Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: IAz6afLmGu8EkKYfoIBZS/2sNyGZa7tysh+l1Xx/HaM=
Subject key identifier: BF:86:74:6E:C0:42:C3:6E:E4:B0:F0:4E:CA:A3:72:45:9A:E2:F7:FA
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 019A296717F25A095E5FCAF4034CE5235DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 149A
Signing time: Tue 28 Oct 2025 06:00:13 +0000
Manifest this update: Tue 28 Oct 2025 06:00:13 +0000
Manifest next update: Wed 29 Oct 2025 06:00:13 +0000
Files and hashes: 1: 0mGXGaCdx8b0IvVKiGo7317nAQw.roa (hash: JBoOppkoR2+2kdzZgQYn1vdyTCQusp5l9Um4sKeOKzw=)
2: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: 15FX4PY+DfubSKF7SWV6TbRsNff0/uyUgzKF7eU+Tng=)
3: P3rY7Cmn84Ni11FziReIJTvis6Q.roa (hash: SHFkgztCNHhWPjHt5nCk5Bgx6ribEhAmnRifNZCrpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:17:f2:5a:09:5e:5f:ca:f4:03:4c:e5:23:5d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Oct 28 06:00:13 2025 GMT
Not After : Oct 29 06:00:13 2025 GMT
Subject: CN=bf86746ec042c36ee4b0f04ecaa372459ae2f7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:a1:90:f6:3e:af:95:97:4d:ff:26:c3:d2:
b5:4b:f1:2a:0e:d2:57:27:c9:61:d6:c5:1d:d6:dc:
14:34:2a:16:fa:39:da:4e:6f:6b:06:3c:c5:e3:d4:
24:78:4e:92:f8:de:15:d0:3a:69:0c:62:8d:59:fe:
06:0f:e3:83:72:2a:65:0d:cf:76:70:4f:cf:aa:70:
ed:c1:82:b4:b0:5e:82:b9:c4:4e:76:71:b6:bf:db:
02:e5:18:1e:1f:7c:88:fe:0c:3e:aa:7a:f2:5b:1a:
4d:fd:05:ae:79:16:10:5a:f1:a5:60:e4:14:d5:45:
19:2f:c1:47:83:3a:43:7d:75:fb:67:41:d4:53:15:
de:b0:a5:50:f8:99:5e:fb:c3:37:81:47:f6:82:57:
17:b5:de:77:54:29:7b:03:ef:1e:09:85:1f:6f:c2:
08:60:4e:65:c3:3a:0b:28:3c:60:b9:30:c7:ed:ef:
10:30:eb:f6:c6:e8:68:36:48:df:7f:2d:3a:a1:e5:
ee:c0:d7:e3:29:8b:b8:ab:2f:e4:4d:04:60:53:62:
45:c1:f1:a8:65:07:26:5d:0c:bc:fb:cb:b1:c2:89:
fc:29:a1:72:78:64:6b:1c:70:20:32:35:e6:e2:57:
ec:7d:fb:21:71:9f:e1:9e:4d:96:24:43:2b:57:ea:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:74:6E:C0:42:C3:6E:E4:B0:F0:4E:CA:A3:72:45:9A:E2:F7:FA
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fb:9f:05:99:e2:c3:13:b4:c7:1d:1e:78:ec:74:75:a8:45:
51:81:b9:7d:50:6e:cf:f6:2a:83:5a:e7:ac:0b:e3:9c:ac:d3:
7a:fe:1d:3d:af:9f:df:47:3b:a6:e6:72:f8:d2:43:b6:01:d4:
bb:e2:82:74:e7:2e:d8:e0:6b:18:86:8f:27:e9:22:f8:b6:f7:
1e:23:59:c1:bf:bb:68:cb:6b:51:37:59:e7:3c:8b:0d:8e:12:
83:29:9e:7e:7c:8c:ff:b5:fc:53:42:20:c7:b0:0d:7f:e5:13:
8f:8f:81:1a:4a:68:d9:b1:fd:0a:d5:93:df:6e:9c:34:59:09:
39:7c:42:74:d1:a6:bb:23:e2:97:b2:9e:43:a3:be:87:47:f6:
60:a9:7d:5f:b7:f3:65:86:f4:6b:7f:13:6f:5c:cc:5d:ee:e4:
0f:23:e0:a0:63:56:4a:01:3d:47:f5:44:71:87:49:fc:41:36:
53:2d:1b:3d:1e:e6:52:79:2c:4c:ff:6b:4e:63:15:1f:0d:eb:
33:29:b9:b5:c6:15:e8:b6:d7:86:cb:1c:72:37:80:e4:3e:6d:
94:31:b3:fc:8d:dc:46:b1:36:11:d0:73:c9:61:a0:83:60:3b:
91:ac:74:6e:fd:40:c3:bc:64:61:69:6a:a4:f9:ef:f0:2c:e1:
c5:4d:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:55:44 2025 by rpki-client