Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File: HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier: JH9gjEsXS+AO3aBBg5AyHae372CF/7pLwUUilPjSr9k=
Subject key identifier: 15:68:5D:64:71:33:70:21:07:90:A4:F5:DE:F6:F4:2E:FC:3A:7E:F3
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 01974EFC10CE32C662FF64182758086E44E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 10:00:31 +0000
Manifest this update: Sun 08 Jun 2025 10:00:31 +0000
Manifest next update: Mon 09 Jun 2025 10:00:31 +0000
Files and hashes: 1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=)
2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: FMEfkAHDPcZZgB80x28iLGLXLBJF8DqUXZQ+0XZ+Nys=)
3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=)
4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:10:ce:32:c6:62:ff:64:18:27:58:08:6e:44:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Jun 8 10:00:31 2025 GMT
Not After : Jun 9 10:00:31 2025 GMT
Subject: CN=15685d64713370210790a4f5def6f42efc3a7ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:6f:cb:fc:75:6d:f4:95:1d:b8:10:9d:fb:
df:5c:4d:08:1b:f3:89:72:69:4d:e0:20:91:39:b3:
b9:ec:61:2e:72:dd:c3:7f:32:bf:03:ca:e4:2e:9c:
fb:52:ae:3e:e0:d0:0e:a8:e2:58:1d:1b:6b:8b:02:
3a:44:7c:30:47:81:d1:37:43:2a:0f:ff:2f:0c:9f:
1c:6c:c5:67:e3:bf:5d:b2:a9:3a:5f:eb:15:67:f0:
fc:03:f5:6c:e4:43:8b:50:44:7d:57:0c:49:fb:1b:
b1:db:2c:a6:68:7f:b9:10:6a:6d:ae:85:44:3c:53:
23:38:1d:ed:92:0d:99:f9:5c:fb:27:9f:e0:7f:0f:
f4:c9:77:20:e2:ad:c5:a5:b0:38:b8:11:24:f5:be:
56:a5:a1:e1:f2:ec:2d:00:24:ff:99:c2:b3:e4:fc:
b0:27:c1:c5:6a:8a:bd:1d:3a:26:fd:2d:13:74:5a:
18:33:6b:9e:c7:b9:84:47:87:d1:38:ea:7b:dc:a0:
24:d2:7e:dd:cf:f9:58:49:4a:b3:fe:1a:c3:e3:15:
ee:0e:5f:91:7f:3d:88:8a:40:c1:30:e4:4c:c7:07:
20:ac:9a:61:0e:9b:fe:8c:23:f0:53:83:bf:01:34:
ee:60:f4:7d:3b:2f:55:e9:13:81:83:5c:dd:e6:c7:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:5D:64:71:33:70:21:07:90:A4:F5:DE:F6:F4:2E:FC:3A:7E:F3
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:35:de:ae:26:38:45:a4:cd:b7:d4:64:2c:a2:f5:22:42:
ff:c0:d8:07:4b:7f:61:6a:20:6c:23:94:6b:d5:be:6f:2e:fd:
b6:2c:35:9b:41:a8:ee:88:44:44:b9:a9:ec:20:52:10:01:ef:
3f:48:13:fb:b4:ae:43:79:ce:b3:3c:db:41:c9:28:db:a5:22:
0a:18:1d:75:e6:4d:40:d2:0d:7f:b9:bc:e2:e2:de:ba:ad:1e:
cf:40:d3:6e:62:06:a5:9f:95:e5:ef:ab:91:92:cf:eb:63:34:
6a:af:dc:3e:10:7e:66:4c:68:bd:58:b7:dc:9e:d0:33:28:59:
df:c7:d4:36:c5:d2:78:3e:2b:f6:96:02:87:44:d2:b4:c0:9c:
d8:7b:06:9b:2a:52:e2:7c:79:1a:e3:ef:6d:cd:16:f7:79:33:
f9:d7:eb:92:d7:9b:2f:04:06:47:0f:cb:92:e3:9a:d3:05:53:
e1:64:72:fd:5c:94:4a:15:32:94:4c:f6:8d:0d:44:3f:aa:70:
17:ad:0a:af:86:65:01:05:dc:52:98:4e:ce:b0:f8:5f:32:c4:
5a:a4:b8:d7:58:35:eb:0b:50:d6:86:7a:15:9f:37:9b:29:1e:
50:aa:fe:19:a1:20:c6:fe:32:a0:41:5f:48:6b:53:dc:99:77:
3a:b7:c7:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/BDOMsZi/2QYJ1gIbkTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz
ZmNkYzIwHhcNMjUwNjA4MTAwMDMxWhcNMjUwNjA5MTAwMDMxWjAzMTEwLwYDVQQD
EygxNTY4NWQ2NDcxMzM3MDIxMDc5MGE0ZjVkZWY2ZjQyZWZjM2E3ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu9vy/x1bfSVHbgQnfvfXE0IG/OJ
cmlN4CCRObO57GEuct3DfzK/A8rkLpz7Uq4+4NAOqOJYHRtriwI6RHwwR4HRN0Mq
D/8vDJ8cbMVn479dsqk6X+sVZ/D8A/Vs5EOLUER9VwxJ+xux2yymaH+5EGptroVE
PFMjOB3tkg2Z+Vz7J5/gfw/0yXcg4q3FpbA4uBEk9b5WpaHh8uwtACT/mcKz5Pyw
J8HFaoq9HTom/S0TdFoYM2uex7mER4fROOp73KAk0n7dz/lYSUqz/hrD4xXuDl+R
fz2IikDBMORMxwcgrJphDpv+jCPwU4O/ATTuYPR9Oy9V6ROBg1zd5sdyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVoXWRxM3AhB5Ck9d729C78On7zMB8GA1UdIwQY
MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt
OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0
LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZY13q4m
OEWkzbfUZCyi9SJC/8DYB0t/YWogbCOUa9W+by79tiw1m0Go7ohERLmp7CBSEAHv
P0gT+7SuQ3nOszzbQcko26UiChgddeZNQNINf7m84uLeuq0ez0DTbmIGpZ+V5e+r
kZLP62M0aq/cPhB+ZkxovVi33J7QMyhZ38fUNsXSeD4r9pYCh0TStMCc2HsGmypS
4nx5GuPvbc0W93kz+dfrktebLwQGRw/LkuOa0wVT4WRy/VyUShUylEz2jQ1EP6pw
F60Kr4ZlAQXcUphOzrD4XzLEWqS411g16wtQ1oZ6FZ83mykeUKr+GaEgxv4yoEFf
SGtT3Jl3OrfH+g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:58:59 2025 by rpki-client