Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: zw0wfSumKyomGKZbja109ZgyHpYhjRCqAioTZz/xQNg=
Subject key identifier: DC:28:97:E3:9E:45:DE:FE:AD:13:3F:00:F8:60:F8:67:20:D8:D9:F0
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 0197B6D771EE167650BE70B538D24BDF1764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 12C4
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: 3x4lyNPFV_PxlA3wI9Ks-6pzfts.roa (hash: /RTGCKhsNS1R75WUzsn5pnztjjekAC7jsZZLRjCrE5s=)
2: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: rwhv2ALpIAp/doh895H9vEYsx+irvqvPESN3D/wv6Qc=)
4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:71:ee:16:76:50:be:70:b5:38:d2:4b:df:17:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=dc2897e39e45defead133f00f860f86720d8d9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:da:c2:0b:4f:af:8c:82:5a:2f:7c:53:7d:
16:0c:a8:9d:da:cd:a9:87:67:ac:76:e5:8a:d9:f3:
56:b6:09:d7:19:1e:17:00:56:0f:cc:9a:6e:3d:4b:
a3:5b:d3:34:7f:1d:7d:df:df:df:61:f4:97:92:6f:
26:bc:43:9d:da:f1:4b:f7:f1:d2:c3:ad:09:dd:46:
ef:5d:49:f4:be:60:62:70:ee:85:7d:96:02:c1:c4:
0a:ff:d2:fc:b8:eb:7f:60:0b:a1:74:e2:6c:d5:e2:
c2:bd:e5:54:4e:e3:a0:d6:76:23:7a:37:c7:79:60:
d8:a6:ea:c3:45:b8:a9:f5:7e:60:06:e2:63:6a:da:
13:3a:f6:b7:e4:41:27:92:98:ae:26:06:d5:bb:97:
98:35:a2:77:fd:af:bc:42:2e:ab:f9:81:d0:29:e4:
07:dd:25:27:55:d3:1e:88:8b:c2:9c:6f:2b:cd:14:
fa:69:a2:fb:f3:6b:89:90:19:dd:23:86:b1:b7:dc:
cf:e9:cd:91:60:85:16:6a:20:90:33:e4:44:1b:44:
f3:76:8b:e3:de:d4:9b:2d:08:be:58:07:51:a6:b7:
fa:8e:88:85:29:9e:19:fc:75:4f:81:3e:75:89:2f:
4c:7d:e8:29:b9:67:1c:3d:b0:64:5d:46:50:fa:c4:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:28:97:E3:9E:45:DE:FE:AD:13:3F:00:F8:60:F8:67:20:D8:D9:F0
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:e1:28:0c:44:ab:de:c7:b9:af:cd:c7:bb:0e:89:be:c3:
8c:8a:30:12:b3:b6:39:57:27:99:5a:4d:4b:a7:fa:7e:6b:14:
4b:f0:fe:84:34:29:2c:95:9d:87:c8:c4:03:cc:90:82:b2:5e:
67:0c:78:25:c7:79:d3:e7:4e:a5:e2:f3:20:5b:11:2d:9b:35:
97:1d:c8:19:10:c1:a2:f5:75:d1:29:4f:71:4b:8f:5f:e0:9c:
80:42:ae:8d:29:43:f3:32:ec:1e:cf:8e:94:b9:aa:0f:3a:14:
e6:f3:22:49:a9:49:41:66:4c:8a:16:6d:30:47:f5:90:f7:96:
7f:75:40:61:10:9f:da:02:ad:62:ec:eb:02:7b:5c:c6:17:c5:
04:be:52:95:1c:42:df:cf:93:dd:98:52:c2:ba:7a:dd:57:05:
1e:79:06:7e:ed:cf:00:62:24:22:5c:12:29:0e:61:0f:0c:37:
72:25:2c:3a:62:e8:d8:80:fb:ca:ed:7c:a8:b7:bb:84:9c:ce:
c4:db:d8:7a:09:8e:b5:b5:be:cc:96:64:92:83:06:0a:b8:c9:
c0:25:09:bf:ac:e9:3d:64:85:66:07:92:56:65:b4:b1:0e:ee:
0a:06:21:01:aa:10:16:ed:58:31:10:13:8c:1c:f0:75:12:f1:
29:16:29:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:21 2025 by rpki-client