Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: njqLTW22uTFuYjzZhwz3CW+YCKnQkFqiJED+kRJzs50=
Subject key identifier: 80:D1:B0:26:D2:26:2F:D9:1F:9B:C2:93:B0:4C:D8:F3:1E:CA:B7:71
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 01976D74AF8B47E8F099DBB9CF41B88A71EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0A8D
Signing time: Sat 14 Jun 2025 08:00:52 +0000
Manifest this update: Sat 14 Jun 2025 08:00:52 +0000
Manifest next update: Sun 15 Jun 2025 08:00:52 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: oEMD9NkzR+Lqv+QMeKl/GoHzI/QjpWmNEwxz9VLwDNE=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:af:8b:47:e8:f0:99:db:b9:cf:41:b8:8a:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Jun 14 08:00:52 2025 GMT
Not After : Jun 15 08:00:52 2025 GMT
Subject: CN=80d1b026d2262fd91f9bc293b04cd8f31ecab771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:ca:5e:61:98:2f:8a:2c:63:ac:49:b1:50:
58:67:d4:c1:3c:c0:1b:6f:b8:e4:3d:04:6e:5d:84:
8a:76:78:53:84:54:6a:da:99:64:e3:9d:f1:89:ab:
52:50:a1:fa:72:c4:08:ef:52:30:e2:8f:c5:3b:ea:
81:ec:7d:38:f5:03:5c:e7:d5:9a:aa:cd:99:0e:ef:
ac:68:26:ae:1a:62:fc:da:4b:0a:6d:75:e7:09:ce:
16:b2:a8:fe:a0:c5:bd:de:2b:d0:ae:eb:d6:a3:6d:
7a:c2:ad:5a:4c:38:ad:c0:73:65:35:c0:ee:d8:8e:
c0:75:81:0b:13:00:d4:35:41:fe:16:76:4f:b7:67:
38:ff:fa:75:f6:e7:10:4a:20:7c:67:d3:28:7a:59:
c0:cf:fb:05:96:e7:86:31:85:d4:a8:e2:07:81:6f:
57:30:4a:ba:d3:8e:b4:56:3e:d6:f1:a8:8c:2a:05:
2a:d6:34:5a:ff:f4:fb:ee:03:77:d7:25:1d:53:85:
9b:d0:e6:8e:8e:3c:de:eb:c5:f8:82:b4:cd:42:18:
37:4f:ba:02:d1:3e:89:91:03:0c:98:0d:41:b6:4f:
48:ee:6d:d5:18:ad:52:5a:47:3f:4f:a2:96:db:d8:
a2:09:08:56:96:3d:fc:ba:94:b5:f6:b5:19:27:4a:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D1:B0:26:D2:26:2F:D9:1F:9B:C2:93:B0:4C:D8:F3:1E:CA:B7:71
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:12:12:f0:55:0c:0a:08:b0:e1:8c:47:fa:d4:8f:15:61:3a:
5f:90:38:a4:da:50:16:b6:5b:45:ad:6c:54:7d:53:11:72:02:
6c:61:42:9a:ef:4c:bb:ca:8f:94:c4:07:60:d8:e5:be:ba:e3:
51:12:0b:82:81:a5:58:11:f5:03:fe:3f:e5:eb:90:01:34:fc:
0d:39:c3:77:e2:83:73:d9:de:ad:ee:cd:7d:ef:d4:47:1e:85:
84:51:cc:aa:5b:9b:ff:fd:a0:24:88:42:cc:93:1f:18:da:e1:
43:10:4e:27:af:7c:10:fe:9a:9e:e7:01:4d:c0:9f:e4:8e:62:
2c:55:89:42:bc:6f:62:ee:0d:1c:b2:d1:03:41:9d:15:80:c2:
78:bf:8d:73:e4:cd:2d:c8:b2:64:b5:f2:f8:b2:22:74:58:10:
df:68:bc:78:0d:29:6a:0a:3e:76:82:13:fa:52:44:07:12:1d:
e0:fa:4f:67:3d:d7:77:a7:0b:91:83:7d:fc:0a:3d:68:61:0a:
4c:ae:1f:68:a8:e8:08:41:a8:6b:75:f1:2d:cf:fb:13:13:3c:
0a:f5:cb:69:b3:36:8a:1f:26:20:30:4f:47:be:0a:a8:08:5c:
e7:55:10:23:01:28:14:ac:4c:01:98:e3:8a:b2:ae:ef:c4:88:
2d:cc:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:27:47 2025 by rpki-client