Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: 87qJ3uJcHG9GmL6DbPiExsU22AcSZbzCn4+CoPC8GL4=
Subject key identifier: 95:52:08:AE:05:87:B0:44:9D:20:BE:E9:FC:2F:8C:FE:D3:9A:9B:11
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0198C6EE2CAC2FF1E1C247E9F3E98DB82DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 116E
Signing time: Wed 20 Aug 2025 10:02:34 +0000
Manifest this update: Wed 20 Aug 2025 10:02:34 +0000
Manifest next update: Thu 21 Aug 2025 10:02:34 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: vdhtahWEyrYKCILjC+R59v5mxX83Rrdb12/R7PVNdRc=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:2c:ac:2f:f1:e1:c2:47:e9:f3:e9:8d:b8:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Aug 20 10:02:34 2025 GMT
Not After : Aug 21 10:02:34 2025 GMT
Subject: CN=955208ae0587b0449d20bee9fc2f8cfed39a9b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:2a:04:0b:6f:18:9d:69:30:3f:b6:91:68:
47:f1:fe:03:d7:39:27:bb:1b:dc:13:e4:64:94:7e:
ea:32:73:23:d0:04:7f:1c:2b:6c:1a:44:56:2e:6e:
11:76:fd:f8:43:7e:4c:94:7a:02:9f:57:91:20:5f:
fc:bc:42:e7:89:36:b7:58:3a:f1:12:90:d3:3b:e7:
e0:1c:96:e2:34:ec:2f:d6:29:b1:51:f2:cf:ce:a2:
d3:18:70:ac:dd:52:d4:a3:28:84:64:32:a5:06:99:
8e:89:42:cd:f4:71:da:1a:f7:b6:ed:2c:59:e9:2a:
eb:63:f9:49:68:41:83:70:d0:84:d2:bd:54:87:d5:
6f:dc:4c:56:50:f2:64:f7:cb:12:66:79:71:c1:b2:
fc:da:6f:c9:42:c2:bc:11:ab:2f:c3:4d:0c:b8:ae:
ec:0a:a1:00:ac:a8:23:ff:33:dd:62:64:cb:9c:7e:
3f:c9:16:fe:1e:61:b9:4c:88:b5:27:bf:c7:a8:55:
23:aa:e7:54:f6:5c:05:59:74:76:66:06:f7:23:e9:
f7:b0:f6:8f:4f:87:5f:7a:72:74:83:5c:17:9b:e7:
4f:5d:21:7d:06:bf:26:5c:e9:3e:6d:ad:f2:f3:66:
e4:6f:0f:50:0d:cf:fd:9b:d8:1f:b7:0c:5f:fa:0e:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:08:AE:05:87:B0:44:9D:20:BE:E9:FC:2F:8C:FE:D3:9A:9B:11
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:ed:be:89:06:a3:29:86:0b:e6:c3:97:b3:c2:8c:78:db:
c1:82:66:7d:33:c0:cb:7b:28:8f:7c:57:6b:00:2b:9d:c2:61:
30:94:87:49:f6:98:6f:e5:79:26:de:02:f1:da:06:ca:07:1b:
3d:74:dd:4c:d1:ae:40:d5:03:e4:6f:41:be:71:43:1f:ff:45:
02:23:5c:05:6a:e9:38:b5:ff:c3:bf:f7:8c:8c:80:73:9e:b8:
be:bd:6c:48:53:9b:00:ce:03:45:c7:88:94:80:39:c6:f4:49:
cb:d7:16:40:71:cb:d7:3f:64:bf:14:6e:b3:86:d0:86:74:89:
1d:5a:62:04:31:fc:2c:36:27:d7:06:93:99:4a:10:2f:25:16:
e3:e1:0a:78:3c:ba:9c:07:07:d2:a2:6b:a8:36:d3:3d:21:5c:
30:31:5a:9f:7f:ea:b5:0a:b9:ed:37:5d:b2:f3:6e:33:77:66:
ce:b2:3e:dc:33:58:33:8a:44:a4:0d:6e:91:59:18:fd:9d:d7:
76:12:b9:ad:6f:1f:00:3b:ea:58:03:5a:49:65:02:3c:a0:4a:
16:36:16:d2:20:27:1e:f4:14:fd:04:f2:8c:d9:64:56:26:b4:
8c:fe:73:f1:2f:74:08:ac:64:74:68:a9:b8:df:33:56:07:aa:
e3:67:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:34:31 2025 by rpki-client