Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: IGq7N4VYwhfyrB2KW1bpWGDAPi2CIxl4zBqLF+clkEE=
Subject key identifier: CF:CD:F9:05:BA:A7:A4:CD:0A:9C:27:CA:AC:38:04:81:11:44:24:51
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0197B5C523092708196913702EFA96FC63AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 119A
Signing time: Sat 28 Jun 2025 09:01:25 +0000
Manifest this update: Sat 28 Jun 2025 09:01:25 +0000
Manifest next update: Sun 29 Jun 2025 09:01:25 +0000
Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=)
2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=)
3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: 7BZCy0wEBjNal7hQQGgPfWk/0HT7DRzwbeFvW+/wbtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:23:09:27:08:19:69:13:70:2e:fa:96:fc:63:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Jun 28 09:01:25 2025 GMT
Not After : Jun 29 09:01:25 2025 GMT
Subject: CN=cfcdf905baa7a4cd0a9c27caac38048111442451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:2e:48:84:f3:b6:ee:70:63:50:a8:03:ab:
4e:e1:22:f3:e8:53:ad:9a:a4:c8:27:6a:4b:dc:ac:
60:a0:30:fc:29:b1:42:f0:ee:96:ef:ba:67:60:47:
3e:59:cb:3c:d0:87:6d:90:c5:22:cf:6e:83:e4:ab:
00:c0:30:23:2e:16:cf:76:92:1c:b3:41:33:fd:9a:
29:eb:7a:17:39:79:e8:9c:ed:f4:63:de:a0:a0:9a:
9c:27:fc:f2:bf:7d:ee:94:ac:38:bb:86:fb:4b:bc:
dc:a5:7f:dc:95:ce:14:f8:dd:c4:79:58:ac:41:09:
15:90:65:8c:ca:a1:95:e6:b1:4c:03:29:b7:0a:82:
d6:28:b0:ce:87:85:13:d6:ea:6d:77:09:17:a9:fa:
1c:d9:61:7c:3d:4e:15:78:83:22:4d:80:80:d4:ab:
17:24:a8:e9:3d:60:b7:3e:66:0c:46:fa:3e:5e:6a:
ab:f4:7f:af:20:bb:2e:88:38:28:6e:1a:fa:b0:c8:
b2:fb:d3:63:94:b6:c7:2f:b0:1a:78:f2:e0:84:28:
d5:5d:46:02:66:69:00:32:23:67:18:c6:b9:16:d7:
64:ec:9b:ca:21:58:c5:8f:60:14:99:82:89:52:89:
13:0f:ab:96:bc:3b:14:a6:f1:9d:ff:50:e0:b4:a6:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:F9:05:BA:A7:A4:CD:0A:9C:27:CA:AC:38:04:81:11:44:24:51
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:21:7c:13:cd:7d:d0:a3:04:23:6f:05:50:30:e6:39:ae:72:
88:a3:b4:d9:fe:ab:bc:f5:de:50:1c:62:94:5b:bd:fa:cd:1f:
aa:0b:51:07:c7:3b:d3:30:85:5f:90:24:5e:c0:c2:d3:67:9c:
a2:15:ae:33:ff:26:a8:14:03:b7:18:5d:2a:0e:9a:8a:76:0b:
59:95:3c:5e:2c:d9:0c:52:45:65:5c:2f:de:f5:04:b5:21:29:
8f:d6:e6:f2:84:6c:6c:c0:a3:b9:18:67:db:24:8f:7b:ce:84:
78:4a:2c:57:03:d0:e4:8c:17:d4:8e:16:d9:8c:0d:d5:c2:e6:
38:30:94:60:89:16:be:9b:6f:80:d4:3e:4e:a1:a2:f6:11:58:
79:aa:bf:8b:5e:85:86:c5:5a:1a:26:68:2a:83:50:41:12:d9:
f3:1f:b8:85:02:bd:06:c0:f8:64:11:02:98:e8:1d:25:7a:92:
3e:89:08:6f:2f:9b:4c:94:4c:94:2f:2c:a2:0c:d8:75:f6:81:
51:b7:58:a7:53:d1:11:45:07:33:f1:e5:1d:d0:20:30:4b:aa:
e9:2a:78:7a:02:4c:c4:bc:b9:7a:02:d0:06:be:31:2e:a8:31:
78:ed:d9:7a:91:d9:20:d8:2c:76:3d:64:54:e2:12:56:75:55:
f3:c1:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:30 2025 by rpki-client