Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: qfHPNuTdJAjurdnr5cyaCBNMlqldYym5gIeNCcNJ0yo=
Subject key identifier: 2B:51:93:2B:60:30:A1:DC:9A:3D:E8:8F:C2:9C:E9:94:57:19:5D:6F
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0199FBEC14167A4EA3D5B63D259975A1F715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 120E
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: v+7t8wDfxTIvdswrojhgBAak74aZLbzNB1YEH07nbZI=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:14:16:7a:4e:a3:d5:b6:3d:25:99:75:a1:f7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=2b51932b6030a1dc9a3de88fc29ce99457195d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:f0:3e:56:9b:3a:65:b4:f2:38:49:ea:49:
f1:e4:9e:e2:56:2f:82:b8:db:a2:ad:59:53:1b:83:
0f:68:34:92:d2:43:88:84:51:ca:b9:5a:73:2b:c4:
6f:a2:52:09:6f:75:83:46:1d:23:b4:f5:6a:ae:39:
96:c2:fc:6b:0d:93:a5:6e:68:06:84:c7:6a:21:23:
69:c3:42:e6:1a:92:ff:6b:c0:92:0d:85:8d:57:70:
cc:fa:51:c7:62:33:75:2c:41:d5:5e:72:cf:b3:e9:
48:8f:63:34:4a:13:31:58:32:76:0b:bc:ff:16:a7:
81:48:cc:7d:4f:8d:b5:ad:cf:32:2d:90:df:61:02:
8f:cd:98:d4:b0:f5:67:8c:b3:47:09:95:dd:d7:7e:
e7:da:15:28:36:79:90:73:0d:ba:6b:71:4f:86:bd:
79:3c:6e:38:be:3d:62:dc:d4:2b:ae:11:d8:25:6b:
9f:2f:9d:e6:d4:39:df:7d:23:95:33:0a:2f:d9:49:
23:37:8b:51:7d:31:16:2f:ed:c5:54:9f:8e:c8:14:
98:28:e4:3c:51:2f:46:5e:da:f3:0b:c7:f9:b7:b5:
eb:9b:24:c2:df:b0:45:9e:7c:c1:06:96:3d:b1:79:
c3:21:ca:e0:72:04:07:5b:18:62:cb:b9:6f:d7:8a:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:51:93:2B:60:30:A1:DC:9A:3D:E8:8F:C2:9C:E9:94:57:19:5D:6F
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:33:f5:68:a5:b6:39:fb:0d:21:60:18:47:72:57:48:df:45:
79:ff:8f:83:69:fd:fd:08:12:31:a2:eb:b6:10:3d:a3:ed:a6:
db:c6:97:90:20:19:fe:d1:84:ce:c8:c3:c0:4b:66:dd:a9:6d:
b6:0e:25:e0:99:57:e1:5f:ed:44:a9:96:26:7e:76:9a:55:3b:
a0:71:c3:dc:68:ae:4c:13:22:61:97:61:10:44:7c:e7:40:e6:
d8:e6:3f:6f:a2:9d:25:8e:75:35:0e:f1:d0:bb:c0:f3:d9:06:
03:fc:d3:70:68:b7:87:4d:b1:7a:36:ae:fb:72:66:83:44:b5:
69:56:be:0c:db:80:d4:23:1b:f5:8c:3d:77:c1:43:04:69:b1:
2f:25:38:47:b3:6b:28:2b:0c:e9:88:e4:9f:c4:70:7a:72:fc:
ca:2c:46:5b:a2:a0:f8:6e:8f:61:06:aa:3a:ea:76:07:dc:45:
66:98:16:4a:e2:57:ba:19:22:41:35:d0:31:1d:8c:6c:97:3b:
76:21:a2:7b:ed:e8:82:d1:09:85:09:cd:31:e3:8a:38:93:a6:
00:40:79:28:24:c5:6c:3d:90:2d:b8:7a:b4:16:a3:c0:19:f0:
c1:60:54:71:06:12:c0:98:2e:f2:c8:4b:2d:aa:5a:c7:39:41:
16:e5:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:51 2025 by rpki-client