Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: J5Tteov5nBvhBmi2jAZocZRekDgfZzjXhFQdIFg9olc=
Subject key identifier: A3:AD:52:B1:B1:69:C5:71:E8:7B:23:A1:22:2B:0A:7B:31:7D:BF:D4
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 0196526DA974EFC5C2F56C05FA283F63A4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 1408
Signing time: Sun 20 Apr 2025 09:00:40 +0000
Manifest this update: Sun 20 Apr 2025 09:00:40 +0000
Manifest next update: Mon 21 Apr 2025 09:00:40 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: z2X9e+9VAtZ9h8/nCQygVd05T2M2F+BkJkNb4BlnZqY=)
2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:a9:74:ef:c5:c2:f5:6c:05:fa:28:3f:63:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Apr 20 09:00:40 2025 GMT
Not After : Apr 21 09:00:40 2025 GMT
Subject: CN=a3ad52b1b169c571e87b23a1222b0a7b317dbfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:55:0f:48:1b:3a:5f:93:97:cf:0d:b3:a8:
9f:ee:e6:4c:94:9b:a5:c1:e9:e9:7c:65:50:ca:d7:
3f:cf:18:25:4a:a1:21:2b:74:09:73:09:49:61:34:
81:68:2b:d8:2c:b1:79:d1:6b:9b:31:ff:cd:dc:03:
3b:c9:2c:ec:95:a7:ff:60:02:f9:d1:25:15:18:b2:
55:8a:e3:e8:04:65:3b:cc:c2:07:d6:d7:ab:3e:80:
bd:14:45:bb:3f:10:b0:25:8c:c3:29:a5:a8:4c:89:
55:78:f6:73:2e:26:6e:99:4f:83:0b:34:22:8c:c2:
fa:86:38:c8:0d:c2:f6:b5:b3:cd:1f:01:ed:d0:3e:
38:a8:a5:2b:7b:ef:2c:5d:4d:dc:be:88:5a:6c:e6:
9e:3b:b5:14:15:44:28:66:27:26:da:ab:90:aa:e1:
cd:50:61:03:d7:ba:bd:65:67:4c:45:ff:27:60:68:
29:a1:77:ef:c5:a9:cf:f6:f9:e2:9a:72:8a:4d:35:
eb:88:73:af:7c:5f:62:8e:15:77:7d:58:56:0a:83:
ec:e5:4e:15:73:db:e8:1e:3e:c0:96:0b:27:98:bb:
e4:f0:52:d2:5b:87:fb:04:07:b2:31:96:f5:16:67:
b2:e0:5a:bb:48:f9:3f:cc:73:34:0d:fe:07:58:c2:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:52:B1:B1:69:C5:71:E8:7B:23:A1:22:2B:0A:7B:31:7D:BF:D4
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d4:9c:b0:9c:47:3c:9a:46:20:87:50:8a:6e:f7:b8:d9:75:
17:64:75:4f:af:3d:30:87:ff:95:3c:5f:bc:d4:eb:b2:6d:3f:
7b:08:ed:86:88:1b:1a:9a:ba:b6:81:35:f4:57:8f:91:dc:bd:
68:12:e4:1a:db:97:d3:d0:f7:87:5b:d0:56:69:31:b0:ee:a1:
8a:d6:37:21:ed:a5:65:cd:f1:8c:83:4b:ed:d6:20:d6:fd:f1:
99:ad:6a:4e:76:d5:a7:36:7c:62:07:98:85:e8:79:0b:f3:63:
95:75:c0:62:46:e5:83:45:a1:fd:96:63:7f:e4:4e:31:a8:74:
c0:fb:77:25:c8:a2:7e:6d:88:8c:0b:b0:6a:5b:79:10:4c:f3:
ba:e9:fd:ac:6f:25:ef:14:da:0b:00:35:22:d8:77:bc:f6:d5:
d0:91:d5:e6:0b:5a:dd:7b:c6:44:d5:41:1d:f9:2e:98:cf:c4:
b2:bc:e0:29:23:bd:f0:c3:9a:b4:e3:3f:1f:91:3f:8c:0d:a4:
b5:85:5a:3a:fe:c4:35:1c:21:69:bf:b2:7a:5d:d3:2f:63:46:
88:c1:f7:b2:e6:8d:50:bf:65:c0:a2:d3:ae:b5:68:06:be:02:
11:19:d4:67:6f:13:4d:aa:6e:1f:69:65:46:07:c1:c4:08:a6:
2c:58:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:28 2025 by rpki-client