Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: enpXstR6PN1RFtM7Qd26NZq94/83MDYju2HGa9FDT7k=
Subject key identifier: 9D:A9:E3:4F:BF:A1:D9:FD:D3:47:0B:4E:AD:95:3F:66:78:C8:43:E2
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 0198D660A3020833F6644AACE926E80C8E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: mA3H5ylC+3iv1owaTGOXz3A5wWeBaeudTt+vHM3Po+E=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a3:02:08:33:f6:64:4a:ac:e9:26:e8:0c:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=9da9e34fbfa1d9fdd3470b4ead953f6678c843e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:a4:e4:83:bf:0d:73:ef:e4:bf:08:99:e3:
5c:d3:30:fa:21:56:42:d9:a9:7f:1c:34:80:11:29:
c5:62:e6:61:98:82:0e:80:c1:ae:6a:6b:6e:d9:7f:
50:f7:90:c6:59:46:38:b2:62:1a:44:f7:ba:73:ae:
d9:0c:33:72:70:e6:0f:9c:82:cb:58:54:bc:bd:00:
b1:35:1d:5a:a0:9c:c7:c8:cc:34:40:75:02:c0:46:
9d:92:f4:d4:ce:c9:95:51:fe:33:94:48:cb:4a:d8:
de:28:17:5b:d1:f5:df:b9:6d:3c:00:38:68:3f:1f:
5e:f0:2c:06:9d:1c:b4:4d:2e:d6:38:bb:42:12:1a:
32:90:df:62:70:78:2f:0f:26:ff:21:17:99:e3:7b:
ac:24:02:79:c8:e8:df:39:98:45:79:77:dd:38:43:
ec:f4:0d:e0:5d:7b:08:b1:34:9e:52:0b:8a:f3:aa:
58:30:ee:b1:15:9c:b6:d6:e0:69:22:4d:15:65:63:
03:82:69:8a:e2:3f:f6:d1:87:9f:b1:6a:c5:47:8b:
3c:7c:e6:2a:c5:4b:52:7d:67:cf:83:74:08:08:e5:
d9:3e:da:fa:7f:0a:b9:8a:2a:c0:83:f2:95:a8:f0:
27:a6:a4:44:5b:c5:41:04:bd:70:cd:5a:41:51:a0:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A9:E3:4F:BF:A1:D9:FD:D3:47:0B:4E:AD:95:3F:66:78:C8:43:E2
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d6:b6:b1:2e:cc:a3:07:11:67:6c:df:1c:79:ff:b0:d2:41:
e6:bc:54:ea:15:5d:c4:12:9b:01:3b:94:26:8a:35:4d:5f:51:
24:d0:cb:95:03:2b:02:d8:34:c9:4a:7e:f6:3b:f9:c5:e5:ac:
eb:f1:c5:38:58:b4:05:b6:54:42:c8:36:b3:24:87:3b:0c:dd:
1a:04:a9:e5:d0:9f:33:93:84:8f:df:9f:8c:54:2a:21:78:68:
0e:7e:05:8a:94:9b:ca:23:4e:49:40:67:37:27:1b:08:11:36:
bc:8e:09:6d:f0:b6:63:cd:05:f0:00:23:4d:a0:a1:d6:13:05:
58:74:bf:c7:95:c1:43:97:1b:5a:41:cb:d4:15:f5:c9:03:99:
cb:be:33:0a:08:c2:ad:1d:61:84:a4:a8:d9:4f:3d:ed:d0:4c:
f3:43:18:a9:58:4b:4b:65:23:e9:20:07:09:0d:72:c9:d2:f1:
4f:31:27:fd:a6:32:40:51:98:5c:4c:95:15:ec:aa:38:2c:18:
5d:96:50:aa:6f:5d:be:2c:f8:cf:28:29:c0:e9:70:05:f9:4f:
8b:36:8c:cb:9f:ca:a7:dc:ef:60:9b:1c:7a:7e:76:c3:7f:9c:
62:c2:db:c2:51:c5:8d:e4:73:17:a9:98:c2:1c:fd:fa:78:b3:
20:f8:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:03 2025 by rpki-client