Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: RHZEYIS2EJf/H0c9pcEGxF65fVsgnzAmhpGhwhrbiMo=
Subject key identifier: 4A:0F:D3:92:8E:FB:DB:64:C3:3C:02:E7:27:E9:A0:BF:B0:91:02:37
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 0198D515AD532ACE78CBD8B174D8DBD09148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 1359
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
2: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: y1xkEtkBWjrfih8ec/+0IcrTHKOYnBts+rmVyi2AGTg=)
3: IK01XRjBPLd-6jbRM6WX3KlYFaU.roa (hash: hpMtGTgtQBn7QaBbprX3PlSpi2a4sNEtbAx00Rc21hI=)
4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ad:53:2a:ce:78:cb:d8:b1:74:d8:db:d0:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=4a0fd3928efbdb64c33c02e727e9a0bfb0910237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:3a:1d:f2:4d:a9:94:e3:f8:3b:ab:7e:21:
e6:cb:91:8a:78:e9:d0:f8:91:0d:31:77:ce:bf:9d:
06:f1:67:2d:5b:51:d6:86:17:e9:db:95:33:48:4e:
d6:92:b2:d8:b2:31:c4:a3:62:3d:71:f5:03:05:9d:
fa:c1:95:dd:09:40:ce:62:eb:69:f1:9a:91:b4:76:
29:80:e9:5a:97:9a:e9:4b:e1:62:ef:9d:fb:80:90:
d9:f4:84:c8:15:d7:e5:5b:9a:13:e9:4c:f7:a7:5d:
4b:78:20:8b:b7:7e:f4:97:3c:7f:46:c6:2a:0c:9f:
7b:ea:a0:b0:7c:2c:75:f5:96:79:ec:f9:95:5e:28:
e5:fd:38:05:fc:25:f1:cd:cf:8c:6b:6b:7b:64:d5:
ba:18:e7:f6:a5:e3:48:97:e5:29:c9:c9:18:01:43:
aa:d2:ab:32:49:e8:d2:79:1e:d9:50:b6:c8:b4:dd:
1f:b2:34:7a:3f:3a:f7:f0:0b:16:5d:31:f1:13:0c:
cb:3f:c4:63:9e:cf:64:fb:50:54:55:38:6b:9d:f2:
c2:35:38:c2:b1:e4:04:b4:91:ce:1f:43:91:52:0f:
1d:6e:40:20:83:46:dd:47:62:77:3d:8a:5d:b6:2e:
2c:2e:04:64:0b:ff:b4:32:ac:99:77:c0:52:cf:f5:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:D3:92:8E:FB:DB:64:C3:3C:02:E7:27:E9:A0:BF:B0:91:02:37
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c5:3d:0c:73:e5:2a:7a:43:ca:06:81:21:f4:42:e6:e8:d1:
d5:65:f2:ef:f5:68:11:6f:4c:9f:e8:51:28:4d:af:85:0c:da:
93:3d:08:c5:f7:89:66:43:c9:70:6e:6b:13:38:b4:f5:57:dd:
f3:b5:ac:04:e5:ac:06:a0:fd:81:4e:40:22:a0:30:21:7d:8f:
d9:1d:12:51:5a:8a:b9:57:55:78:56:37:1b:a8:ae:68:22:af:
30:55:47:ec:ef:04:2e:55:25:14:db:bc:3a:1e:6f:72:b9:65:
75:09:ad:3a:0e:61:e1:cd:da:aa:6d:e9:00:e1:aa:47:36:9f:
4c:c4:8b:7f:fe:b7:50:36:07:2f:26:da:13:31:71:cd:d9:36:
80:03:6a:f4:89:0a:62:ab:82:d6:57:74:8c:d5:d7:68:ad:94:
83:0a:48:99:bb:35:1c:d5:90:bc:f0:3a:81:41:4a:04:a2:5a:
84:c6:a0:8e:1c:ac:2a:69:bc:3a:26:1c:dc:a5:8f:ac:60:b4:
ad:a3:fc:aa:b9:b9:72:8b:8c:93:f5:0f:f0:e6:49:e7:5b:ec:
de:70:50:e0:e8:82:f9:5e:4c:af:b5:c6:1e:b4:42:47:6a:df:
36:3b:2f:61:9c:8a:81:93:f5:88:7c:47:a2:a7:ad:8e:6a:db:
d7:37:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:06 2025 by rpki-client