Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
File: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json)
Hash identifier: XhCBtllQvqNVUA0JCDcjk7aoCWnx3bfrrbcUdTxz9Yw=
Subject key identifier: A2:C3:05:5B:5A:E2:79:D3:A9:21:C7:F4:2D:5A:74:DC:A3:58:1A:55
Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
Certificate issuer: /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Certificate serial: 019A71EEF7C8B2CFB3C775FBE53D57107CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: fBT3Xep7vj4iyLH5pvuw0BlWT0dQFXz+EVhTSVJsx+o=)
2: yJY2Oeq3toKxTdk7-X31riY01hg.roa (hash: 5uMPJikDIqqkTXkRRFHehwnU8XhjCZjiCcVLwMn6QX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f7:c8:b2:cf:b3:c7:75:fb:e5:3d:57:10:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=a2c3055b5ae279d3a921c7f42d5a74dca3581a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:06:7d:aa:7c:b6:c1:a7:e8:a3:08:71:9a:
56:d2:52:fd:f9:e0:ca:20:65:ef:e9:5c:62:29:d8:
42:82:c1:0c:fd:00:8a:ca:ac:b9:62:fa:83:f0:4f:
23:e5:bf:78:8e:23:12:8f:e3:fe:fd:9f:03:a0:bd:
ac:29:9b:94:bc:cd:a0:c5:f1:2c:60:26:9a:99:56:
3b:54:16:7e:68:f2:6e:a3:68:da:be:da:16:33:4b:
6a:21:4c:3c:73:b0:3f:b3:ac:f0:7e:8c:d6:bc:6c:
13:3c:02:9f:b1:bf:01:fc:0b:8f:6f:00:2f:ce:51:
9a:72:cd:5f:ed:5b:2d:76:6a:41:b5:ff:d7:bd:c2:
c6:59:68:7d:df:82:2a:bc:5e:2c:94:b8:b5:95:75:
f9:1e:e3:ec:59:28:bf:23:54:e8:6a:df:33:f2:40:
f1:03:aa:a6:59:78:d0:4b:9a:6e:97:83:a1:8b:d2:
4d:02:75:4c:7a:e0:fe:44:5f:e9:e8:17:c9:d8:9a:
f9:04:e1:9b:b4:51:f4:de:12:af:a3:af:88:f5:e3:
9b:db:6b:80:dc:15:9d:e5:0a:11:d1:f0:70:6c:46:
b6:a8:32:d0:42:e2:45:42:53:3b:40:7c:8d:04:da:
0d:3f:15:ec:73:78:93:ff:76:38:56:d3:fc:80:a3:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:05:5B:5A:E2:79:D3:A9:21:C7:F4:2D:5A:74:DC:A3:58:1A:55
X509v3 Authority Key Identifier:
keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cf:92:53:a4:2e:29:35:cf:f8:e4:4a:45:6a:8a:e4:d6:da:
34:b3:0d:1a:60:b0:4a:fb:2f:85:3c:67:15:38:ff:77:fb:ff:
6a:59:e7:fe:0d:47:e1:be:95:5e:15:39:bc:ed:9b:07:60:23:
3f:d3:82:87:61:e9:0c:bd:52:9c:87:a5:e5:51:5a:66:77:6b:
55:51:1d:a3:ef:07:29:3d:f4:8f:dd:91:24:81:bb:af:fd:df:
7c:a3:f2:6a:c1:9f:23:65:84:5c:7c:de:b9:18:81:04:58:5b:
bc:69:f7:c3:77:6e:84:2e:15:1e:c9:79:b7:28:64:fb:68:fe:
73:ad:7e:ca:f7:75:d0:b0:36:b1:1d:53:cd:4b:cf:e8:33:a7:
53:44:c4:34:66:4c:ef:47:ef:b9:26:77:bc:38:7e:32:38:59:
3b:c9:47:c5:3c:ca:17:3a:7c:22:88:ec:e0:5c:8b:f3:5d:e5:
12:14:c9:1d:de:80:f9:f0:8f:09:9d:af:b1:c3:6f:79:9f:4a:
de:2d:37:80:7b:e3:21:98:2d:9e:3e:17:f4:19:58:e1:29:c3:
ca:97:0c:3a:c1:99:be:c7:9a:44:fd:8f:34:eb:f3:e0:4a:db:
b1:2a:69:12:52:84:1c:54:04:c3:27:2c:48:11:08:9f:e9:79:
22:b3:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:08 2025 by rpki-client