Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: PzSWVQS39pBgHZW9mWvR7zlr+7EdPmTNPYfUGyrZTjo=
Subject key identifier: C1:3E:F9:D3:B2:ED:E9:04:C1:32:70:BE:B1:05:3B:0C:52:DB:68:71
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 01984964EA15D736D2064809FEE3B805927C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 1552
Signing time: Sun 27 Jul 2025 01:00:06 +0000
Manifest this update: Sun 27 Jul 2025 01:00:06 +0000
Manifest next update: Mon 28 Jul 2025 01:00:06 +0000
Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: aI2KpppPba4QDQ2HV14crpfhEg8ejRoWmBWUNDLUcdw=)
3: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:ea:15:d7:36:d2:06:48:09:fe:e3:b8:05:92:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Jul 27 01:00:06 2025 GMT
Not After : Jul 28 01:00:06 2025 GMT
Subject: CN=c13ef9d3b2ede904c13270beb1053b0c52db6871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:3b:e1:0f:d2:e2:50:b5:c9:15:5d:5b:a2:
74:0b:0a:88:0a:41:b4:d2:58:70:ab:67:4d:84:ad:
68:2b:7c:70:32:a2:d2:96:d7:bd:1e:33:19:01:c6:
a1:b7:d9:77:af:ed:9d:42:60:0f:5f:9c:52:28:1a:
d5:57:79:80:fa:d3:c1:0e:47:f9:95:74:e4:62:e8:
2d:3d:d3:fc:a9:ac:84:1e:37:ee:28:8b:8f:9c:0c:
7c:ed:62:b0:53:f7:2e:82:44:26:a8:f3:64:8c:bf:
d9:26:9e:ec:53:13:f8:a0:2b:ea:56:90:6a:b4:30:
b1:81:b0:5e:db:f1:d2:1e:05:9c:bb:4a:8a:65:87:
c1:f5:80:cb:7e:08:8a:55:67:30:82:46:94:12:3b:
d3:1d:9c:a5:79:c4:9c:f5:84:d3:3b:4a:13:69:ae:
7e:14:8e:9e:c3:55:4a:e4:94:ef:2b:9d:3e:c1:95:
6d:5d:00:0b:4d:04:3f:49:1d:87:c6:a5:4f:31:fc:
04:83:51:f4:4f:bb:40:06:77:f5:7c:60:c5:71:0a:
b3:74:bf:99:fc:6c:2b:af:e8:e6:ce:00:60:c1:ba:
9e:56:d2:fd:ab:a9:54:50:1e:aa:5b:f3:0f:ae:33:
f4:9a:dd:68:7a:e0:7a:be:e1:c7:05:28:e4:dc:a5:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:F9:D3:B2:ED:E9:04:C1:32:70:BE:B1:05:3B:0C:52:DB:68:71
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:eb:c3:c1:64:2e:e8:ea:be:cd:14:5c:7d:90:1f:5f:c7:2d:
e5:61:dd:22:04:02:e1:16:fa:b7:58:cc:a9:2d:2b:92:41:9e:
f3:2f:12:5c:8b:c5:10:d1:c0:29:39:7b:17:9f:36:05:6d:9f:
2b:05:c0:ad:69:5a:51:e7:29:5f:90:6e:cc:20:d0:59:8f:5a:
85:cd:28:f9:15:31:fb:fe:7a:07:10:1f:b3:6b:1c:60:78:ad:
f3:5b:be:b9:54:02:fb:3b:54:92:e9:8d:8d:94:36:f4:80:5a:
d7:b9:2b:f4:81:63:41:e9:a0:4d:77:17:ee:9c:44:7a:f0:6d:
90:20:ed:da:8b:f7:b8:01:0c:5e:4d:69:78:5d:82:44:e3:59:
d5:b9:ac:9a:f7:5c:98:d6:16:c3:12:92:cd:dd:66:8b:7c:77:
43:03:a5:1d:aa:de:3d:01:1a:18:3b:9a:32:47:d0:b6:33:0f:
d5:34:03:ab:7a:ac:a9:d8:15:90:90:c1:03:4e:ea:b2:f6:78:
da:d0:38:49:1c:b1:ae:4f:a6:ff:5c:f3:f9:86:61:8f:c1:c3:
6f:7a:d8:e3:9f:77:5e:77:4f:42:4e:1c:71:de:89:e5:69:23:
30:4e:4d:0d:0f:86:7e:49:70:92:23:c0:4a:34:99:d3:0c:bb:
59:0c:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:34 2025 by rpki-client