Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: lFBIzQ00xP6NmYBZDWgp3ztdJXca4oqkzy6b5r7GIcU=
Subject key identifier: 57:E0:0F:95:72:9A:93:4C:76:91:E8:0F:8E:AB:B8:A6:9E:4C:05:53
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 019A72CA598D6719B7B527C3FD303AB4098D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 162B
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: RN7U+NxR0YlXthCCqA8HLc3K4uW2DIC0LvXbooruLuU=)
2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:59:8d:67:19:b7:b5:27:c3:fd:30:3a:b4:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=57e00f95729a934c7691e80f8eabb8a69e4c0553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dc:7f:04:9c:e3:ae:56:54:0e:c8:75:e2:48:
6f:5f:7e:c0:48:8c:aa:e0:56:7d:bb:a8:29:74:14:
1e:c3:f0:bb:e2:16:f5:65:71:e7:2b:54:e0:db:89:
4a:73:43:fe:ef:fb:8f:17:9b:91:7a:83:0c:0d:10:
03:84:3d:bd:88:de:fb:e0:d2:e7:07:cd:86:75:4c:
6c:83:d8:11:16:e9:80:ec:bd:e9:ab:d3:83:21:da:
bf:12:13:71:2d:7f:2d:e7:83:4d:11:2a:92:57:61:
5a:69:7c:f3:e8:4b:f4:c3:c6:59:b4:9d:cd:82:a8:
af:b2:52:cd:0f:c3:94:0c:72:40:77:d1:10:36:f2:
d0:79:84:a3:55:3c:30:5e:2b:e3:88:8c:61:43:a4:
c1:d8:eb:51:72:be:6b:b0:57:ef:c1:97:b0:7b:a1:
5f:97:17:69:5a:56:1e:6b:0e:33:ea:0a:58:8e:f0:
aa:30:42:0c:51:b3:86:83:94:bc:8e:6d:ed:25:ab:
fe:1b:50:c3:9d:56:dc:fa:86:da:7d:ff:16:fb:01:
e5:b8:c2:67:d9:d4:4d:ed:9e:d1:19:6d:e5:97:0c:
25:f5:17:35:58:e4:40:34:80:24:30:8f:50:81:c6:
8f:2c:70:27:f7:be:51:be:0a:fa:f3:ec:db:37:ad:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E0:0F:95:72:9A:93:4C:76:91:E8:0F:8E:AB:B8:A6:9E:4C:05:53
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:22:75:d5:df:a0:eb:14:58:7e:3a:b9:b4:a0:26:52:03:3e:
d7:b0:94:5d:75:2c:1a:f3:ea:89:95:cf:72:be:2f:b5:75:42:
df:1c:d2:6e:34:8e:12:19:19:91:53:9c:f5:85:29:a6:85:04:
45:c7:b6:ad:aa:1a:38:92:b0:79:2d:8f:9d:4d:56:2b:91:90:
81:a5:67:01:ce:6d:35:af:9b:44:4a:80:3b:ff:cb:95:ca:1f:
89:f8:fc:b5:7e:a4:b3:85:59:7f:2f:41:50:54:06:a8:23:88:
94:0b:9d:05:78:ef:6e:95:b8:93:83:0f:a1:58:86:38:3d:17:
3a:ec:b1:5c:73:37:72:7c:60:d1:5b:e8:3e:76:f9:64:10:46:
05:b0:b7:1f:57:48:d5:f8:1f:f2:e4:0c:e5:a6:11:c1:45:d5:
20:9d:04:06:63:cf:17:4b:66:90:97:6f:a5:38:4c:9c:14:bc:
00:ef:df:82:27:96:1f:f3:0f:8d:3b:8e:65:25:fc:dc:dc:70:
e9:8e:41:52:1d:4b:2e:3b:6c:7f:65:b5:c3:19:e5:9b:6d:b5:
8b:64:ec:31:96:4a:91:46:e4:d1:86:a1:12:e9:41:c1:c9:27:
be:44:2b:1c:b8:51:b3:00:16:f2:ba:9b:e9:a0:80:4a:ba:76:
4a:fa:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:50 2025 by rpki-client