Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: btESQFrmxFKSB2X9+X93cADav6yxT8jjn9MYpJYDsW8=
Subject key identifier: DF:53:B4:2C:E2:0B:19:5B:B0:27:FF:04:F9:85:AB:04:BD:0B:07:CF
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019845894C59F6917D3BCE8ECB666BBB01BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 07:01:22 +0000
Manifest this update: Sat 26 Jul 2025 07:01:22 +0000
Manifest next update: Sun 27 Jul 2025 07:01:22 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: uCAbnc8JkGq8S4V3Nn9G6jlq21poi8FK1TMx6F9qLpY=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:4c:59:f6:91:7d:3b:ce:8e:cb:66:6b:bb:01:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jul 26 07:01:22 2025 GMT
Not After : Jul 27 07:01:22 2025 GMT
Subject: CN=df53b42ce20b195bb027ff04f985ab04bd0b07cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:7d:4b:6e:e0:7e:91:ee:b0:cf:84:5a:08:
fb:60:9a:4a:ea:c5:4a:40:84:19:8f:31:aa:ff:20:
a1:1e:f8:88:7d:a8:eb:55:41:76:bc:db:82:7c:d1:
93:4c:c7:3e:d1:76:c1:02:a6:9a:98:a7:0c:af:7e:
fd:e4:32:26:a6:d8:e6:00:92:8d:e3:82:f9:bc:95:
50:1d:ca:97:1e:9b:46:9b:16:62:ef:7d:9d:13:0f:
97:32:80:a3:00:46:b6:cf:7b:6b:43:db:3c:a6:22:
78:2e:a4:7c:2d:a4:d8:87:60:22:08:c5:44:1a:a6:
b5:1b:17:4e:a6:22:bf:ee:2a:b9:3e:03:39:c0:9b:
a9:ba:4f:f5:cb:ce:b2:05:1b:9c:c6:5a:8f:6f:00:
55:3d:93:1b:bf:e5:93:27:06:7a:59:41:fb:ed:cb:
0d:82:b5:5c:4c:a5:4f:14:57:55:99:3a:9b:98:69:
0f:89:48:18:d6:1a:40:08:7e:d8:04:c3:42:96:c5:
9f:40:69:dc:fe:b8:93:e2:d0:40:40:8e:e4:41:ee:
ec:51:24:17:85:f6:b7:ff:c1:12:0f:9f:04:7a:ff:
05:e1:f8:d7:5c:f2:7a:7b:32:7b:ec:4d:99:37:47:
71:50:be:1b:97:8e:12:36:af:7c:c0:00:25:4a:f9:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:53:B4:2C:E2:0B:19:5B:B0:27:FF:04:F9:85:AB:04:BD:0B:07:CF
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3e:ca:ed:04:e3:0c:11:0f:2c:07:9d:fc:ba:75:3b:3e:b1:
26:97:03:02:af:ec:24:ef:28:86:ee:9d:b8:b9:e3:f7:5b:92:
3e:a2:cb:87:04:ca:c5:cf:68:22:d3:9e:b5:df:da:66:7f:88:
8b:77:c3:59:9a:d4:05:34:cb:73:9b:74:2f:d5:eb:7e:23:24:
cf:75:a8:92:f9:05:1d:e0:5e:b5:89:41:23:c3:69:ad:ca:9b:
2b:46:f4:f5:10:c6:7c:76:08:f5:a3:2b:59:68:48:ef:18:93:
a8:c3:7e:18:2f:e1:40:fd:6a:1a:5d:84:3d:4a:db:98:00:35:
a0:35:29:25:c7:77:9e:02:b0:88:2e:01:b0:e4:85:96:c9:75:
68:36:e5:67:62:dd:37:33:ad:2f:bb:61:8a:c0:29:02:a9:14:
b0:19:82:2e:3d:0c:42:13:01:1d:75:63:50:59:af:e6:fc:21:
8e:c9:bd:ea:2b:62:4d:3a:f8:f8:58:af:86:f3:9c:8d:b3:fe:
ee:b3:c0:cc:43:23:31:8b:8c:4f:d9:be:cb:d8:27:af:48:7b:
f4:d3:80:0e:43:0a:d0:13:2e:6b:9e:25:4d:6f:29:31:c8:d6:
9a:8f:be:a0:a2:e0:ce:c2:d9:36:e5:12:6f:4c:9d:a6:e6:ee:
cf:95:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:51 2025 by rpki-client