Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: 2z23qgrTVTCLKtkrr05VOCPEx8S5DkW95cZXzErPBvE=
Subject key identifier: 48:E8:AB:7E:DB:25:C7:11:9F:F2:FB:46:13:F7:39:77:0F:48:2F:30
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 0198D583ADFEF0999FC8F2CB517FE102C93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 13EA
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: 0mGXGaCdx8b0IvVKiGo7317nAQw.roa (hash: JBoOppkoR2+2kdzZgQYn1vdyTCQusp5l9Um4sKeOKzw=)
2: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: jrqDXqTH6GdSfsVUhwP49Kfd7Ai1Skam4KfnYsHSBYo=)
3: P3rY7Cmn84Ni11FziReIJTvis6Q.roa (hash: SHFkgztCNHhWPjHt5nCk5Bgx6ribEhAmnRifNZCrpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ad:fe:f0:99:9f:c8:f2:cb:51:7f:e1:02:c9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=48e8ab7edb25c7119ff2fb4613f739770f482f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:63:6b:d2:c9:14:e5:80:02:15:26:a2:60:
1b:84:86:73:a7:77:12:60:b2:db:07:ce:6f:ac:fc:
e3:5a:09:10:2b:09:17:33:bc:aa:f6:fe:6a:69:c6:
f3:f8:cd:b4:09:48:93:c1:f8:af:f5:89:08:cd:1a:
8d:5d:52:fb:1e:22:b4:cd:b9:d2:94:2b:e1:21:45:
96:19:37:79:d7:96:61:26:c3:22:ce:95:7a:c1:4b:
05:01:1f:88:64:9d:44:83:c4:d0:ba:63:ae:e4:11:
21:67:a8:14:7b:aa:e1:04:99:33:76:83:4e:8c:5f:
5f:0e:81:cb:7c:94:a9:3a:93:ff:d2:0d:40:3f:06:
7a:3b:cb:7c:5d:de:61:c9:01:9c:38:90:92:5a:3d:
94:8e:24:5c:18:71:4f:35:9f:83:65:a8:4d:b5:a4:
a3:fd:49:55:36:53:0c:8b:bd:53:c6:cc:00:88:17:
71:f5:41:cc:5c:b8:62:62:45:22:88:5f:82:f5:79:
0b:8d:c1:8b:e5:be:78:5d:5b:03:d2:33:e2:2d:47:
09:f9:f4:f4:c6:8a:0c:fe:b1:0b:10:32:50:d9:b6:
47:ac:4f:f3:7a:17:0c:2d:be:90:a3:9a:6c:28:d5:
0a:c3:c2:0c:d2:bd:0c:16:ca:0d:c3:5f:1b:36:0e:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:AB:7E:DB:25:C7:11:9F:F2:FB:46:13:F7:39:77:0F:48:2F:30
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a3:a3:58:c5:80:ff:e9:d5:f2:fa:eb:21:f0:3d:ce:c5:fb:
4a:f2:97:86:a8:f0:8e:5e:6b:f1:5d:88:67:25:73:64:bd:84:
90:e1:17:7c:a3:5d:41:05:55:63:3a:ce:8e:c9:64:62:6c:6a:
a7:c7:96:fa:5b:c8:32:de:2d:29:1c:cf:5e:6d:79:c0:fe:ea:
16:a7:ef:ec:21:50:84:4a:9a:51:96:c3:84:42:ab:17:df:2a:
3a:21:52:cd:61:0e:26:d4:02:81:0b:42:28:3f:ee:77:38:95:
71:a1:ec:37:df:b3:d7:c2:3f:ea:5f:8e:1b:fe:6e:62:53:63:
a5:6c:77:28:58:4d:f7:57:dd:39:0d:aa:50:11:aa:fa:d8:81:
3d:8c:dd:df:56:3e:c2:00:24:94:04:2f:ea:8a:30:a3:2d:e2:
f0:ad:63:70:6b:a3:15:33:d5:39:1a:71:98:2d:bf:b1:59:08:
ad:f4:3b:8a:94:b7:0f:00:32:9b:0d:d4:a7:cb:98:d7:f0:4b:
5b:f2:fa:b8:d7:a0:8d:77:2c:82:45:54:35:f5:48:2e:52:99:
5a:8f:3f:ac:4d:fa:89:e2:d2:3d:c0:59:ab:ae:ca:9d:6d:bb:
a9:75:57:9b:15:0c:3c:d0:09:ac:9e:c5:63:69:79:a3:d1:0e:
98:4b:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:05 2025 by rpki-client