Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: /mox/8apQwkG2aRl/IuU5ZauyemQ6nUOFtNeHpbNYfM=
Subject key identifier: 09:D4:97:02:B5:DA:BC:EA:40:5A:9C:9B:79:6E:25:62:1B:29:EA:A7
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 019826D953AB1D20D75EF637FD040CF0B297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 52
Signing time: Sun 20 Jul 2025 08:00:33 +0000
Manifest this update: Sun 20 Jul 2025 08:00:33 +0000
Manifest next update: Mon 21 Jul 2025 08:00:33 +0000
Files and hashes: 1: f9MGnlddFQ2IMf-Uoo2fTYxJ_co.roa (hash: kPIpbLqEj4dHSmVPx7WOIcV4CWQtCce8UvwQXn1AUT0=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: 5qutPhB2b4ho3mky8REKkXtGdoW+4yPfnxNEl99UBX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:53:ab:1d:20:d7:5e:f6:37:fd:04:0c:f0:b2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Jul 20 08:00:33 2025 GMT
Not After : Jul 21 08:00:33 2025 GMT
Subject: CN=09d49702b5dabcea405a9c9b796e25621b29eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:c4:32:b1:c9:02:34:62:43:f5:71:bc:36:
f4:16:06:6b:3c:d2:9a:0c:f6:72:98:2d:7f:34:5a:
f0:c1:32:59:4b:da:9e:ba:c3:c1:2f:79:80:26:13:
5b:94:21:b3:14:f9:7c:29:3e:6a:ba:ca:5b:c6:1f:
78:60:42:da:91:47:26:ce:2d:17:19:7b:1d:39:4c:
a3:38:70:96:90:22:97:8f:b0:7d:b5:57:ed:71:ae:
5f:4a:28:71:f4:5e:c3:73:d5:61:73:78:be:1d:e8:
ab:ed:ba:99:f2:4b:55:c8:7f:c0:0c:4d:cc:60:da:
9c:52:b2:00:5d:c3:6e:67:e6:b3:cb:60:b2:42:87:
1b:d2:58:e7:04:5c:79:9f:74:b0:16:51:51:ec:f8:
71:50:3d:cb:85:1a:ad:f2:d7:5e:da:4d:28:5d:ba:
29:85:0f:e1:7b:8d:e0:42:b2:b0:6b:b4:d4:14:c6:
e9:96:05:59:2f:f4:4c:e5:4b:44:90:71:fc:8f:dc:
7d:2b:8b:e5:35:51:48:f7:57:3e:93:ad:83:cb:68:
de:3c:96:18:59:e3:a6:15:c2:8c:4a:fc:84:1f:aa:
6f:c1:6d:c0:56:6b:7a:6f:01:43:92:61:2e:5c:c5:
6f:b9:d7:e5:19:43:8d:53:c9:22:fc:21:40:35:45:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:97:02:B5:DA:BC:EA:40:5A:9C:9B:79:6E:25:62:1B:29:EA:A7
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:db:f7:c0:eb:3f:8e:3e:b5:4a:6f:08:be:a4:ae:49:83:c5:
69:3f:6e:ae:12:8a:7c:65:c6:4e:4a:fd:8f:b9:50:0f:a7:77:
d2:14:8a:a0:37:e9:e1:96:6a:df:34:7c:08:a4:81:3f:ed:c1:
08:4c:9b:0e:7d:70:77:aa:10:9d:fc:c1:ed:81:93:9b:0d:80:
99:65:6c:61:8e:21:5d:88:d9:2d:24:47:0f:8f:fb:99:bb:c3:
17:f3:9e:31:be:a8:aa:1d:a4:ea:c2:b8:fd:21:90:dd:7e:0c:
62:2d:06:2c:4d:fa:65:e6:00:d3:9a:00:ff:10:ca:e9:08:61:
8e:ea:de:79:00:5c:1e:07:65:74:0f:0c:1e:08:5b:f0:fa:55:
70:06:46:0b:25:d0:f9:c0:42:7f:23:c4:53:83:82:45:3a:de:
ce:d7:32:1a:58:2b:16:f4:04:78:4f:24:18:7a:72:9b:77:8d:
45:ef:9a:e7:d2:c9:3f:65:9d:e3:be:91:2c:49:19:5d:3d:cb:
c2:f7:6c:19:5b:2d:5b:31:3b:ac:e0:57:cf:38:1b:76:91:7d:
5c:4e:23:61:bc:bd:ff:dc:65:d4:97:e4:93:0c:27:58:e0:f3:
d4:df:70:89:cd:dc:25:bc:59:c3:1c:fb:21:e5:03:ad:87:17:
af:34:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:51 2025 by rpki-client