Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: fOqy9b/Zukk5k4sCm+K8+ig0p62AUEDEJNnVCZnUU7w=
Subject key identifier: 53:C9:F9:FE:4E:34:4C:42:FD:58:7E:2C:E4:6C:94:30:C8:06:85:8C
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 0197B7B33EE003828AA8FE7A5DEABEB317DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:06 +0000
Manifest this update: Sat 28 Jun 2025 18:01:06 +0000
Manifest next update: Sun 29 Jun 2025 18:01:06 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: 48xEio4qeHVcjE2/mBg6drmDcGqlNWz1NuZjsAR/Djk=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3e:e0:03:82:8a:a8:fe:7a:5d:ea:be:b3:17:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jun 28 18:01:06 2025 GMT
Not After : Jun 29 18:01:06 2025 GMT
Subject: CN=53c9f9fe4e344c42fd587e2ce46c9430c806858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:6d:dc:4f:7a:a1:1f:25:37:50:ee:ab:e7:
4c:13:90:56:1c:a8:f5:98:5d:cd:62:4c:66:fc:7d:
ce:72:a2:f9:e9:39:ce:d8:7e:11:4d:b4:99:ff:ae:
91:a4:73:df:f3:4b:42:2b:a2:99:da:ec:2b:5c:d3:
99:42:3c:25:80:7e:f0:51:d8:9b:19:c9:20:bb:58:
a4:2b:25:93:72:0d:e2:d9:71:d1:1f:d0:49:27:3a:
c1:f6:a3:15:0b:b0:40:e8:96:0d:06:7c:13:b8:ce:
70:9c:84:6a:09:d1:c0:f8:ef:e4:41:22:e2:62:36:
c3:e2:9d:1b:88:96:b6:c0:55:ce:5d:eb:f4:d9:7f:
d7:38:c7:02:aa:b1:28:44:50:a4:db:dd:17:00:89:
ff:1d:30:a7:89:f0:82:40:3a:b5:9b:5b:94:ba:56:
a4:11:5b:43:43:36:d9:ce:81:d0:f2:29:a5:72:2b:
15:75:bd:c2:7b:cc:69:bc:4c:e7:c1:73:75:6e:0b:
ce:cd:7a:3b:23:80:f1:b7:f0:72:54:4f:5e:8b:6c:
6b:ee:fb:e7:f6:bd:87:cc:8d:e3:c9:3f:af:2b:99:
11:d2:8d:52:d4:60:98:cc:29:d2:b0:33:77:3e:12:
7e:da:ba:fa:da:77:a7:c3:e7:91:c6:66:89:17:a7:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C9:F9:FE:4E:34:4C:42:FD:58:7E:2C:E4:6C:94:30:C8:06:85:8C
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8d:31:68:bb:5b:a9:f5:51:cf:3b:19:48:a2:9f:81:82:64:
8e:b5:2e:6d:c1:a3:0b:90:b2:95:48:28:0e:e1:54:10:4f:29:
ef:31:b5:b3:a8:73:3f:55:a6:0b:1a:20:20:8d:8b:4c:93:73:
e2:e3:3b:4b:a0:0e:4a:36:20:72:d7:6f:8b:50:6f:70:54:81:
c1:04:b2:25:9d:5b:2f:af:75:71:07:67:ed:44:4a:8e:75:ed:
41:fb:58:58:5a:58:f9:92:e2:46:04:42:7a:13:ae:58:25:ee:
f7:6a:bb:ee:72:cb:88:bc:dc:87:92:9f:fd:06:93:ec:06:89:
ea:c7:0a:e9:80:6a:a2:46:e2:d2:1d:e1:f1:e8:52:b4:66:25:
2d:96:dd:2d:d9:6a:76:97:2e:42:22:20:f1:fa:d2:b3:13:9f:
ed:41:25:54:ae:e8:13:e3:9d:d9:ef:1a:b6:ee:1e:23:83:0e:
b1:30:f6:43:9f:b9:fb:29:96:aa:98:46:9d:e5:90:4f:a5:ed:
9f:8c:c1:43:3b:e7:14:1b:29:66:46:ee:ab:40:be:84:3a:fd:
78:91:47:93:51:55:1f:a3:db:1b:1f:65:fc:9d:c3:c3:77:d0:
bb:a8:13:21:15:25:49:b0:9a:9f:9c:ec:42:76:e4:b5:64:e5:
3f:63:9a:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sz7gA4KKqP56Xeq+sxfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy
YTdlNmMwHhcNMjUwNjI4MTgwMTA2WhcNMjUwNjI5MTgwMTA2WjAzMTEwLwYDVQQD
Eyg1M2M5ZjlmZTRlMzQ0YzQyZmQ1ODdlMmNlNDZjOTQzMGM4MDY4NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsxt3E96oR8lN1Duq+dME5BWHKj1
mF3NYkxm/H3OcqL56TnO2H4RTbSZ/66RpHPf80tCK6KZ2uwrXNOZQjwlgH7wUdib
Gckgu1ikKyWTcg3i2XHRH9BJJzrB9qMVC7BA6JYNBnwTuM5wnIRqCdHA+O/kQSLi
YjbD4p0biJa2wFXOXev02X/XOMcCqrEoRFCk290XAIn/HTCnifCCQDq1m1uUulak
EVtDQzbZzoHQ8imlcisVdb3Ce8xpvEznwXN1bgvOzXo7I4Dxt/ByVE9ei2xr7vvn
9r2HzI3jyT+vK5kR0o1S1GCYzCnSsDN3PhJ+2rr62nenw+eRxmaJF6fjiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPJ+f5ONExC/Vh+LORslDDIBoWMMB8GA1UdIwQY
MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt
MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3
LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE40xaLtb
qfVRzzsZSKKfgYJkjrUubcGjC5CylUgoDuFUEE8p7zG1s6hzP1WmCxogII2LTJNz
4uM7S6AOSjYgctdvi1BvcFSBwQSyJZ1bL691cQdn7URKjnXtQftYWFpY+ZLiRgRC
ehOuWCXu92q77nLLiLzch5Kf/QaT7AaJ6scK6YBqokbi0h3h8ehStGYlLZbdLdlq
dpcuQiIg8frSsxOf7UElVK7oE+Od2e8atu4eI4MOsTD2Q5+5+ymWqphGneWQT6Xt
n4zBQzvnFBspZkbuq0C+hDr9eJFHk1FVH6PbGx9l/J3Dw3fQu6gTIRUlSbCan5zs
QnbktWTlP2OawQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:37 2025 by rpki-client