Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: ZyTCbapAlW8aIHrHszP94LOy6mTDj/Jz5FAPLMGly5U=
Subject key identifier: EF:1B:E4:34:2D:52:53:C6:8F:AA:B3:D4:F4:AB:03:2F:A5:D8:4D:B5
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 0198D6606DDC069BBC2DD9031435CA86B9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 159B
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: vEuaqvvMLqxayWonNxGIw/TJ2YZ4EDZ5foEd8tXUQak=)
3: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6d:dc:06:9b:bc:2d:d9:03:14:35:ca:86:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=ef1be4342d5253c68faab3d4f4ab032fa5d84db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:cb:fb:86:cc:f3:03:3f:07:b9:e9:bc:1b:
9c:7f:91:12:d4:4a:14:c0:74:20:30:48:ce:48:00:
49:70:e6:c9:cb:f0:71:da:68:3a:a1:f2:9d:31:be:
2d:2c:23:19:d0:df:a8:81:e9:7e:13:f9:1e:f1:8e:
dc:c8:65:f3:a5:be:7e:4d:61:78:04:90:3f:b5:40:
a3:ec:5b:c1:54:ff:60:98:89:ca:d5:19:81:c6:5f:
7a:6d:32:ce:08:07:93:d4:0e:75:c1:78:79:20:5d:
fb:e3:d0:1f:b4:33:44:7b:35:5e:f0:55:05:c0:50:
21:ec:bd:18:ca:57:ce:43:fe:bc:ad:20:6a:4e:b0:
8f:49:a0:90:05:c7:e6:ae:c8:ea:b6:f4:a5:86:f0:
bd:d2:bc:c6:e5:ca:02:6d:38:6c:a3:f3:c5:ca:d5:
29:c5:14:73:bd:21:f5:a8:57:1b:2f:01:8f:a7:d9:
33:24:80:45:e4:dd:65:d8:35:5c:bc:8e:ce:19:a0:
40:15:44:80:c0:b1:ca:57:20:99:9c:f4:f9:49:42:
25:77:46:99:46:df:75:0a:02:d7:e9:66:f0:fa:f4:
5d:91:c8:4b:47:5a:6b:94:49:5f:55:b6:95:4e:af:
c4:8d:f7:30:45:a1:f9:eb:18:ce:53:41:35:ab:e2:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1B:E4:34:2D:52:53:C6:8F:AA:B3:D4:F4:AB:03:2F:A5:D8:4D:B5
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:f9:b3:3a:e2:81:fa:1d:54:d7:8a:0a:5f:e9:e7:b1:d8:
35:11:27:d2:26:87:f9:75:98:11:d1:9a:e5:62:b3:a1:f1:f4:
f5:a5:85:c6:5d:f4:f4:a0:8a:54:04:64:6e:72:9e:af:b7:f3:
1d:62:e0:97:ce:fa:89:81:be:50:62:53:71:2c:3b:40:2e:45:
12:19:2f:58:81:ba:95:68:56:66:ae:f7:d8:8b:59:ac:b0:e7:
b1:63:45:03:f8:28:79:0c:47:93:9e:fd:5f:0b:83:97:91:7d:
72:8b:bb:9c:30:f8:2b:ba:58:80:f6:c4:f9:27:ab:19:ee:a2:
44:7e:23:19:3e:05:30:5d:a0:25:77:03:cb:a0:43:08:36:09:
15:07:f5:b6:76:be:7b:16:65:9a:fd:22:21:06:d4:82:9d:5f:
60:5a:02:8e:46:4c:2b:53:21:39:31:c7:48:ec:a3:ee:36:8d:
35:e2:1f:d3:36:a3:c4:dc:3a:50:24:8f:17:54:15:c3:5f:a5:
87:d5:f8:ae:46:24:f1:eb:6a:0c:7b:2c:bd:6e:35:fa:dd:2f:
76:63:f6:74:0d:62:a0:0f:c1:4b:97:0b:f9:70:a1:71:53:e2:
ea:a2:70:61:b2:6f:01:74:90:58:86:61:b5:8f:99:55:0e:03:
47:1c:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:59 2025 by rpki-client