Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: vASFoDsx6/2HjhBHpHt/FaoeZl9WkEEby/l2KzfpUFc=
Subject key identifier: 47:75:17:75:C5:49:53:CE:62:3B:72:B1:C1:A1:63:EA:3C:3E:C1:AD
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0199C3E9147353F056AFA0A9F2C1997719F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 11F1
Signing time: Wed 08 Oct 2025 13:00:56 +0000
Manifest this update: Wed 08 Oct 2025 13:00:56 +0000
Manifest next update: Thu 09 Oct 2025 13:00:56 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: vhN5a8KcMl+/8mj+ohUos0KTMBdlGf6R9DAXmpmIGpg=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:14:73:53:f0:56:af:a0:a9:f2:c1:99:77:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Oct 8 13:00:56 2025 GMT
Not After : Oct 9 13:00:56 2025 GMT
Subject: CN=47751775c54953ce623b72b1c1a163ea3c3ec1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:23:18:6a:5f:64:e8:9e:87:bf:ba:11:ab:
3d:a1:bb:0d:a8:04:65:99:df:f6:aa:d5:12:75:3a:
38:84:a3:81:69:d7:6e:aa:91:30:09:4e:f7:7e:2e:
3b:c5:0c:b1:98:1a:57:ed:a8:f9:06:7a:12:7d:44:
5f:9c:1e:6c:dc:94:59:8d:37:af:3c:72:f8:98:3b:
52:5f:16:77:03:12:50:e6:bd:fc:61:69:21:4b:9e:
54:bb:f2:9b:ab:e2:1e:27:74:45:ec:64:1a:c2:2b:
22:01:6a:24:3d:b9:a4:56:69:69:5e:ca:9d:79:ac:
69:3b:30:7f:0e:8f:b3:f3:b0:bd:58:f0:70:66:a3:
ca:9f:b4:cf:dc:4d:e6:77:1c:f1:1c:5b:a7:87:41:
af:19:92:85:b4:e4:a3:48:f9:a6:5c:ed:ed:74:f5:
c6:6f:ad:cb:93:57:3f:45:7e:eb:21:1a:ca:17:5f:
f1:20:dd:d7:a7:32:94:b2:0e:d8:04:28:b3:93:6b:
10:c5:9f:66:9d:75:cc:dd:2a:01:bb:5f:c1:79:e0:
ee:4f:6f:aa:1a:ab:b9:3e:3b:a2:25:40:41:ed:3b:
a0:8d:c7:20:09:5c:a1:da:1d:88:80:be:15:91:07:
35:69:f9:c4:b6:6d:1e:4b:af:02:85:8b:81:62:5b:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:17:75:C5:49:53:CE:62:3B:72:B1:C1:A1:63:EA:3C:3E:C1:AD
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7e:cd:72:10:29:25:c8:e6:72:82:51:0e:6a:c0:17:1e:d7:
9d:a7:72:72:ae:69:38:2d:a0:c4:e0:f1:ed:38:c5:7b:87:7c:
50:cf:5d:f3:0d:5a:46:3a:9f:65:46:60:67:fb:f8:8b:5b:f2:
8b:a5:9d:dd:21:ec:6c:79:f1:b5:64:8b:30:93:de:ad:17:39:
02:51:5e:3f:13:f1:59:01:7f:79:06:bd:80:17:7f:02:2b:d8:
ac:78:6d:d2:9c:87:88:41:97:ed:20:70:36:60:e7:15:b2:85:
8d:0b:dc:be:e4:00:fc:35:f6:e5:4e:bd:a3:fa:bc:e9:66:66:
3d:d3:82:c9:a1:13:c5:6d:9e:71:86:73:94:ec:7e:67:2c:c6:
81:45:b4:73:48:75:1a:9e:c9:ce:81:54:24:3d:2c:8a:1a:f0:
e2:c5:76:17:54:49:96:07:27:de:91:c4:63:05:27:1d:76:22:
46:a2:94:cc:86:01:2b:3f:8c:98:bb:f4:b8:d8:dd:17:6d:31:
61:73:48:bd:7d:d1:a0:ab:53:a3:c0:76:08:af:7a:18:b0:04:
48:8c:13:97:c0:40:10:0d:54:d4:1d:4f:1b:62:53:96:46:7e:
f3:11:a8:a5:48:96:ef:ee:49:9e:b8:4d:39:28:bb:22:aa:e0:
8d:10:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:24:54 2025 by rpki-client