Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: D1dcJxRXFrXPgTrhvUPjoAiLXjPDhCW3UjD5I5Fj1T4=
Subject key identifier: DB:42:66:35:F6:2B:63:C9:21:2D:F5:25:EE:6F:45:B0:55:C2:59:3B
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019873E1DA50A574994661649FBFA1259DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 07:00:37 +0000
Manifest this update: Mon 04 Aug 2025 07:00:37 +0000
Manifest next update: Tue 05 Aug 2025 07:00:37 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: /3ZUUZtPOVpttFzixK2MWRgqKRv8sYXatdSOX6vB7Kw=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:da:50:a5:74:99:46:61:64:9f:bf:a1:25:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Aug 4 07:00:37 2025 GMT
Not After : Aug 5 07:00:37 2025 GMT
Subject: CN=db426635f62b63c9212df525ee6f45b055c2593b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:9c:10:06:9a:bc:4e:d3:ce:e7:bd:41:3b:
2f:39:c5:7b:c9:24:4d:a8:b9:fc:aa:26:48:28:29:
c4:0b:3f:b3:48:cb:e0:82:49:3f:dd:96:c6:ab:32:
bd:1c:77:f6:af:2b:49:9a:85:89:dc:ca:0c:b3:c3:
67:5e:de:72:46:f3:ce:91:b4:2f:9c:62:68:14:26:
df:d0:08:c4:0e:aa:65:e8:8d:13:60:9b:7e:3c:90:
92:68:b0:41:de:2e:ea:88:06:25:5d:55:a9:4a:cf:
cf:37:22:08:bf:07:a2:69:ea:5a:c0:c6:10:e9:da:
56:97:0c:93:e6:f9:d3:a2:8e:7f:fa:88:97:6c:0a:
2d:bb:2c:2a:7b:b8:40:74:3e:5e:9e:72:cf:b2:81:
b0:69:70:c3:4f:0f:1a:fc:c0:10:36:06:6f:d5:d9:
1e:47:39:bf:0d:90:f7:84:61:34:88:62:ce:73:ec:
86:a1:af:87:5a:ec:b5:db:0a:4b:67:19:6a:4f:c8:
20:a7:31:2d:9d:b4:e1:52:ed:16:7d:ae:ac:28:7e:
cf:c7:a4:7e:76:d6:cd:42:7d:71:50:f7:fa:48:62:
2d:d7:04:08:c0:6f:f0:a0:e3:25:ba:31:64:f3:a3:
fa:19:2d:c3:24:de:a9:7e:6d:6a:a4:f3:d1:e5:5a:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:66:35:F6:2B:63:C9:21:2D:F5:25:EE:6F:45:B0:55:C2:59:3B
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7c:45:94:72:23:0d:0b:31:ee:39:a9:bf:55:ef:00:0b:f0:
5b:a2:ae:f3:62:22:b5:c6:4e:a0:a9:92:f5:1f:3e:ed:4c:70:
0b:69:ef:cf:d7:5c:84:ab:fd:e6:20:fc:39:6c:dd:f8:da:ef:
5f:95:67:61:4b:9b:bd:6d:66:a0:2d:39:35:b2:50:20:36:5f:
a7:78:e7:c5:1c:a2:75:a0:d4:0f:dd:01:4a:9b:97:c0:83:b4:
39:79:4f:6b:f6:ff:53:16:1e:ea:5f:22:d9:ca:fa:a5:f0:9c:
8c:8a:8b:b5:9e:ec:0a:4c:92:a8:ef:63:76:5e:08:2c:16:bc:
6a:82:a1:92:e7:01:2c:6e:03:18:b8:84:84:dc:52:61:5c:bb:
0f:b1:31:45:76:8c:df:8d:17:1f:e1:c2:2e:52:04:2e:ac:06:
a3:30:1c:d2:f9:cb:81:5e:16:f3:f9:9e:3a:05:e0:8b:7b:07:
8b:d9:bc:c3:c5:f1:b1:4f:9d:6e:61:11:50:d3:ff:2b:b2:04:
06:d6:6f:39:1f:46:3b:de:9b:16:c6:6d:6e:a7:16:7e:58:c3:
15:eb:10:19:1c:d2:ea:86:8f:0d:f9:15:df:c2:9b:0f:4d:19:
e8:77:43:a2:98:b5:f3:37:de:e1:a7:e4:e7:be:8a:e9:b9:d2:
5d:95:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:47 2025 by rpki-client