Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: mnUTMTcQlhsIfpKZZKuOrggQlRdgbIne7oNF7ubrLPA=
Subject key identifier: BA:0F:47:63:CF:76:3C:0F:04:14:8C:42:7E:4F:D9:4B:D9:08:2B:2C
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 01987B9B6C51ECEC99FE4D8F482BE256187D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 1147
Signing time: Tue 05 Aug 2025 19:00:40 +0000
Manifest this update: Tue 05 Aug 2025 19:00:40 +0000
Manifest next update: Wed 06 Aug 2025 19:00:40 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: AzXcWtluygUUJ+WxAoHlnxlVjtXp5QDnUt0LIHZHn1Q=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:6c:51:ec:ec:99:fe:4d:8f:48:2b:e2:56:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Aug 5 19:00:40 2025 GMT
Not After : Aug 6 19:00:40 2025 GMT
Subject: CN=ba0f4763cf763c0f04148c427e4fd94bd9082b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:52:f8:e6:2e:9a:f7:67:73:c2:d5:e5:38:
ec:b6:8f:fa:05:80:f9:27:a2:da:ce:38:ec:45:c0:
1e:54:f7:60:ef:4c:77:e1:59:fe:8c:66:53:d6:25:
b0:fc:69:df:c8:bb:24:14:0f:df:0a:79:d4:60:85:
2d:89:1c:f4:b1:16:66:e7:3b:e7:5e:ca:59:07:87:
0e:1f:87:2f:23:a8:12:e7:64:a2:5e:6e:ca:91:8f:
dd:27:3f:f7:2b:31:b0:72:75:7b:bc:58:cc:c5:43:
74:33:b7:f3:a2:ad:07:4b:8e:6b:ab:9c:34:6e:30:
f5:da:3b:29:dc:19:f4:e0:89:c9:24:4a:1f:e3:d0:
01:c8:7a:7b:18:b6:ed:7c:d9:9b:4c:52:03:8f:4a:
02:9c:54:12:e6:d4:e1:6a:c2:a7:9f:73:ea:90:10:
80:fa:60:17:e7:82:bc:d9:dd:2f:51:c2:e1:65:2e:
ac:4b:aa:4e:f5:af:51:c8:40:31:41:ac:27:d9:82:
b3:77:0e:65:40:7d:e3:1e:a2:c9:ab:95:a4:be:b3:
cc:33:d4:d7:23:e5:b9:3d:11:9a:1e:06:bf:47:e6:
10:1e:4e:7e:9d:cb:1e:06:17:34:ff:1b:62:28:3e:
7d:be:3e:55:1a:08:b0:8e:c7:17:55:8f:19:26:9c:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:47:63:CF:76:3C:0F:04:14:8C:42:7E:4F:D9:4B:D9:08:2B:2C
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0a:f5:31:4a:7b:d6:02:6a:dc:19:3c:1f:8e:80:97:84:15:
d7:c7:9f:a3:bf:01:8d:a8:33:39:fb:17:c8:2a:3c:a2:83:e2:
b3:55:51:02:da:10:4d:a2:4b:e9:fd:a0:4b:d5:7c:22:77:ed:
4a:96:8e:e1:6a:09:57:15:d0:a1:07:fa:aa:8a:73:2e:f2:c8:
f2:9a:77:17:0e:b4:71:27:e8:e2:96:3a:7e:20:cd:ee:d2:96:
1c:ea:ee:6f:c2:0e:59:58:f9:a6:8f:45:e4:5d:25:1d:5a:92:
07:3d:e7:82:92:03:86:36:46:f1:28:2b:51:6a:18:81:fc:7f:
0e:d2:a9:d5:7f:df:94:dd:88:91:35:5a:a2:a3:94:44:fa:bf:
ea:da:9d:94:19:0d:99:3a:f8:39:84:35:76:b4:7e:07:8f:8a:
9b:71:f3:35:13:07:cc:0f:8a:40:f4:d5:9c:bc:6a:a0:9a:41:
2a:97:e8:94:1a:1a:46:43:e4:93:c9:0d:e1:41:b3:67:19:bf:
13:db:5f:44:0d:cc:f9:8d:a6:3d:f4:e5:ac:c6:45:89:8f:8c:
b2:2d:eb:17:d9:56:d7:a6:b8:f5:bf:fc:07:b3:74:7d:08:38:
7c:46:5d:98:38:bc:11:0a:35:c1:4f:06:dd:2f:5d:b7:42:4d:
01:0a:d8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m2xR7OyZ/k2PSCviVhh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2
ZDlkNmUwHhcNMjUwODA1MTkwMDQwWhcNMjUwODA2MTkwMDQwWjAzMTEwLwYDVQQD
EyhiYTBmNDc2M2NmNzYzYzBmMDQxNDhjNDI3ZTRmZDk0YmQ5MDgyYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2lS+OYumvdnc8LV5Tjsto/6BYD5
J6LazjjsRcAeVPdg70x34Vn+jGZT1iWw/GnfyLskFA/fCnnUYIUtiRz0sRZm5zvn
XspZB4cOH4cvI6gS52SiXm7KkY/dJz/3KzGwcnV7vFjMxUN0M7fzoq0HS45rq5w0
bjD12jsp3Bn04InJJEof49AByHp7GLbtfNmbTFIDj0oCnFQS5tThasKnn3PqkBCA
+mAX54K82d0vUcLhZS6sS6pO9a9RyEAxQawn2YKzdw5lQH3jHqLJq5WkvrPMM9TX
I+W5PRGaHga/R+YQHk5+ncseBhc0/xtiKD59vj5VGgiwjscXVY8ZJpzl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoPR2PPdjwPBBSMQn5P2UvZCCssMB8GA1UdIwQY
MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt
NWM2OTA0NDdiYTg5LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5
LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswr1MUp7
1gJq3Bk8H46Al4QV18efo78BjagzOfsXyCo8ooPis1VRAtoQTaJL6f2gS9V8Inft
SpaO4WoJVxXQoQf6qopzLvLI8pp3Fw60cSfo4pY6fiDN7tKWHOrub8IOWVj5po9F
5F0lHVqSBz3ngpIDhjZG8SgrUWoYgfx/DtKp1X/flN2IkTVaoqOURPq/6tqdlBkN
mTr4OYQ1drR+B4+Km3HzNRMHzA+KQPTVnLxqoJpBKpfolBoaRkPkk8kN4UGzZxm/
E9tfRA3M+Y2mPfTlrMZFiY+Msi3rF9lW16a49b/8B7N0fQg4fEZdmDi8EQo1wU8G
3S9dt0JNAQrYwQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:36 2025 by rpki-client