Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier: pjT8OX4KdFzSmOXpUgs/TVoKjKxsxDM35VDi9zsev6I=
Subject key identifier: 97:BC:11:DC:89:2F:D0:CD:45:50:B1:B7:BB:AE:0A:1C:E1:AC:FA:F2
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 0199FC8F630B1A4D04264DAAF30C741E4654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number: 024A
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=)
2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: 4aJoxvyZhxo8412Pjg3Wr3Mj5ahmCnJdYN9gJYtbw5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:63:0b:1a:4d:04:26:4d:aa:f3:0c:74:1e:46:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=97bc11dc892fd0cd4550b1b7bbae0a1ce1acfaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:04:1f:76:2f:49:c8:f8:98:b2:f7:be:53:
ca:f7:85:7b:78:93:4f:14:4a:28:09:ce:6a:9f:db:
a6:a0:f8:28:e2:8e:03:fc:86:30:29:fa:7a:9e:34:
fa:91:61:ac:57:cd:15:98:c5:6b:8c:cf:4c:a9:17:
11:94:a5:5d:bd:63:a6:e1:9e:69:ba:79:90:cf:09:
c5:53:b4:8a:88:3d:c9:28:eb:a2:d0:c4:29:fb:6c:
8d:c8:c0:eb:89:5a:e1:33:f5:a5:22:f2:6c:eb:66:
a8:ed:ec:f0:83:d2:79:db:c3:93:6e:9c:c1:40:90:
02:f4:43:79:7b:c0:81:ec:42:81:24:11:71:9e:bd:
b9:cd:e2:da:c3:51:bf:a0:38:3b:68:0a:6b:bf:7e:
1b:40:94:73:e4:84:de:4e:d9:5a:4d:ef:cf:32:4b:
17:2e:49:40:ed:20:4b:33:ed:b5:fb:55:f8:a0:2f:
cb:08:78:35:72:90:f5:a9:41:91:c6:d6:eb:65:c9:
5f:61:73:17:31:50:6c:69:8d:f0:24:03:09:98:ce:
93:7a:a0:a3:01:e9:ca:ab:a1:30:d5:6e:cc:c5:0c:
95:83:80:e1:f0:6d:d6:e9:82:ba:ef:9b:76:79:f5:
76:b8:2e:15:79:80:b8:49:3f:30:75:31:8b:10:10:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BC:11:DC:89:2F:D0:CD:45:50:B1:B7:BB:AE:0A:1C:E1:AC:FA:F2
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bd:2f:f0:3f:96:68:89:fd:8f:af:12:5d:44:89:1b:63:ce:
a4:2f:c9:c0:51:b9:2b:67:0c:ac:26:ff:e5:c1:0c:ab:58:78:
e2:f6:d7:82:25:d6:42:87:95:6e:b7:93:31:6b:ae:5d:af:ec:
61:8a:89:01:bd:02:3b:ca:53:fb:6c:b4:d6:31:94:41:a1:88:
48:e0:a9:e6:1a:96:06:fa:69:36:c5:43:1e:9c:00:f5:57:7a:
04:23:bc:8c:e6:63:3e:b7:65:11:1a:55:9a:45:3b:68:5c:ad:
60:33:b3:6a:24:f5:37:fe:a8:66:95:64:ed:a6:9f:52:53:96:
0b:01:d8:e6:bf:94:86:4d:d1:55:2d:19:a2:ef:90:f5:a3:33:
b2:50:f8:35:54:e6:36:76:2f:59:ee:7b:05:a7:2b:d2:55:6f:
04:13:cd:d8:09:94:f9:c7:65:f9:f5:66:9f:0a:a7:f6:a5:4a:
8b:4e:05:79:a4:4c:4e:69:45:1e:62:06:12:8f:e9:65:91:9c:
ce:79:18:af:26:d9:bc:da:24:e1:52:37:dc:57:03:60:41:54:
a2:9d:d9:3f:74:c1:b5:a4:03:96:0f:4b:2c:21:2b:7b:ce:c0:
c0:ff:76:34:b8:72:88:3f:83:49:90:1d:6e:22:a0:b7:3b:11:
73:35:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:31 2025 by rpki-client