Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: vLfdhPEWU82v7r70ltkK7ffCG4UMSwyuMI7nu87TKZg=
Subject key identifier: D1:79:DA:B9:29:D1:3E:58:B5:36:91:2B:A0:03:75:AE:D7:1E:AE:DC
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 0198D8509D07CD1A10CC00E1649F262D8359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0E68
Signing time: Sat 23 Aug 2025 19:03:38 +0000
Manifest this update: Sat 23 Aug 2025 19:03:38 +0000
Manifest next update: Sun 24 Aug 2025 19:03:38 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: n7HSZ5EkLiIQOQoFNOQTTFeBenCqAoVm9VdCfO1MJkA=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:9d:07:cd:1a:10:cc:00:e1:64:9f:26:2d:83:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Aug 23 19:03:38 2025 GMT
Not After : Aug 24 19:03:38 2025 GMT
Subject: CN=d179dab929d13e58b536912ba00375aed71eaedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:96:a1:c1:e7:52:ab:3a:8c:db:63:a2:a7:
bb:94:3e:b3:bb:00:66:c8:21:34:73:2f:7e:aa:8d:
fc:0c:ea:6e:3b:df:3b:6a:3e:39:8a:40:1a:d8:32:
68:33:6f:9a:54:9c:41:71:aa:74:47:e3:b6:5c:11:
bd:79:e4:e1:ba:fd:96:c2:19:a0:03:fd:9c:73:57:
44:30:b4:7a:f5:0c:21:f2:03:70:02:78:45:70:d3:
6f:60:09:d3:85:37:3f:7a:5d:34:a5:d4:db:1d:5b:
8f:88:30:19:ed:52:b7:82:c3:ff:30:6d:71:e6:a1:
f1:bb:89:4c:fc:c0:e8:94:7d:52:87:7c:c1:67:bd:
e5:0e:0c:1d:d0:bd:5e:90:62:25:38:ae:0f:ae:0b:
4d:f2:75:fc:ab:b9:af:5f:e6:49:52:2f:08:2e:ff:
03:55:13:4c:e3:1c:8e:66:25:7c:c0:85:76:a9:b8:
5b:88:3a:93:d2:25:62:9e:62:7f:1f:a8:ba:01:73:
41:ef:29:90:14:97:3b:15:45:90:f5:0d:06:b8:f4:
cf:e2:01:9d:18:fd:6d:6d:1a:df:48:30:4b:db:4e:
66:0f:de:cf:7b:da:89:b5:34:8e:64:78:08:42:67:
52:77:c3:59:ad:76:ec:24:4f:52:67:df:1f:6b:de:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:DA:B9:29:D1:3E:58:B5:36:91:2B:A0:03:75:AE:D7:1E:AE:DC
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:76:88:ba:09:a4:e4:2c:a9:c7:43:60:01:be:46:de:bd:
a2:a4:63:29:c7:c2:c2:3f:27:bb:ea:7e:09:a5:dc:a5:32:4f:
19:0c:9e:16:a6:76:4e:ea:d8:48:b0:76:90:21:0d:af:c6:8b:
ee:8f:54:28:5a:bf:90:b5:ed:2b:70:73:d0:fc:4c:fd:9b:c8:
06:75:b7:07:c2:0e:eb:77:70:1b:77:84:d9:89:41:a4:dc:e7:
15:70:bc:80:c6:94:de:c3:06:d8:fc:98:17:d6:73:e4:57:66:
44:5e:d7:2a:de:9a:fd:c9:db:5b:cc:76:27:a5:ea:ed:49:56:
0c:5b:61:52:09:af:ca:39:b2:6a:ca:e6:1e:bc:b2:bf:27:65:
64:a4:fb:ef:b9:11:18:08:46:a7:a3:03:d0:0c:c9:c7:5a:38:
67:01:8f:05:cc:91:6d:3c:7b:be:c4:a9:9a:f3:48:4d:77:1b:
de:fc:ba:89:77:fd:1a:f6:53:1a:c9:3c:a6:17:9e:4d:25:3e:
fa:2d:23:ae:d8:63:e4:a0:fa:bf:19:7c:68:3d:36:97:59:86:
73:ef:08:ef:96:4c:a5:f5:3e:ab:51:0c:91:ce:8c:a9:35:39:
60:37:c6:50:40:68:59:13:c2:b9:84:b5:e4:56:4a:e5:c7:8f:
a6:e1:c4:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUJ0HzRoQzADhZJ8mLYNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi
ZjZhZjQwHhcNMjUwODIzMTkwMzM4WhcNMjUwODI0MTkwMzM4WjAzMTEwLwYDVQQD
EyhkMTc5ZGFiOTI5ZDEzZTU4YjUzNjkxMmJhMDAzNzVhZWQ3MWVhZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rSWocHnUqs6jNtjoqe7lD6zuwBm
yCE0cy9+qo38DOpuO987aj45ikAa2DJoM2+aVJxBcap0R+O2XBG9eeThuv2Wwhmg
A/2cc1dEMLR69Qwh8gNwAnhFcNNvYAnThTc/el00pdTbHVuPiDAZ7VK3gsP/MG1x
5qHxu4lM/MDolH1Sh3zBZ73lDgwd0L1ekGIlOK4PrgtN8nX8q7mvX+ZJUi8ILv8D
VRNM4xyOZiV8wIV2qbhbiDqT0iVinmJ/H6i6AXNB7ymQFJc7FUWQ9Q0GuPTP4gGd
GP1tbRrfSDBL205mD97Pe9qJtTSOZHgIQmdSd8NZrXbsJE9SZ98fa951lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNF52rkp0T5YtTaRK6ADda7XHq7cMB8GA1UdIwQY
MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et
MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2
LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkp2iLoJ
pOQsqcdDYAG+Rt69oqRjKcfCwj8nu+p+CaXcpTJPGQyeFqZ2TurYSLB2kCENr8aL
7o9UKFq/kLXtK3Bz0PxM/ZvIBnW3B8IO63dwG3eE2YlBpNznFXC8gMaU3sMG2PyY
F9Zz5FdmRF7XKt6a/cnbW8x2J6Xq7UlWDFthUgmvyjmyasrmHryyvydlZKT777kR
GAhGp6MD0AzJx1o4ZwGPBcyRbTx7vsSpmvNITXcb3vy6iXf9GvZTGsk8pheeTSU+
+i0jrthj5KD6vxl8aD02l1mGc+8I75ZMpfU+q1EMkc6MqTU5YDfGUEBoWRPCuYS1
5FZK5cePpuHEzg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:39 2025 by rpki-client