Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier: StUXvgeM1uuVgM6y+L2pUaVMdXwTKkzUTT/HrU7VIME=
Subject key identifier: 55:E3:68:C2:8D:49:41:D2:2B:51:A5:71:F3:0F:70:F0:20:F9:D6:38
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 0198D4A7C899E1C49AE77E5F6C2A2D35B1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number: 0446
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: o30OAOntwGzxzP4KY0MHdm1Ef9cZUo8Gi/u3EYh6xOk=)
3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c8:99:e1:c4:9a:e7:7e:5f:6c:2a:2d:35:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=55e368c28d4941d22b51a571f30f70f020f9d638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:5a:80:c2:08:ed:95:06:a1:3e:9e:59:94:
cd:2c:43:ff:82:92:ae:b0:74:63:2a:b1:26:9c:21:
dc:0a:be:87:f9:df:20:24:7c:10:94:b1:6c:65:77:
e5:c6:c1:d1:7f:18:51:cf:70:37:73:bd:94:3d:fd:
56:59:a7:79:bc:32:c7:29:30:be:ce:08:26:7e:0b:
c1:c0:4b:51:e9:d0:a1:11:8e:e1:ec:ea:ef:62:a9:
a8:83:74:64:51:7b:34:e5:2d:c3:63:d4:10:6c:e3:
6b:99:dc:23:98:7e:a4:ac:91:dc:b5:3c:6b:1e:74:
25:48:a0:86:05:a5:b1:9c:33:de:2f:a2:d1:a6:91:
c8:dc:9d:35:86:7e:a7:2d:7b:34:44:aa:d5:87:54:
24:d6:a7:14:23:4a:92:b7:f5:7b:7d:67:d3:07:c2:
eb:dc:e5:8b:64:1c:95:04:09:c9:73:14:40:c3:01:
73:cd:1d:bb:f2:ca:32:35:14:2d:e9:7d:02:77:09:
5e:06:f2:3a:f7:2d:60:6c:05:e5:d1:62:a8:85:50:
f6:56:38:4d:d8:4e:e3:2d:da:09:d2:5f:12:f2:33:
32:db:ad:90:c1:75:1d:26:2f:63:99:68:f0:e4:df:
73:36:da:4f:00:67:fc:fd:2b:1d:48:9a:d7:72:ca:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E3:68:C2:8D:49:41:D2:2B:51:A5:71:F3:0F:70:F0:20:F9:D6:38
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:05:e1:51:a9:32:0d:04:4e:7a:e7:8a:1a:fc:d1:35:c2:6a:
ea:7b:bd:32:6d:b4:b1:ce:de:bf:50:76:02:27:d7:9c:e9:fc:
4d:87:5e:8d:36:b0:c0:55:04:cd:74:39:5e:b6:6b:67:27:d1:
b6:c5:c0:33:82:03:1d:77:a6:36:89:14:d6:c6:64:dc:5d:9e:
ac:42:8a:af:15:47:a9:d8:67:33:c4:6c:77:f3:33:e0:d2:1f:
8b:c2:44:e5:ad:fc:ea:a0:d1:78:3a:dc:d2:3a:43:aa:13:33:
a0:ec:4b:09:19:17:86:7e:d4:28:21:56:3a:c8:87:cf:e7:d7:
f5:3f:eb:dc:d7:05:b5:92:ed:13:47:00:7d:51:d6:e7:34:18:
25:7b:ae:14:44:e7:da:10:f2:cd:e4:de:46:43:22:04:e4:1e:
b0:34:c1:3a:eb:f1:cd:05:35:b2:73:63:e5:e0:99:78:f0:a2:
b4:4c:40:c3:eb:ee:ad:ca:ff:a0:b0:1c:2d:d4:58:30:48:57:
dc:04:28:78:98:77:52:48:62:1f:db:8e:a9:be:4d:e1:64:92:
70:8f:46:d4:85:00:49:6d:38:f2:36:ce:83:4f:93:e7:4e:9f:
63:ee:e1:fd:28:59:60:0d:9d:a8:0e:64:6c:09:5c:a4:b1:f5:
dc:33:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:13 2025 by rpki-client