Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: XlduELl0C/vd8tu/CnHpDOs9JgAFy0+dRhSpQigZ8l0=
Subject key identifier: D2:84:15:36:97:CF:C5:B1:7C:E7:C2:62:86:20:CD:C3:68:B2:DA:41
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 01984B8A5124B2754E73393672B1313A2741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 1311
Signing time: Sun 27 Jul 2025 11:00:12 +0000
Manifest this update: Sun 27 Jul 2025 11:00:12 +0000
Manifest next update: Mon 28 Jul 2025 11:00:12 +0000
Files and hashes: 1: 3x4lyNPFV_PxlA3wI9Ks-6pzfts.roa (hash: /RTGCKhsNS1R75WUzsn5pnztjjekAC7jsZZLRjCrE5s=)
2: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: rf1Vwy7y3dUmNdbHfRdtz7drHk6PgxBLGENGk/QOLw8=)
4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:51:24:b2:75:4e:73:39:36:72:b1:31:3a:27:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jul 27 11:00:12 2025 GMT
Not After : Jul 28 11:00:12 2025 GMT
Subject: CN=d284153697cfc5b17ce7c2628620cdc368b2da41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:02:57:29:2f:3c:1c:56:cf:a7:07:40:b3:
83:f1:90:3c:ce:ad:e1:ba:7e:26:10:ba:63:7e:07:
35:7e:d9:cf:78:af:1b:b5:f4:47:77:df:d5:a3:9d:
db:46:9e:be:62:1d:1f:45:c3:d5:7d:4a:46:bb:85:
5d:cb:78:34:3e:79:88:81:ac:15:c2:4e:e5:d8:9a:
1d:cb:4b:ec:8e:58:2b:66:3d:1a:cb:cf:41:f9:d6:
af:ad:c9:f1:44:41:83:f4:34:ca:15:da:09:e8:29:
99:f0:a0:42:c1:e8:8d:de:30:f0:78:23:59:19:91:
42:a8:98:a1:2b:36:d6:59:4f:b9:2a:3e:62:43:ab:
32:7d:47:3b:fb:36:a7:ae:5b:5c:3f:b1:41:26:fc:
87:61:ff:0c:a0:5b:37:7b:fb:98:28:74:49:04:db:
77:fa:58:a8:e8:ad:3b:58:6d:ae:03:05:fc:ab:65:
68:af:a0:19:7e:cd:de:41:4a:69:f9:6a:dd:69:0b:
69:0e:b7:e0:4d:58:23:54:cb:03:d6:05:12:3a:f6:
5b:89:ae:db:c6:ab:79:87:b1:2e:ec:28:ad:e2:04:
b1:f0:45:f4:67:ca:2c:0e:2a:02:4b:70:eb:c8:22:
7f:44:ea:a6:c4:d3:3c:37:a3:28:6d:e8:1e:30:23:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:15:36:97:CF:C5:B1:7C:E7:C2:62:86:20:CD:C3:68:B2:DA:41
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:93:3b:e7:d5:8e:4e:c0:2a:00:97:c0:82:c1:b5:c0:2a:4d:
61:2a:58:03:8c:f5:45:52:2a:46:c0:47:c4:8f:ce:b5:e9:dd:
54:40:dd:5e:0c:36:64:cb:2f:a4:4c:e1:25:98:da:4a:59:8b:
59:dd:46:8c:27:ab:8a:a9:44:4b:c6:17:1a:1c:94:5b:e3:0b:
f5:de:ae:4b:c5:22:50:9d:44:cc:51:04:74:74:3c:76:0c:3e:
0c:5f:ea:ea:2e:76:de:44:7b:51:61:6a:71:6e:4c:5e:93:47:
8e:69:e5:1d:fd:6d:53:2e:ee:93:db:03:9f:56:20:3f:ab:b3:
b8:65:8c:de:91:54:e7:5e:eb:08:f3:41:77:f4:d1:97:fc:0c:
c5:d6:80:7b:06:64:56:2d:27:cd:e4:ed:31:20:75:c5:4c:67:
2e:69:f5:d4:40:22:5e:8b:b5:7e:f8:05:3d:ec:51:e3:7d:1e:
76:43:e3:5a:0e:c7:27:13:ff:05:08:db:69:42:24:6f:80:fb:
4a:33:58:58:b8:e9:f2:4f:a9:d8:9e:52:1e:0f:42:d6:28:6f:
a4:c3:73:27:39:3b:15:e3:48:e3:f7:90:83:13:bf:c8:18:52:
8a:49:9a:d6:21:ed:50:ef:49:51:26:b9:3e:d1:9f:58:1c:03:
4f:95:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:39:53 2025 by rpki-client