Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: SaUZnuXYwFXmvpAa9gV2q0mW6Hjxx5qevvdkVpqtmQ0=
Subject key identifier: 7B:C2:2B:3F:9D:AC:87:21:F5:24:09:97:32:5D:7E:D7:C8:8E:33:B7
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 019A209B7D68D4FC6BE75AFB44BE0B147A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 1646
Signing time: Sun 26 Oct 2025 13:00:52 +0000
Manifest this update: Sun 26 Oct 2025 13:00:52 +0000
Manifest next update: Mon 27 Oct 2025 13:00:52 +0000
Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: Ua+dxRhUrtGrk6ta0XZF/Yas9l78gjRcdEdXL84QOAE=)
3: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:7d:68:d4:fc:6b:e7:5a:fb:44:be:0b:14:7a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Oct 26 13:00:52 2025 GMT
Not After : Oct 27 13:00:52 2025 GMT
Subject: CN=7bc22b3f9dac8721f5240997325d7ed7c88e33b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:47:cd:43:c5:dd:80:40:97:ac:98:8f:e0:
d8:4a:d0:59:95:20:bf:b0:87:31:85:67:32:bb:a3:
ba:33:2a:e6:c4:7b:a3:5a:b0:4b:a6:d3:0e:d7:4e:
e0:cf:8a:8e:3a:a9:f9:8a:1b:ca:83:6b:b6:2c:13:
24:e8:80:a2:5c:ce:54:6b:7b:17:bf:01:c9:61:99:
9e:3f:ce:05:4b:c4:8a:6d:6b:b0:bf:96:32:c8:8f:
59:d1:e4:d4:79:38:27:49:53:ca:29:d5:3e:ae:98:
82:cc:7b:7f:53:28:e3:74:40:a9:07:35:c3:c8:6a:
f8:8a:74:43:25:91:6d:04:3f:c2:2f:e7:81:29:64:
bb:64:5b:44:7f:0e:ac:fc:fb:8b:77:60:fa:b4:96:
2f:a2:4e:dd:c9:9f:ad:24:ec:70:a9:32:38:ac:d6:
37:98:66:f6:56:c5:db:06:32:d2:41:c5:fc:d0:3f:
80:85:43:06:1f:10:42:a1:16:f4:97:e4:41:40:50:
fd:ff:94:38:66:d0:0c:2f:e4:fd:80:8a:c1:36:9a:
46:06:82:75:68:a2:b0:e6:bf:a9:14:25:2c:bf:1f:
65:6d:e9:c4:57:be:b6:35:ac:b6:f9:c5:f8:fd:68:
98:93:91:33:17:d3:cd:cc:70:a2:0c:fb:a2:be:de:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:2B:3F:9D:AC:87:21:F5:24:09:97:32:5D:7E:D7:C8:8E:33:B7
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:02:b0:48:d5:ef:92:e3:bc:2f:1a:8e:42:ad:0e:f5:c5:67:
a5:ed:9f:f7:d3:79:41:2b:c7:a1:aa:5f:ec:d0:49:58:43:ac:
86:9f:2d:26:ec:6e:63:31:af:23:d7:2f:93:6f:83:80:00:c3:
90:84:97:d3:57:52:13:29:be:6a:12:e0:b6:65:d1:36:81:d5:
71:73:cd:2c:70:7c:68:d4:03:97:d0:5c:71:21:bc:8e:55:dc:
91:53:bd:ba:32:47:ff:26:aa:f7:2b:bc:13:f3:16:0c:00:b3:
fe:f2:b5:22:a4:18:53:e9:31:c3:e3:58:3c:cc:ce:b9:ed:00:
b8:ce:cd:28:de:50:f1:f7:ec:4b:64:5a:ed:66:a1:d0:2a:16:
dd:57:2b:4b:8e:1b:e6:35:59:38:52:5d:1b:92:54:1a:ea:3f:
cc:fa:c8:c4:b8:e9:d8:a6:d2:48:80:e4:97:31:a3:3b:fd:20:
bb:59:54:0d:57:ba:78:12:23:e0:68:7d:59:0f:75:a5:d7:76:
09:90:9a:90:81:1d:54:55:01:24:50:59:bb:54:39:3e:45:c0:
59:5c:34:b4:72:03:45:36:1e:b0:19:fe:04:db:3b:f8:b6:c2:
44:f6:3f:45:18:7b:e9:59:e5:07:34:16:e6:f3:e8:e5:a6:62:
08:be:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:23:50 2025 by rpki-client