
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File: HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier: vFkQbh/3SQUh68PeK29zaneUXonXiJPmFZUOcLf2tO0=
Subject key identifier: AF:8F:47:C5:29:9C:83:44:92:4C:E2:F6:48:44:FF:43:FB:3B:C1:3E
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 0198752B74C08A0EB0E7889D00FC85679F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 13:00:38 +0000
Manifest this update: Mon 04 Aug 2025 13:00:38 +0000
Manifest next update: Tue 05 Aug 2025 13:00:38 +0000
Files and hashes: 1: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: 00wQvmSRziwncKrThXbbGBtzOTWLa8408IH45+3+48c=)
2: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
3: Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa (hash: c4F3qlWubFRDD6IUHkMCGZaiuQoE5JPsyXqZuaXssXk=)
4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:74:c0:8a:0e:b0:e7:88:9d:00:fc:85:67:9f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Aug 4 13:00:38 2025 GMT
Not After : Aug 5 13:00:38 2025 GMT
Subject: CN=af8f47c5299c8344924ce2f64844ff43fb3bc13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:03:4b:76:ad:64:93:92:90:47:15:f5:20:
e7:a9:82:65:20:54:fd:d9:0c:49:af:5f:d5:50:54:
1e:fc:d5:1d:c0:3e:52:0b:42:21:79:01:ec:5d:54:
f8:82:31:3f:40:67:0b:8f:fc:a0:9c:84:e6:de:11:
d6:ec:65:58:5d:3e:79:ba:4d:9e:d5:8c:d0:ad:af:
aa:5d:1a:ed:02:21:5f:e6:24:8d:33:b3:43:ae:b3:
86:d8:7e:fa:18:01:f0:90:2f:a3:95:1e:b4:c1:82:
96:95:d4:4b:81:58:26:9b:22:f4:49:78:5c:41:d0:
a4:e3:d1:ad:eb:49:e5:25:89:e0:44:1d:ef:ba:d4:
e6:fc:0a:39:2f:2c:bb:af:87:9e:e9:45:fe:52:97:
1e:a6:cf:7e:72:b0:59:dd:89:37:3c:c1:56:08:ac:
9e:86:bd:2f:0a:dc:54:df:47:ab:01:6d:cc:b9:8b:
27:86:d5:9c:75:d4:63:4d:ad:e7:60:5a:18:a9:2a:
80:6d:a3:e8:08:c8:a1:33:fa:2d:1e:d1:ab:25:2a:
58:89:3c:7b:7c:02:40:00:e1:8e:67:22:a1:8f:25:
7a:15:d1:43:d7:e3:73:df:ee:af:34:50:71:78:5e:
15:d0:d5:a3:91:9b:90:5a:1b:84:7a:2b:98:f3:92:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:47:C5:29:9C:83:44:92:4C:E2:F6:48:44:FF:43:FB:3B:C1:3E
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:3f:56:4d:74:a0:2a:b9:b6:36:cc:b7:80:cd:b1:4d:84:
a8:2f:8d:a4:84:9b:51:92:3f:a1:cf:91:81:9c:39:ce:70:be:
51:eb:d0:b3:e3:8c:e9:51:f3:85:ad:1a:e1:44:e1:5b:cd:2e:
11:3d:2e:7c:36:82:ad:56:a5:58:c0:d5:41:34:41:30:6d:fd:
06:10:1b:76:98:9c:da:4a:7c:df:15:eb:f2:ac:30:20:f6:b7:
7d:ca:98:ae:a2:fb:07:17:5c:96:de:57:ad:9d:94:1c:07:a1:
07:09:bb:cd:dd:39:66:b5:e1:74:f0:ba:5f:2a:ff:55:9a:69:
3a:7a:76:28:7c:6f:15:bc:cd:97:96:ca:65:35:37:a1:a9:bc:
3a:43:36:e2:fc:00:5f:f9:41:f8:fe:eb:7b:5f:4b:93:6e:7e:
37:4d:25:be:8d:02:d8:9d:9a:e6:a0:81:a9:d9:e2:e1:f9:36:
68:e9:54:a7:6e:2d:27:75:8a:72:94:54:a5:90:22:5a:3f:e8:
b6:3a:d2:b1:28:28:50:96:ff:8d:6a:1d:2b:ed:ef:bd:31:80:
e9:62:a0:04:68:79:ef:2b:e6:cb:33:f3:4a:4e:6e:86:bc:27:
d1:39:f5:e1:0e:bf:42:76:26:39:ce:02:e6:1f:11:53:9b:d4:
15:07:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:13 2025 by rpki-client