Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json)
Hash identifier: j0TCQ2zyUkmgPEWP4AeLNl7iwdKNfY7XBgQZGXI73Nw=
Subject key identifier: EC:1A:4B:45:EF:12:3C:36:79:09:F4:BA:E7:8C:C4:EF:B0:09:1C:87
Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Certificate serial: 0198507AC91E984FBDECE034E781DAAF9ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
Manifest number: 14E7
Signing time: Mon 28 Jul 2025 10:01:20 +0000
Manifest this update: Mon 28 Jul 2025 10:01:20 +0000
Manifest next update: Tue 29 Jul 2025 10:01:20 +0000
Files and hashes: 1: AuqfHgJMLbox-SCvoHiOWVRxGtM.roa (hash: xeAvQlAlfgpUCdvO+zQfkKF/6NqDyXiaKSOgk2lfPWU=)
2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: TZupvHb2BcnYXJM+G3sfbfJ5L5RV+QX3/Zia8fPnQXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:7a:c9:1e:98:4f:bd:ec:e0:34:e7:81:da:af:9e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a
Validity
Not Before: Jul 28 10:01:20 2025 GMT
Not After : Jul 29 10:01:20 2025 GMT
Subject: CN=ec1a4b45ef123c367909f4bae78cc4efb0091c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:77:1f:70:a7:65:ce:0f:0c:30:c3:51:91:
bc:40:d4:56:90:55:b8:dd:46:49:dd:20:6b:bb:08:
f0:8c:70:ff:49:bf:38:5c:ac:6d:1b:46:39:23:0f:
a8:6e:f6:9f:03:b5:0f:44:4b:d7:2c:ec:f8:0f:37:
5c:a9:05:c4:7b:b1:33:79:07:c7:4e:b7:2a:61:85:
09:0a:57:0e:9a:a5:34:f2:26:b1:84:71:1e:3b:a1:
56:70:4a:a3:1f:45:9a:83:fa:4a:53:29:a8:b2:d0:
a0:7c:f9:f1:87:65:45:17:92:48:3c:ae:9d:27:b0:
60:ad:89:1f:59:e0:e1:52:c0:26:1d:44:28:53:d2:
bb:5d:ce:80:11:b1:17:65:a1:db:79:b2:2a:65:5d:
21:c9:01:5e:b0:8f:67:64:99:89:e7:7e:3e:54:06:
1d:4c:ae:ec:a4:d0:f2:89:c2:88:21:ea:1a:a5:4d:
72:a8:a1:98:92:64:27:28:13:f6:15:79:7a:4c:cd:
dd:2e:6a:34:ba:f5:07:3b:12:a1:41:df:6c:08:22:
83:17:8f:e2:f5:f7:cc:ea:e2:bc:5f:e9:43:f1:42:
73:4f:46:2e:15:9e:26:6b:04:1c:8c:1b:d5:52:c9:
0c:af:eb:9a:00:73:40:d4:35:c3:37:df:6f:50:a8:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1A:4B:45:EF:12:3C:36:79:09:F4:BA:E7:8C:C4:EF:B0:09:1C:87
X509v3 Authority Key Identifier:
keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:74:be:d1:a9:d9:04:ee:ba:7a:28:d6:23:09:0a:2d:d1:1f:
cc:07:cd:19:33:b1:03:d0:c0:9f:e3:da:02:c6:27:49:20:06:
39:29:e4:ba:ff:d5:34:44:4c:06:8d:73:8c:00:c2:03:52:d0:
7f:ed:e1:f5:2f:49:51:8c:d3:a7:ef:3c:70:b3:64:9f:64:d9:
50:ff:34:a9:31:a7:00:36:73:8f:d6:89:c3:57:d4:f5:f4:e2:
3b:ff:3a:86:36:22:64:9a:66:d6:84:ca:44:8b:d5:e1:04:36:
df:63:d7:b5:1c:72:b9:b1:57:81:ad:77:c5:80:d2:b4:71:1c:
fe:8e:cd:4e:3e:27:fc:a0:fe:11:54:23:02:2a:05:c0:0b:f1:
ef:be:bd:21:77:f8:5c:11:1f:34:bf:be:b4:cd:33:15:64:8f:
89:58:cd:19:ff:f5:7d:19:cb:61:5b:d9:3b:84:7e:99:8f:10:
7d:48:3f:23:14:6b:8e:b3:b1:1b:6c:99:ce:53:5e:8c:ca:1d:
6b:13:b3:7f:fd:9a:bd:f6:6e:28:77:d9:6c:0e:5b:b4:90:55:
7e:62:dd:df:fe:3e:95:d9:bf:10:ce:0e:64:a1:6a:8c:fa:33:
40:2a:70:c0:b3:15:25:05:0a:a6:01:16:a6:5e:b2:1b:d7:9b:
c6:aa:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 14:34:49 2025 by rpki-client