Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: fJl7XtplPAidfiTNHTHmXfwEm69LxYY0VPs9QL/kRvw=
Subject key identifier: C8:D8:A4:42:08:67:78:CC:A0:FA:1A:DC:B9:72:35:A5:1E:A4:AA:CC
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 0198D4738F7BC971C6879C28A4791B7A7EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 1175
Signing time: Sat 23 Aug 2025 01:03:19 +0000
Manifest this update: Sat 23 Aug 2025 01:03:19 +0000
Manifest next update: Sun 24 Aug 2025 01:03:19 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: wYr+R/IME+1Edwf3ByxRB7mRf6swrPzpuyLqBjaVEVs=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8f:7b:c9:71:c6:87:9c:28:a4:79:1b:7a:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Aug 23 01:03:19 2025 GMT
Not After : Aug 24 01:03:19 2025 GMT
Subject: CN=c8d8a442086778cca0fa1adcb97235a51ea4aacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:87:29:1a:87:bb:d0:77:75:ad:95:a4:fd:
e8:03:08:af:b5:71:b9:6d:09:52:62:4e:28:47:a6:
1e:e3:1d:50:f3:5f:1b:4f:eb:a2:47:20:2b:ab:ba:
6a:e4:00:c8:04:7d:85:c9:5a:c8:d0:d1:d7:82:18:
67:ed:32:ce:c9:7e:a7:37:a3:49:d7:80:09:37:e1:
7a:be:f6:a7:d5:0e:0c:cf:a4:05:94:64:ab:e8:15:
c7:f6:5a:f2:c6:37:04:87:ec:ed:1d:81:d4:17:ab:
e9:a7:4e:88:d8:e8:91:8a:7b:24:f0:0f:de:d1:22:
bf:01:a9:7a:ee:2f:12:67:0b:b9:25:2d:dd:7e:d0:
f8:f2:b3:00:da:50:fc:7b:3f:bd:2e:64:37:fb:04:
29:7f:06:5c:e7:db:bb:8c:38:40:2a:ae:04:ac:be:
aa:f8:42:71:5f:5d:a8:02:71:72:16:a1:ba:ab:77:
0b:8e:3a:b9:0b:eb:c6:a3:b3:fe:74:7a:b0:03:af:
9d:2d:14:42:73:bb:17:f6:f6:3e:ec:39:b9:fb:81:
6a:98:46:66:f7:3e:bf:5a:28:5d:84:ee:91:dc:d7:
25:36:0a:7a:51:e0:0f:8f:fa:cd:66:4e:bf:db:fd:
aa:5c:0b:51:a7:50:2a:1c:d9:c4:f1:39:c2:1b:46:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:A4:42:08:67:78:CC:A0:FA:1A:DC:B9:72:35:A5:1E:A4:AA:CC
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:68:f0:f1:03:41:40:ba:ea:a3:f1:d9:cd:44:31:dc:a7:66:
41:b8:0c:4a:47:3b:9b:40:5d:6b:74:60:c7:f8:e9:c1:97:e2:
35:62:26:f0:ca:32:8e:8e:56:02:84:b5:49:f2:5f:41:59:fd:
fc:18:e9:63:b3:1e:8e:ba:a0:22:1f:5c:85:7c:c4:dd:f0:69:
33:c9:ca:4b:14:80:1e:57:2a:66:30:1a:4d:d9:51:94:bf:c6:
18:20:ae:6a:c6:7a:56:eb:5e:8d:1c:c5:a1:a0:6f:ec:1a:f3:
8f:0b:00:12:e4:2a:ff:20:5c:8e:90:dd:b4:85:a7:e5:a9:93:
bb:3d:74:53:89:56:fb:00:75:dc:ef:20:cf:e1:b2:5e:a5:1f:
9e:4b:51:6f:c8:9e:1e:82:2e:8b:17:a3:58:41:f8:f3:e7:7f:
ed:94:c9:29:d0:3c:22:ce:34:a5:cf:92:9e:72:63:eb:d6:61:
89:fd:bf:df:bf:17:f5:e0:ca:2c:9f:07:88:dd:55:65:38:0e:
90:c3:39:09:63:68:db:a3:b1:d8:dd:13:1f:14:9e:7e:d7:b4:
aa:ff:1c:0a:ca:be:b4:ec:58:b8:14:2b:ff:64:ab:bc:0a:b7:
b6:a7:8b:15:46:8f:5f:98:6b:b5:76:a8:72:c0:ff:f9:4f:e8:
b4:86:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client