Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: 0da/d2nLfWza3lK338C8Ay0RMdBkDN4neKvhEp7HG48=
Subject key identifier: D6:BE:0D:26:22:6D:64:B0:23:F3:DA:56:73:70:04:67:F2:F4:19:3B
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 019921E75DCF92523032C93E6D1606275F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: D4
Signing time: Sun 07 Sep 2025 02:00:34 +0000
Manifest this update: Sun 07 Sep 2025 02:00:34 +0000
Manifest next update: Mon 08 Sep 2025 02:00:34 +0000
Files and hashes: 1: f9MGnlddFQ2IMf-Uoo2fTYxJ_co.roa (hash: kPIpbLqEj4dHSmVPx7WOIcV4CWQtCce8UvwQXn1AUT0=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: /Nf+DYP5e5phk0KeluSHcWSwt46e8CKMcZS30b5iY+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:5d:cf:92:52:30:32:c9:3e:6d:16:06:27:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Sep 7 02:00:34 2025 GMT
Not After : Sep 8 02:00:34 2025 GMT
Subject: CN=d6be0d26226d64b023f3da5673700467f2f4193b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:59:9a:95:0c:4e:0b:f7:66:78:a8:17:c3:
6f:e2:61:a0:93:75:42:3a:b5:c7:7d:01:95:dd:d5:
db:e3:f3:1f:a1:12:d4:02:06:9f:53:0f:6f:2d:93:
20:f4:b0:10:b3:47:99:17:7a:e0:a0:bc:e7:12:1a:
d5:7b:c4:78:8f:c3:87:23:f0:6b:36:ae:4b:57:28:
b3:ce:7b:2c:b6:73:a1:94:70:12:96:43:1e:55:96:
e6:63:be:29:d3:78:13:6a:df:bb:08:eb:19:03:7e:
f2:da:72:93:15:72:54:56:e9:d0:1c:93:4e:14:c7:
15:70:93:da:01:4a:a9:52:28:c4:4a:61:b1:dd:ea:
46:fc:40:0a:b8:e7:2c:ff:7c:89:af:9e:09:bd:b7:
e3:00:d3:7a:c4:77:d9:aa:5c:27:8a:5c:4d:9b:a6:
1b:5e:7b:c5:80:c6:a0:07:ee:63:a7:df:55:01:69:
da:14:86:ce:b1:ff:6c:7e:5e:53:c9:6f:6e:b0:bc:
2c:4f:76:2f:4f:b7:bd:da:b9:eb:ef:dd:df:f5:2c:
ff:74:05:1d:45:c1:80:ff:b8:82:cf:0f:27:b6:43:
7d:a1:10:28:a9:6b:2e:72:87:6c:a9:06:63:61:fa:
1c:52:43:62:cb:e7:a6:1c:a9:f1:65:0b:19:f1:9e:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BE:0D:26:22:6D:64:B0:23:F3:DA:56:73:70:04:67:F2:F4:19:3B
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:48:fd:14:58:fb:46:4a:2c:0c:00:24:59:4f:2a:b7:c9:14:
2a:61:58:29:39:9c:1d:57:fd:de:34:56:d4:f8:64:65:7a:e1:
ba:7f:42:bf:83:01:cc:77:03:16:a5:be:9d:d8:09:26:9d:ae:
ce:f6:7f:35:c2:cf:fe:58:61:b6:25:f8:e4:52:41:84:b8:f1:
fa:b2:ad:12:2a:8b:f2:b2:eb:75:0d:b2:0c:9b:9a:8a:02:3a:
cc:c5:0d:f5:ee:35:78:a0:d5:ad:63:31:12:b3:10:a6:13:22:
00:01:34:4a:e2:ab:52:aa:96:26:f1:09:df:fe:dc:3c:d1:37:
77:37:d3:97:00:b6:0e:4b:31:c9:d2:43:40:a9:d8:f7:e8:f9:
75:ec:9a:72:9a:3c:74:39:af:54:36:29:1d:35:cb:0f:cc:2b:
e2:92:71:91:1e:2d:7e:46:92:80:83:28:ac:42:15:a3:22:1b:
9f:5d:96:28:d9:f4:15:17:aa:2f:cd:79:e4:5b:66:94:dd:9a:
3f:68:79:96:a6:8e:93:7d:d4:57:95:22:6e:9d:c7:98:a6:3a:
b1:3e:7c:60:4f:04:63:42:c2:6d:13:61:0e:d6:5a:5f:8b:37:
0e:f9:c4:ff:c1:0f:b8:7e:25:2d:5c:4b:1a:0f:cf:25:56:74:
80:c2:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:04 2025 by rpki-client