Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier: op/ol4XTpK/lLvW/cMjW7iu0EI6SxXVUFJ6I9DqWJN0=
Subject key identifier: C5:A3:DF:79:31:C5:86:54:26:F3:12:0C:29:CC:B8:34:D8:15:F5:3E
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 0197B8C602F9EB30A8E5129029A5E33BA5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number: 03B3
Signing time: Sat 28 Jun 2025 23:01:13 +0000
Manifest this update: Sat 28 Jun 2025 23:01:13 +0000
Manifest next update: Sun 29 Jun 2025 23:01:13 +0000
Files and hashes: 1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: 0wvCTPtzPrm22HAetMmjdZBYQvpaTuMN8QwaNFDY4Fc=)
3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:02:f9:eb:30:a8:e5:12:90:29:a5:e3:3b:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Jun 28 23:01:13 2025 GMT
Not After : Jun 29 23:01:13 2025 GMT
Subject: CN=c5a3df7931c5865426f3120c29ccb834d815f53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:e0:c3:b7:75:c1:74:e2:c8:25:f4:00:b6:
3d:f0:02:d6:ff:23:4b:03:fd:93:f7:4e:5e:81:71:
0f:62:9e:3d:ea:03:ef:0e:64:ca:e6:2f:67:41:6d:
05:5b:e6:88:54:24:8e:dd:0b:d2:ae:28:9e:78:0b:
54:e2:74:b5:7d:a3:07:2e:b6:28:03:0b:0e:1c:37:
c7:f9:4a:03:f6:40:9d:09:ce:3c:8a:93:96:be:a4:
e7:14:4b:ab:bc:0a:18:5a:47:ad:2d:a1:c4:74:2d:
94:99:3a:d1:6c:b6:31:88:fb:f0:ad:f4:fa:31:21:
4e:00:1a:79:44:30:52:fc:0a:f4:5d:c6:e4:bf:4a:
9f:eb:11:0a:d8:9d:bd:63:18:11:c2:8a:ab:85:40:
1d:19:0b:98:5f:b9:bb:46:56:99:29:ac:79:44:b5:
65:63:63:48:15:a7:f7:34:89:de:ff:8b:69:66:d7:
74:82:06:2d:79:7d:a4:89:03:f5:8f:72:37:67:35:
c7:1d:53:b5:e7:a5:4e:e3:5c:2a:c9:27:9c:d9:29:
9e:1f:e5:cc:53:27:77:5d:76:fa:0e:90:e4:5d:f0:
d8:ca:80:f0:1b:0e:c3:1b:7c:91:9d:34:0f:54:45:
b4:8c:a5:b8:ec:93:45:58:9d:9d:91:ea:e1:a8:4c:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A3:DF:79:31:C5:86:54:26:F3:12:0C:29:CC:B8:34:D8:15:F5:3E
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:97:e9:7d:42:c9:96:8d:81:54:5c:66:03:80:ee:bb:16:9d:
6b:6c:7f:1b:65:0c:83:f0:d9:cc:98:07:69:b7:50:db:9f:53:
9b:b3:f5:7b:a1:f9:0c:22:4f:55:bb:f2:ab:ae:26:43:e7:95:
67:ed:7c:34:a9:da:1b:d7:b7:1c:a7:c4:3c:19:67:a8:07:6c:
2a:13:c2:40:b3:b7:bf:67:6e:51:8e:c5:cb:c8:04:71:d8:e9:
37:b1:91:d8:e7:d8:83:1e:8c:16:ba:2b:1c:4f:84:92:3d:9d:
84:45:81:37:55:ae:e2:3e:98:64:41:74:3f:4a:38:04:eb:f4:
6a:fd:40:29:16:93:cc:7f:f7:f5:66:00:97:a3:a2:cb:43:ce:
ce:ce:4a:22:64:09:38:2b:19:8f:79:9d:21:47:1b:d4:bf:a5:
21:28:50:eb:0f:7f:38:3f:6d:23:98:0a:93:4d:7b:3a:20:e4:
d7:20:c6:0a:40:35:90:ea:f3:20:ab:e0:00:1f:a4:7f:5a:08:
2d:3b:88:80:4d:14:26:1a:ab:01:a7:04:bf:55:f6:ff:0c:20:
79:d7:a3:60:87:97:a7:f0:90:19:8b:44:1d:4d:e1:6e:99:4d:
4f:e9:e9:f3:24:14:e8:d1:85:3e:24:6e:c7:d6:62:53:dc:0d:
df:f0:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:23:05 2025 by rpki-client