Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: dOPfpC4FGGMxHCHhSdvrMjNllMpYvjnFwSphBWOLZXE=
Subject key identifier: F9:76:89:4C:71:D9:32:10:30:A0:B6:6B:F5:4A:B7:02:8D:9D:20:F8
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 0197B6D79528DC22966F6B697F3698016E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0AB3
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: 2ZwjlhretJN7CPQ8GTGWMcGAY2jCJyuTNf1Inb41hIU=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:95:28:dc:22:96:6f:6b:69:7f:36:98:01:6e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=f976894c71d9321030a0b66bf54ab7028d9d20f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:cf:5c:cd:aa:6f:b6:fb:b7:1b:e1:cc:e3:
9f:74:55:4d:2c:ad:46:e3:4c:9c:b7:54:8d:35:9b:
6d:67:f1:32:8a:d0:cc:8c:60:2e:34:8e:83:3b:98:
b2:d2:0e:8c:ad:36:4a:5f:04:5f:4c:ed:7e:6d:4d:
9d:e2:12:67:f6:6b:bd:71:ce:17:25:79:b1:9e:f3:
af:30:9c:57:9d:53:0d:28:59:1b:06:85:94:da:df:
6f:3a:5e:39:15:4c:48:58:3a:fa:e7:2c:b3:69:e4:
22:b6:8d:a1:2a:a7:2b:b4:20:9b:5f:5d:06:d5:6d:
d0:5d:91:22:e6:2c:01:8e:97:20:35:f9:30:a1:0c:
02:ac:19:9e:7c:4f:6b:af:aa:9d:5d:dd:0b:59:67:
5c:0e:47:75:0d:23:2d:20:0d:9b:4b:fd:75:70:97:
28:84:d7:51:6e:ff:83:9e:5d:97:e8:43:72:ae:80:
0d:87:c4:ac:6f:e6:21:1f:3b:0f:2f:c7:b5:ff:b6:
32:ba:94:c1:cb:e2:b9:04:92:25:90:09:9b:a2:20:
43:0d:0c:1b:05:7d:cf:c8:c0:1b:bf:ac:54:1d:e3:
93:a7:28:ec:bb:3d:8d:60:7b:60:44:1a:4f:29:1b:
50:ea:c1:e1:c0:2c:42:dd:b7:0c:bb:19:07:e3:1f:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:89:4C:71:D9:32:10:30:A0:B6:6B:F5:4A:B7:02:8D:9D:20:F8
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:20:fa:ad:c8:41:93:3c:8d:06:7f:ff:24:3d:22:e6:33:
91:83:c3:73:cf:82:34:86:ca:d2:d9:69:35:c7:c9:18:e6:05:
c2:24:65:06:bc:3e:35:f9:42:f9:13:3b:0d:f3:d1:fc:ea:bb:
31:5e:c7:d9:5f:ec:e7:66:4b:65:3d:74:ff:30:e1:98:b9:cc:
01:08:bf:cb:d6:b6:88:4f:30:48:53:22:41:0b:7c:03:31:15:
c5:55:aa:79:07:db:13:59:7f:4a:15:c6:f6:aa:08:8e:3c:88:
c1:0d:39:af:16:69:9f:c1:25:99:bf:22:cb:54:c0:41:0f:71:
b9:77:22:d3:aa:41:a4:46:1c:12:7a:57:39:53:1d:8a:a3:a3:
f9:9d:31:0e:ac:9c:a8:e5:29:57:2e:2d:6a:15:ad:5a:56:ac:
40:6b:46:49:dc:0e:35:88:34:38:18:5b:35:e3:77:6c:59:36:
ae:a4:8f:32:40:8f:7e:7c:e9:45:e8:ce:d8:4f:4e:8c:b5:39:
15:2a:2c:1a:64:73:d2:be:44:c6:15:5c:25:f4:1b:09:d4:98:
26:a9:5f:ea:62:42:c0:0a:bc:6d:af:7d:30:94:e0:d4:5b:8d:
e7:09:a6:a3:fc:51:e4:06:7e:a8:13:1d:93:42:a3:75:f2:23:
78:72:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:06 2025 by rpki-client