Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: A1FHI+qNAq/A2kXWMHd/lsuc716gWFocxeWZwdoRI1w=
Subject key identifier: 0B:92:02:90:A1:01:83:8A:9B:26:78:20:71:BB:40:E0:86:12:00:0C
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0198D660CC1091AA2BABBEA010F905D98323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1320
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: aRz4+07J8tb2HC9EUA2yRnliu7d3ZBFEjDKH344Jkj4=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
5: XsgnOEF7vfK5ibiX2gO0dbUdvH4.roa (hash: dl+Z9gagDpH+bvVgRzlNoZwLOa8t3AYa/5on8N/ozZc=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: xB73OBsZmuzN79Vhtf8kryCcWmk.roa (hash: CLrSn3OQsqOlGN5weo45FfFYrug0K8N6/ukDZBW/AM0=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cc:10:91:aa:2b:ab:be:a0:10:f9:05:d9:83:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=0b920290a101838a9b26782071bb40e08612000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:cf:5f:33:0d:87:f5:5c:b3:1f:dd:99:3d:
c7:8e:93:8a:aa:12:37:1a:c8:70:72:dd:51:d9:d5:
1a:eb:23:4a:60:9a:01:28:e4:f8:ae:77:0c:61:e5:
c7:70:cc:4c:09:58:75:60:92:30:a9:aa:80:5d:b9:
33:b4:98:dc:bd:5a:64:12:4f:93:5f:de:45:56:3b:
bf:92:b1:02:ab:aa:43:6f:15:15:a0:5e:6b:db:ee:
c5:fe:83:93:e2:e4:1b:e6:9c:f3:67:b1:ca:f8:7c:
84:76:ef:d8:fa:64:95:20:6d:ab:0e:2c:ac:99:84:
6c:b0:ac:36:d0:04:a4:9d:fb:1f:d7:64:6f:74:c1:
68:81:da:bd:2e:8d:a6:31:7f:f3:8a:74:14:67:c0:
b2:d4:e0:5f:00:5c:44:32:ab:db:7c:3b:cb:b0:45:
32:75:2c:fe:51:70:0f:36:54:79:1d:56:f1:1c:6c:
85:85:ae:b5:e8:a2:6e:02:9b:e0:7a:4e:14:d5:d7:
80:56:a1:a9:ca:3a:7f:54:ee:f5:8a:a4:b6:92:3b:
63:b5:ec:54:f7:d7:e9:6e:57:91:3b:a7:52:e4:88:
58:bc:3c:57:36:cf:99:b4:32:6d:6d:95:96:29:9b:
26:78:83:37:ae:8a:3d:b7:20:74:c4:cf:5c:b8:2e:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:92:02:90:A1:01:83:8A:9B:26:78:20:71:BB:40:E0:86:12:00:0C
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:56:c4:a0:ea:94:48:c1:94:c6:cb:28:87:a2:4d:84:82:
8d:1b:b8:fa:d5:32:11:7b:1f:59:e0:c6:82:87:fd:88:46:ba:
5c:13:3c:c1:cd:d7:25:39:9d:78:a5:64:65:62:2d:86:c9:c4:
bd:16:0e:95:a9:e5:1a:d5:c6:0c:88:24:54:7d:de:03:2e:b3:
24:4e:5c:bc:af:1f:2a:d6:d6:71:19:fb:e4:17:5d:a1:6f:52:
b1:06:40:56:3b:f5:77:fb:da:f2:39:fe:4c:8f:e1:fa:fd:15:
42:e1:72:65:35:45:f1:9b:d4:fc:7e:a4:42:b2:97:0c:2a:ae:
c9:a8:32:d4:b9:09:61:da:6d:e2:1e:3b:fe:f8:7b:58:59:c7:
0a:e8:84:ed:c7:5a:fa:77:61:49:89:aa:65:d7:6f:ed:a9:c5:
43:a1:79:35:b9:c4:e7:89:53:0f:ce:19:69:51:e9:09:d8:db:
a7:10:a2:15:89:91:53:bc:5d:72:27:c5:9d:b6:8b:70:43:1c:
d8:0b:d1:12:80:9a:fc:69:73:a7:f0:41:37:cb:c3:86:b4:f2:
d3:7d:e0:09:84:f7:bb:e2:b3:82:3e:a2:10:6c:ca:ca:2c:f2:
ca:3e:b4:1f:d1:c3:c4:84:71:7a:f4:35:45:25:ac:53:9c:67:
a3:2c:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:46 2025 by rpki-client