Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: pFzUMKApi8/xXosCNuFViWV3gKSJjzhIyo3YgxVqKq8=
Subject key identifier: 01:98:01:5A:AA:C2:A7:12:1C:FF:2E:EC:A7:26:00:69:7E:CD:05:C5
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 0198D4A861A526170E7088E4B15F292B39CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0B47
Signing time: Sat 23 Aug 2025 02:01:01 +0000
Manifest this update: Sat 23 Aug 2025 02:01:01 +0000
Manifest next update: Sun 24 Aug 2025 02:01:01 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: GjAOAAWmdMRj5Xi8VYQiEXZ2V13mzSqnTUHT3U9M7B8=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:61:a5:26:17:0e:70:88:e4:b1:5f:29:2b:39:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Aug 23 02:01:01 2025 GMT
Not After : Aug 24 02:01:01 2025 GMT
Subject: CN=0198015aaac2a7121cff2eeca72600697ecd05c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c8:8f:be:fc:b8:0d:14:1c:b8:5f:6e:26:91:
6f:6b:48:fa:2c:7b:f5:37:68:f8:04:96:6c:00:12:
9f:83:2d:04:98:10:3c:7e:c3:d3:d4:5a:fa:8a:33:
5e:f9:14:f6:4d:a5:3c:fa:b5:95:77:6d:d0:4a:27:
97:4c:69:9c:2b:e4:9b:84:40:3e:0b:bf:e3:87:33:
17:28:41:4e:85:f0:99:51:75:5e:c8:e1:c6:80:5b:
7f:a7:fa:d2:eb:21:1c:94:cd:4f:1e:5b:dd:fc:f4:
9d:fc:27:e6:07:b0:d3:1b:10:0d:b2:7b:f3:89:f7:
36:42:35:be:0d:f1:04:06:e5:e5:a6:71:07:58:6a:
28:07:fb:12:db:d2:60:14:86:1e:62:19:f2:89:1a:
64:f3:1c:e6:4e:1d:e6:17:ee:49:b4:27:61:f6:3a:
53:52:db:13:eb:f9:7d:1b:35:17:fe:c5:f9:74:76:
ec:89:1f:21:b6:03:b5:82:4a:8b:dd:42:bf:c6:95:
bd:1a:35:75:ed:95:9a:a2:4b:18:4e:69:14:a4:94:
92:d2:e8:17:5c:50:8b:72:97:a5:2b:4b:ff:8b:3f:
b1:ca:83:b2:69:48:e5:01:c4:6b:f5:73:9f:32:05:
a8:b3:00:d0:e4:15:56:6f:94:ed:54:0e:33:12:ce:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:98:01:5A:AA:C2:A7:12:1C:FF:2E:EC:A7:26:00:69:7E:CD:05:C5
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:da:3f:02:4e:ec:c4:37:ad:db:bf:4b:bf:e3:6c:19:72:a7:
97:f6:65:10:e1:04:88:09:49:65:24:bd:9a:01:2a:32:4d:40:
3b:8e:8c:c9:d6:03:6e:84:5a:63:a0:42:bc:e9:de:ca:87:f3:
4e:96:99:67:7a:e5:35:42:c5:e5:93:ea:bd:3f:bd:a4:dc:d6:
9b:f3:5f:0b:ee:7e:96:1e:48:4e:3f:f8:a0:56:76:d0:73:4d:
8b:7e:cc:ef:e6:c8:71:de:6e:ac:e6:8b:46:12:1a:5b:4e:84:
17:68:fd:5e:c1:21:ac:96:c9:8b:cb:7a:d5:62:32:83:3a:8d:
d4:e2:f1:6b:89:42:78:28:a0:52:7c:e9:90:ca:3d:49:03:5c:
c4:b1:60:74:f6:be:d4:65:65:b5:af:04:1f:aa:35:d0:b8:37:
f8:58:20:a5:ce:12:fc:44:35:1c:93:0b:7e:4b:87:69:7d:3b:
99:4d:69:a3:8d:38:9c:13:b6:bf:95:71:1f:b0:3a:cc:86:c9:
c9:01:6f:de:ff:74:3d:d5:0d:30:41:6f:0f:8c:34:14:d4:29:
05:7c:e3:a2:07:24:f0:dc:c2:7f:35:8e:4f:42:11:dc:a5:12:
e5:4a:f8:c2:f2:8c:60:2d:f1:22:f7:7d:87:4e:28:cd:13:68:
de:a6:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:59 2025 by rpki-client