Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: JmPk6LKiPH2grB0IQOQKph+cbKqKUhww+IcVUa4RLes=
Subject key identifier: F1:A2:91:2A:B5:5E:3B:1D:71:CE:48:E9:8F:C4:F2:87:4D:18:23:EC
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 0199FC589C80A8047BDC12DC8152FC0BE327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0746
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: w23xl/oL6Fepn90uUPeaO97Zj6sVV2GYtLWtV74MbWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9c:80:a8:04:7b:dc:12:dc:81:52:fc:0b:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=f1a2912ab55e3b1d71ce48e98fc4f2874d1823ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:10:f3:e1:dc:a7:ba:07:c1:7a:3d:4d:36:
6d:eb:66:b2:0a:42:68:2a:d9:e9:f2:b9:74:63:1e:
3e:ea:3f:1f:47:8e:bc:83:4f:50:44:57:e1:03:21:
88:78:b5:73:e3:79:7d:81:e9:c0:4f:27:93:c2:bf:
47:20:5d:72:2c:2e:12:cf:3b:c5:a7:0e:0f:b8:bd:
d1:48:b5:b4:b2:92:e6:fa:f6:38:1f:be:b2:04:bc:
4e:f4:ea:06:18:da:e7:20:13:4b:4b:9e:91:4c:df:
f2:ee:7f:52:39:ab:ba:7a:ee:14:8c:c0:3b:ba:36:
67:29:9a:ad:a7:d3:94:e2:77:9a:43:87:01:7e:34:
44:3e:d7:e1:b0:ee:34:88:5f:9b:ef:40:0f:84:2a:
30:d1:9b:2f:d0:15:52:0c:6f:f4:6f:19:60:79:33:
79:ba:93:2f:3c:6f:6a:a1:65:d7:ea:b2:4d:b5:2b:
11:7b:a1:19:27:28:90:e0:1d:67:23:58:90:ba:1f:
63:e9:90:aa:4c:8c:90:ca:37:2c:d8:ba:e0:06:70:
94:bf:81:bf:88:e6:d3:d4:ec:32:e2:d5:b4:bd:59:
9e:3c:bc:13:96:e2:d1:09:83:03:cc:da:2e:54:c2:
ee:6f:9a:d3:33:01:cf:7b:f0:f4:9b:0f:2c:a2:f4:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:91:2A:B5:5E:3B:1D:71:CE:48:E9:8F:C4:F2:87:4D:18:23:EC
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0e:15:77:31:e4:09:f3:e1:3b:d1:6c:f4:14:0b:ee:0e:d0:
68:10:ae:5f:3f:d2:f9:54:de:b1:a3:ce:b2:65:1a:ff:c9:5f:
90:6c:91:93:85:3d:24:52:94:af:77:c3:97:a3:e0:7e:b0:50:
52:73:43:48:cd:54:4b:c7:91:63:70:24:49:e1:29:d0:21:38:
6c:50:46:57:11:7b:d4:b3:c2:1e:a8:a2:17:f3:46:6a:20:08:
6d:0b:4a:97:48:4e:cd:3b:de:74:26:44:af:54:7b:c4:85:58:
10:07:e2:b2:27:24:71:c4:c2:54:a8:c9:db:c4:c3:fe:47:ce:
f0:75:c0:e6:41:1f:d6:f4:6a:a4:a8:ab:d6:72:bf:03:51:42:
ec:e2:58:9a:01:b5:ae:67:85:a4:b0:1c:31:32:9d:c0:52:85:
66:e5:6c:9d:b9:e7:c2:45:12:c9:48:fc:29:35:04:47:2a:81:
f9:a2:9f:de:a1:4d:3a:9a:bd:5d:9e:eb:c0:b2:80:d0:57:45:
d7:2f:16:76:bb:b2:fe:5b:e4:e6:db:b2:6d:bb:af:d9:29:05:
e9:f2:d4:c8:e2:be:8d:14:a1:16:b0:49:a2:ef:e7:c1:1e:6b:
1c:7e:3e:2c:f8:6c:5b:4e:bb:b5:11:52:36:50:64:72:e6:e7:
79:60:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:08:27 2025 by rpki-client