Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: zUi8id1w7Nn3zhwfbVTWzsbjRdcUjPSF+9QLIY/jt+k=
Subject key identifier: D5:F0:09:DD:B0:4A:3A:8D:AF:A8:00:14:D2:E6:3E:9C:01:33:9B:6F
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0198D583CD920CF67C7EB8DAC96DA5DCF1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 122F
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=)
2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=)
3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: 5I7w0R20FRrXHwGsVVTVU2R6cUz26RlJKbqthV1Dokc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cd:92:0c:f6:7c:7e:b8:da:c9:6d:a5:dc:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=d5f009ddb04a3a8dafa80014d2e63e9c01339b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:85:4a:ad:1f:f5:f9:a8:91:d0:84:7f:56:
52:33:de:c5:72:46:e1:32:d3:f3:12:4d:82:d8:80:
21:2b:e5:e7:cd:c7:76:d2:88:8f:1f:35:a5:fc:24:
a7:a8:77:aa:43:14:ef:50:2a:49:80:35:b9:3b:ae:
a5:ce:9e:dc:2d:39:c4:cb:23:43:3d:23:09:b9:17:
f7:76:54:02:10:3a:6a:62:2f:bd:c6:26:73:44:21:
3d:00:c9:e8:a7:a4:93:70:7f:86:47:20:f6:79:1c:
de:45:3b:b7:69:c0:a2:ab:1b:a4:6b:c7:7d:15:f6:
f7:d5:6a:8c:da:f0:c9:11:d5:53:0e:93:cd:ae:8a:
6c:e3:e0:2f:83:9d:3a:17:09:f8:3e:ed:02:39:15:
d0:61:62:24:39:93:93:62:09:86:17:bb:b9:70:b7:
1e:cc:96:ac:cb:27:a7:14:05:e6:99:e3:61:4c:13:
fe:75:9a:03:85:cc:50:27:fc:c0:8e:e1:45:a4:f0:
6a:6b:47:fd:24:93:ee:f5:4d:65:e7:6c:a2:bd:48:
9f:85:e7:95:4e:77:62:ad:23:85:2c:58:89:6c:4f:
78:d2:9d:46:b9:43:59:24:06:cd:d1:b8:5f:f5:a6:
cf:f0:f4:1e:9a:f8:41:ed:d2:6f:bc:ff:13:40:9e:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:09:DD:B0:4A:3A:8D:AF:A8:00:14:D2:E6:3E:9C:01:33:9B:6F
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:08:1c:2a:44:73:80:a8:e2:55:ac:d5:29:5a:0e:54:b3:
26:b2:3f:a3:37:66:8d:ec:03:a6:fe:04:e1:8c:e3:63:d0:44:
e0:f1:cd:23:1b:bd:c5:b5:6e:3c:29:2f:e9:37:47:0f:55:b2:
b6:3b:31:a2:20:84:56:47:49:b8:e2:5b:cd:0a:b4:e1:d6:6f:
9c:4a:db:a3:4b:67:27:db:23:2a:7e:2d:03:45:58:69:6d:8c:
e2:40:8c:69:d2:63:6b:b1:6f:51:3d:c9:bc:68:7c:03:ed:0b:
a3:77:a0:d7:ad:f2:31:31:d1:cc:af:ba:43:af:51:06:32:24:
7f:dc:85:39:19:06:19:0c:41:0b:dc:33:2d:02:a9:71:27:2a:
ea:54:71:cf:ff:7b:4b:fb:15:b4:03:3e:d7:e0:dd:5f:5b:8a:
e6:63:dc:2b:02:d3:ce:05:4e:24:73:df:41:e4:49:d4:7c:16:
ab:04:26:65:67:c9:f4:65:fa:02:7e:75:9c:b4:fb:62:1e:af:
57:83:b0:87:4f:dd:c2:36:0a:45:f7:3d:94:73:af:28:fb:f8:
9a:b4:3d:dd:61:87:0e:ad:1c:80:63:8b:46:b6:ab:ef:76:31:
c3:a9:81:1a:62:1a:86:91:b9:e7:6c:97:bd:b9:fe:b0:90:8f:
3f:00:e3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:00 2025 by rpki-client