Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: ueZhntl0H1TESZ5A4Z3rc5WM1hDIlwVoOAYpCfBlaVs=
Subject key identifier: 9E:D2:79:3E:F3:95:3F:96:93:7C:2F:2A:A4:BE:25:EB:E7:12:21:B4
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 01988D33B60237C823BA5C3209DEB6B422BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0B22
Signing time: Sat 09 Aug 2025 05:00:33 +0000
Manifest this update: Sat 09 Aug 2025 05:00:33 +0000
Manifest next update: Sun 10 Aug 2025 05:00:33 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: C+ytBxEJq+nBOUG/8X+rTQyf6/ve52jIR7CurjMp66M=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:b6:02:37:c8:23:ba:5c:32:09:de:b6:b4:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Aug 9 05:00:33 2025 GMT
Not After : Aug 10 05:00:33 2025 GMT
Subject: CN=9ed2793ef3953f96937c2f2aa4be25ebe71221b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:fc:8d:42:90:50:6f:9d:e2:62:5d:5c:6e:
64:a5:c8:86:e2:bb:df:3b:c5:6b:eb:b1:53:6f:e3:
42:5d:af:c6:a3:5e:25:95:11:b6:dd:16:8b:06:d9:
43:69:f0:d3:ac:c1:b4:64:ae:79:ad:10:64:20:99:
a5:c9:c6:46:5b:d4:5f:83:26:7b:a1:a8:f7:75:f4:
23:03:f7:8e:f7:63:2e:5b:0d:d9:9a:69:9b:eb:86:
8c:15:6a:a8:e3:7a:2b:3f:0b:5e:1e:7c:96:9f:21:
fb:b9:c4:ad:99:cf:47:9a:78:bf:94:a6:70:a4:c0:
a1:03:e4:13:f3:94:1b:aa:e3:b9:86:b8:63:83:ee:
bc:09:f6:3d:d8:ae:63:09:b4:56:99:9a:42:80:f5:
64:12:9a:26:82:af:a9:77:ee:db:36:d7:a7:b2:5e:
90:6a:5d:44:67:1e:ac:49:3b:28:1a:0f:45:c2:ba:
ab:25:56:dd:55:07:69:4b:22:01:5a:68:6c:61:ab:
cc:04:68:20:e3:79:22:4a:f8:0b:13:7e:8b:b7:8c:
d6:40:23:fb:53:46:0c:85:83:8f:d2:5f:23:46:b8:
c8:94:5f:1e:3d:d8:8f:a9:e9:c7:15:cb:58:a0:41:
4d:33:80:47:0d:b0:45:2a:08:ff:15:a5:8d:d3:f9:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:79:3E:F3:95:3F:96:93:7C:2F:2A:A4:BE:25:EB:E7:12:21:B4
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f5:28:0c:f1:24:b9:d8:dd:b8:b1:f5:0e:70:09:9e:fa:a3:
4c:95:26:d6:e5:ef:a8:b2:b3:90:c5:02:0f:4e:c1:bf:54:b8:
ee:fc:f7:1e:7e:d1:cc:5c:f1:59:4a:ae:66:20:ae:e6:42:53:
6d:7e:48:d4:55:8b:d2:ee:2d:20:5a:93:55:cd:59:2c:36:c9:
df:26:23:f2:e6:5d:6c:d7:cb:4f:36:f8:83:8a:e1:db:3d:d1:
71:80:e6:32:18:d2:bf:1c:79:ee:60:b2:f8:13:16:22:77:83:
3b:6a:f9:b3:27:07:f2:75:8f:d7:70:54:0f:89:d7:59:bf:16:
39:4c:90:34:d4:15:7a:f4:5c:91:09:15:ba:e1:5e:32:f5:e9:
6c:fa:e9:a6:e8:bf:45:f0:b4:e0:39:d6:80:a0:fa:da:30:ee:
b7:91:be:55:5b:ee:d5:d8:93:25:be:79:c4:f6:ca:24:69:fc:
18:28:90:1f:71:d1:f2:2f:53:f5:32:67:31:80:43:2f:c9:11:
d4:dd:27:e2:98:61:ec:96:52:2f:90:24:e8:c8:2f:4e:bc:b0:
b8:b1:b8:8b:36:af:73:8d:69:d1:fd:d1:1f:4e:a1:a5:d3:48:
02:f8:f0:09:22:e2:3e:bb:b4:8e:f3:a8:ff:74:79:06:38:25:
64:0f:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:22 2025 by rpki-client