Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: rj99ZfQBmdm+972KIzolaRIrBEO7rMZ8/+W8xuyc0NE=
Subject key identifier: 78:09:30:D9:A3:4D:C9:03:97:E7:8E:44:6C:37:BB:E4:62:86:A1:5B
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 01984AE5F684E5497D78114B9CC8F3B981A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 08:00:41 +0000
Manifest this update: Sun 27 Jul 2025 08:00:41 +0000
Manifest next update: Mon 28 Jul 2025 08:00:41 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: 5ITfKZbmroFRki2QAmYwwPG0REU1mTaotxqvl1aBXl8=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f6:84:e5:49:7d:78:11:4b:9c:c8:f3:b9:81:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jul 27 08:00:41 2025 GMT
Not After : Jul 28 08:00:41 2025 GMT
Subject: CN=780930d9a34dc90397e78e446c37bbe46286a15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:24:a8:87:e0:06:f0:c4:f2:a0:6c:09:4e:
12:1f:05:f0:80:25:a3:0d:ad:fc:c6:35:bb:0f:fb:
15:1e:0c:26:91:3e:11:44:72:32:0c:a9:17:fc:ae:
42:ce:cf:cc:1c:b5:fc:6a:bf:7e:20:8f:98:86:fe:
84:aa:4a:5b:ed:54:bc:ff:40:ed:92:03:f6:f8:ac:
06:b4:c7:40:23:16:16:a2:4a:52:d9:c0:a2:4d:75:
0b:84:17:a6:1f:ac:b1:41:ae:a1:98:54:62:96:e0:
cb:73:29:b7:87:11:df:5c:23:35:c3:90:0f:23:0b:
58:01:90:04:58:c7:1f:cc:48:c4:cf:4d:6c:00:cf:
18:42:66:6e:84:6d:36:46:5b:9e:da:34:09:2c:d5:
ce:06:ff:ba:96:d6:c0:e3:fd:01:89:09:d2:9e:65:
58:e7:1e:81:ba:23:26:6d:13:4a:51:73:3c:df:6e:
f1:46:4e:dd:b6:3c:72:dc:48:13:2b:63:4f:df:38:
f5:de:04:85:c0:59:c7:fa:2b:d8:ac:98:d7:6c:41:
9c:16:02:2e:d9:32:4a:2f:34:c3:d7:20:45:1f:23:
c3:47:f9:06:51:0c:df:ff:e0:05:e1:af:f7:5a:f8:
f9:e5:9c:70:4f:5a:27:45:66:77:ab:f8:b6:a4:77:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:30:D9:A3:4D:C9:03:97:E7:8E:44:6C:37:BB:E4:62:86:A1:5B
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a5:11:5d:dd:ef:ac:fb:90:d7:24:2d:c6:d5:6b:22:4b:41:
eb:d4:00:59:54:53:04:f9:98:7e:35:fe:2f:62:9a:98:60:3c:
68:a7:83:16:04:51:75:b0:26:76:92:d0:79:85:23:9e:8c:12:
66:1d:a9:a6:f5:20:45:65:e5:ef:3e:4c:ef:29:91:84:80:ee:
8e:8a:bf:61:a1:83:50:41:4b:72:8f:1f:12:61:67:a3:17:12:
41:1b:75:76:0c:e0:af:7d:03:97:97:28:80:00:4d:b0:a5:cf:
ad:ee:23:2a:78:19:9b:d6:a0:04:13:3b:e9:88:42:50:d5:a8:
1a:85:1a:d0:ba:d3:78:59:13:bd:5d:46:3c:37:68:e0:7b:ff:
89:a4:db:1c:da:16:c3:fd:15:bc:0a:51:93:6e:bf:53:6a:96:
38:c1:e3:ed:09:79:55:38:d8:01:31:92:b0:d0:40:a6:c2:cc:
47:7f:8e:14:db:8e:60:cb:27:86:b2:26:0c:9e:5d:fa:da:af:
a0:1a:7f:f2:64:09:49:49:b9:20:57:19:5c:0f:e3:70:8c:47:
12:76:f5:f6:f2:ba:2f:50:7c:1d:92:1f:41:e3:1e:d2:e7:45:
ab:a7:8b:65:25:46:f8:18:20:2b:54:65:be:30:0f:ea:6a:93:
a5:b7:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:58 2025 by rpki-client