Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: KgQ57EeJhzUwuLNs1J/EuhGmNQ/6ZirOZt11jRU731c=
Subject key identifier: 04:56:0F:7C:31:2C:C0:78:BE:B7:CE:DE:14:0C:F7:BD:64:60:05:B9
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 01987DF8959903084DF1B80061A8D5226FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 06:01:39 +0000
Manifest this update: Wed 06 Aug 2025 06:01:39 +0000
Manifest next update: Thu 07 Aug 2025 06:01:39 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: WmpVUwPS3Y7waPM93KKPRonehp0k5RqSXTdwXdg6JrA=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:95:99:03:08:4d:f1:b8:00:61:a8:d5:22:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Aug 6 06:01:39 2025 GMT
Not After : Aug 7 06:01:39 2025 GMT
Subject: CN=04560f7c312cc078beb7cede140cf7bd646005b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:ea:9d:5e:a1:22:2a:6f:a6:a7:71:1a:64:
48:69:53:d5:31:87:0e:39:ce:c1:e3:be:a6:08:92:
ce:1f:40:08:0d:4d:4b:a4:05:a5:4d:19:7f:5e:cb:
42:75:3a:9d:e5:c4:7e:29:a2:71:4c:f6:61:85:06:
e7:4f:86:ba:e9:f7:5c:64:e7:92:55:f1:50:a8:99:
71:3c:09:2f:72:b1:15:27:18:b1:3c:b3:71:3f:fd:
48:b5:ef:e1:5a:b3:86:de:03:35:49:9c:7c:75:01:
ea:c1:39:15:ea:6d:95:b0:59:ec:ba:1b:53:25:0b:
3c:af:f6:a7:d0:74:c7:b7:ee:23:b4:97:ab:0c:6b:
ee:d9:62:98:8f:ab:6c:ed:05:f2:db:bf:e9:1c:c2:
e6:3d:1a:7a:e1:08:c3:68:aa:bc:a0:e7:ad:60:9d:
a2:8c:c0:3b:48:a6:fe:ba:fa:6e:ec:f1:96:20:52:
9c:e2:c4:e8:6d:64:93:ba:e1:d3:a8:b2:eb:a5:60:
f2:6e:64:c6:60:82:ba:ba:19:98:40:c2:94:83:87:
35:a4:bc:83:eb:84:f1:56:0b:5f:b3:47:e9:fa:4c:
05:55:b3:62:c3:98:53:57:36:2e:a4:57:fc:bf:f6:
2b:70:32:4f:a7:b7:2e:58:b9:69:fa:87:72:88:a4:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:0F:7C:31:2C:C0:78:BE:B7:CE:DE:14:0C:F7:BD:64:60:05:B9
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ae:e8:df:d5:7b:f1:30:e7:b4:bf:25:0a:2f:8a:ce:b6:83:
f5:70:8a:3f:2c:3c:ab:25:ea:4a:65:02:ac:a2:1a:08:61:71:
5e:de:e0:d1:16:d5:b0:03:93:30:05:38:f2:ad:11:35:b9:ea:
c9:f3:f9:5d:69:5f:92:aa:18:07:92:35:5d:d3:5e:e3:53:b8:
0e:9b:52:c1:39:61:1d:d1:af:d5:18:79:b6:ed:e1:65:a6:ff:
92:5a:fc:d4:b8:2d:3b:95:7e:16:57:1c:04:7c:5d:4e:db:ac:
a5:e1:46:65:c9:d7:b4:a8:64:95:d3:6d:62:7a:0f:f9:24:34:
ba:bc:fc:cd:d8:0e:55:b3:41:88:46:61:ec:ab:b6:20:9c:ad:
b4:d9:a1:45:bd:73:e2:72:1a:d4:5c:fe:b5:48:0c:16:65:9a:
43:7b:5b:e8:f4:fa:c1:44:67:de:3d:c0:f1:e5:d2:e5:7c:64:
80:18:c5:37:2b:83:6d:d0:1b:90:dc:a0:e7:3e:62:19:1a:43:
be:8a:8a:8b:64:a0:8d:dd:f4:0b:69:1c:f2:11:36:73:16:4f:
1a:97:01:68:cf:e7:50:ab:46:97:da:d2:39:a7:de:a3:1a:bc:
c0:fc:7c:b6:7f:34:f0:41:7a:5b:f0:d9:c8:55:42:b5:5f:b8:
c5:69:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:08:53 2025 by rpki-client