Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: 7LVziiv4MmGsV6q/EUQNfQqRRgi9hi40CAI0msS6Tb0=
Subject key identifier: 80:56:B5:7F:24:5D:35:AD:A4:63:89:FD:97:F7:B7:02:D3:38:7B:4F
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 01984B8AA4593268BECED3F4AFCE4A5CF75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0B00
Signing time: Sun 27 Jul 2025 11:00:33 +0000
Manifest this update: Sun 27 Jul 2025 11:00:33 +0000
Manifest next update: Mon 28 Jul 2025 11:00:33 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: Y7TL6QiAEoX7Jx80v9Awyt9rxezEUwkxTbF3hMpLBrE=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:a4:59:32:68:be:ce:d3:f4:af:ce:4a:5c:f7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Jul 27 11:00:33 2025 GMT
Not After : Jul 28 11:00:33 2025 GMT
Subject: CN=8056b57f245d35ada46389fd97f7b702d3387b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:0e:28:bd:03:05:d1:8f:50:8a:65:f3:33:
be:29:e9:3d:61:69:70:7f:57:1d:71:36:7e:e7:65:
78:79:f5:3c:94:c3:e8:02:88:76:9c:91:26:da:77:
56:cc:96:c0:71:30:9c:61:46:d3:34:f1:b0:6a:b6:
56:8d:21:93:7b:31:0f:73:01:bc:86:12:df:31:4a:
65:6a:0d:52:33:ef:e6:2b:95:1c:8d:0a:a6:9b:9a:
07:bd:e4:72:6b:d3:09:d9:fb:c9:73:45:3d:1e:51:
8a:15:37:44:27:ff:c9:59:0c:f9:dd:f8:cd:7f:54:
2e:aa:5c:be:3a:cb:ad:63:95:79:e0:ec:2c:43:80:
ea:54:1b:c6:02:bf:3e:f9:40:6f:49:bc:74:4c:0f:
30:20:04:b2:8b:2e:79:0e:95:68:4b:b1:b8:56:c5:
05:d3:7b:fc:f9:6f:c9:02:01:3b:fb:38:d8:f3:4f:
91:b9:f4:7d:bd:d3:16:b4:42:5e:a9:0c:1d:fb:71:
80:4c:ec:d7:e7:55:69:6f:7b:0d:4f:e6:c0:b4:60:
9a:3a:57:c3:17:5f:35:8d:e0:44:a8:e3:b4:78:95:
2f:59:64:e5:fd:63:34:69:18:f8:70:af:b4:68:c2:
be:22:33:f9:0a:89:62:cf:8b:17:8f:42:5e:64:4d:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:B5:7F:24:5D:35:AD:A4:63:89:FD:97:F7:B7:02:D3:38:7B:4F
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4f:ed:c9:86:36:24:41:0d:77:19:d3:3f:38:f2:6c:52:8b:
c8:ac:31:f8:4e:11:ed:c6:35:1b:9f:e7:7a:85:fe:fa:7a:01:
81:03:41:f3:81:ca:ad:5d:b4:e5:fa:e5:58:6c:61:f4:00:df:
ec:a5:5e:66:05:8f:e9:a0:23:88:e6:d4:82:f6:5b:c4:12:56:
8a:e1:12:77:5d:ca:8e:77:ac:62:b2:d3:6d:ad:86:bc:a7:51:
c0:3f:9a:c7:a0:25:81:56:f3:94:4c:9b:09:da:e5:ee:b5:49:
b4:1f:95:00:e5:01:30:9c:b2:1a:ce:d1:9e:15:42:3d:29:ce:
c0:04:c1:81:52:1f:e1:a5:84:05:32:e1:ef:01:e0:83:c3:5c:
09:ae:8c:47:6e:ae:29:72:f6:76:fc:69:51:48:41:85:af:7d:
15:7b:6f:0c:5b:6a:f7:30:23:7e:66:6c:e7:32:f2:ac:e6:f4:
d0:19:0e:42:2e:fb:ac:e4:17:95:2e:2a:6b:53:6d:07:2c:cd:
91:75:aa:11:c2:0f:d8:7e:a4:09:f5:41:f8:ec:95:71:7f:ba:
d9:90:19:97:bb:1f:c3:e7:7c:48:79:c9:15:f0:3b:80:09:50:
66:66:a9:09:e0:5e:9d:49:d6:1a:ac:3b:79:4c:0c:c5:f5:42:
cc:51:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:14:57 2025 by rpki-client