Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: qkW+/WGdrcwl0ORjNamlBmQSXWW7FkVgUIxRtc8NjYs=
Subject key identifier: 49:EA:8F:C7:E0:61:11:8B:EC:DA:94:CD:75:15:32:49:78:E6:F0:56
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0197B6A1543540B8EDB40627A1C639FCEE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 10E1
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: /DUcgBCc5nqJ7T+PkIwooVM8MVBYVNGDKdsgwCbm1nA=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:54:35:40:b8:ed:b4:06:27:a1:c6:39:fc:ee:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=49ea8fc7e061118becda94cd7515324978e6f056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:cf:45:a5:e8:6f:82:35:e9:dd:0d:c5:25:
1e:a0:e8:03:4f:20:52:a0:37:8f:ab:9a:32:03:4f:
6a:2c:b9:1f:7d:a6:22:66:ac:fd:44:dc:d2:75:11:
31:76:26:46:c1:67:46:bc:11:4e:6f:2e:13:7c:fb:
12:c7:ef:3c:33:25:31:81:08:f8:36:72:1f:c8:06:
28:f7:46:ea:1e:a0:e7:b4:b5:a0:45:6a:92:d6:40:
bd:30:b9:21:1e:7e:ac:a7:e4:28:8c:24:44:7f:b7:
ec:06:8a:48:6e:dd:84:f6:65:c3:24:ad:4a:05:68:
e4:32:cc:a8:ef:22:77:eb:6d:75:a6:01:0d:60:fa:
de:ae:88:c5:e6:67:d1:fa:b4:37:5b:df:fa:5f:c5:
17:8c:35:c8:5e:54:26:79:26:bb:b8:8d:12:42:6c:
a7:94:18:34:5b:85:df:23:07:74:26:3c:5e:37:41:
2d:e1:28:8d:10:f9:90:a4:6a:4a:2e:9e:d9:d2:c5:
09:36:07:c0:91:61:47:2b:17:97:06:4b:cc:f1:c6:
6a:28:bb:ce:1e:61:e4:06:0b:5c:40:99:fd:cb:3d:
04:d9:4f:4b:55:1f:d6:32:45:be:5b:dc:15:e4:98:
d4:0b:b9:79:81:ab:a1:c0:c9:28:87:aa:16:35:13:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EA:8F:C7:E0:61:11:8B:EC:DA:94:CD:75:15:32:49:78:E6:F0:56
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5a:83:5e:1e:87:68:08:69:38:7f:ae:7f:40:fb:8c:bf:68:
3b:06:a7:bc:29:6a:6b:ac:cf:85:20:4d:eb:78:b3:df:a1:a5:
da:4f:9d:54:b0:7b:02:8b:c7:c0:f8:af:96:6a:02:43:b7:9e:
9b:2e:0d:61:05:96:7b:e7:1d:50:1a:87:40:57:80:a0:f7:9c:
e8:dd:96:d6:dc:2d:24:6b:eb:3a:ad:95:44:6d:95:93:88:40:
bb:de:e9:07:e5:7d:8e:06:90:4b:b8:94:66:33:02:ec:1c:d4:
29:87:c8:6b:65:15:cd:7c:b5:87:5f:ee:c7:8a:75:33:50:ac:
84:42:dd:e5:ff:07:02:20:8e:e2:be:68:32:c6:15:10:d5:82:
e3:e4:ee:7a:91:63:1f:e1:98:9c:7d:45:cd:6a:89:57:ae:69:
e1:ce:48:80:cd:57:d5:39:24:0d:4d:4a:7c:0e:ea:43:b0:2d:
c8:c6:37:0b:32:58:e8:92:85:6b:b3:64:aa:70:6f:80:4c:26:
ac:e8:64:d6:5d:06:b6:4a:20:58:71:7d:5c:4d:af:6e:c3:0d:
85:f1:b2:55:dc:68:e4:b6:82:69:ac:3a:31:05:ff:2f:d4:a2:
b5:50:11:d4:e0:38:6e:d2:b3:fd:23:a7:d6:4f:98:9f:1d:de:
ba:40:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:34 2025 by rpki-client