:41:3c:02:12:c3:e9:4a:65:ea:e7:64:78:17:2d:ea:
8b:8f:96:d4:2a:b3:a2:17:38:56:8f:e9:92:80:23:30:ca:5e:
a7:3c:49:af:23:34:16:eb:3d:60:ac:56:56:0f:5f:5e:c9:93:
dc:47:e0:00:ae:95:3d:24:fb:e2:a9:f1:38:a0:ba:2a:46:61:
d2:85:f2:c3:df:ae:41:b3:8c:50:f3:f4:c6:70:bc:8f:41:d6:
96:66:fe:3c:7e:1e:fe:b3:58:18:b7:59:1f:21:36:99:b0:fd:
42:a6:73:a0:2e:9a:54:1e:ff:73:5b:e3:4c:3c:15:ec:58:36:
0b:49:0a:81:56:92:a8:93:67:9e:2b:a1:de:70:c2:56:f8:91:
c5:7a:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:10 2025 by rpki-client