Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: aJT0yCZAcUZRP+kT4mvRv18NGhwGtV7J/EmtaMak6dY=
Subject key identifier: 52:40:4B:31:E7:4E:DA:36:03:97:AA:7F:A5:63:BA:91:64:51:26:B6
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 019922C30C8E04BB32E7CF4940842DA8DF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 157D
Signing time: Sun 07 Sep 2025 06:00:31 +0000
Manifest this update: Sun 07 Sep 2025 06:00:31 +0000
Manifest next update: Mon 08 Sep 2025 06:00:31 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: 6OqjqZ2XJXv4JhB7ghyiEuk9nfQQTpnHw5oj46Q2BzM=)
2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0c:8e:04:bb:32:e7:cf:49:40:84:2d:a8:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Sep 7 06:00:31 2025 GMT
Not After : Sep 8 06:00:31 2025 GMT
Subject: CN=52404b31e74eda360397aa7fa563ba91645126b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:73:d1:86:c4:00:5d:77:d4:6f:f4:18:0d:
e7:c1:e6:57:9c:e4:13:21:2e:58:f0:8c:28:3f:bd:
c1:c0:54:be:71:44:32:17:42:34:91:3b:da:75:d8:
06:df:f4:63:f2:69:c9:78:e6:60:74:c1:bd:a9:72:
f1:54:15:44:27:95:e1:51:13:46:93:a1:10:1d:9b:
68:82:46:1f:ef:0a:24:7c:55:d3:76:8a:fc:56:59:
98:51:e6:1c:7d:9a:50:d3:a3:76:6b:7e:d0:f9:85:
f4:e3:bf:75:88:98:bd:cd:d3:04:aa:6a:74:2a:6b:
cd:b4:64:5a:f9:96:92:c2:e4:19:c9:7c:54:d6:4e:
23:67:9a:80:c4:d0:fa:4a:f3:73:35:32:f3:de:a6:
bf:ff:45:da:49:28:66:d8:0b:45:2a:31:82:cd:f0:
71:3c:be:df:3e:98:87:8f:88:8d:3b:ea:cd:b7:95:
75:52:90:72:df:45:8a:1c:8f:11:a9:ea:46:cc:19:
38:c1:54:c4:dd:ea:11:bd:f1:88:1c:e8:66:d8:98:
db:bb:5f:b7:0d:ad:a6:af:61:fb:e2:0e:73:11:e4:
8e:22:88:67:a8:c0:e6:5a:03:c4:a9:44:a9:3b:e1:
c3:ce:e6:d0:65:1f:e7:17:af:cf:d0:42:f7:ce:49:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:4B:31:E7:4E:DA:36:03:97:AA:7F:A5:63:BA:91:64:51:26:B6
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9a:0d:79:ea:f5:e1:93:91:bf:53:b8:92:de:dd:12:46:0f:
85:ed:32:2c:89:78:c0:44:65:16:4f:77:f4:84:b4:3d:2d:61:
ce:26:0b:91:ec:55:e4:be:05:39:e2:b6:94:56:15:cf:28:64:
26:99:82:d6:cc:8e:d0:60:02:59:85:90:92:41:0a:3a:0b:84:
4a:a3:98:af:6f:70:e7:48:d0:c2:5b:ea:c4:d5:58:bf:13:72:
d4:28:b0:4e:5f:f7:6a:67:94:b2:04:52:96:f1:b3:51:1f:2e:
31:ef:c3:1c:a3:d9:07:8d:70:9a:83:ca:6b:6a:29:81:78:92:
9c:c5:d8:ef:b5:01:84:62:ae:60:07:20:4e:28:4b:14:e1:f1:
50:e3:63:fa:f5:92:70:07:c8:f8:c5:2b:80:20:a9:ae:48:e9:
dd:60:15:14:5a:90:43:e1:da:3d:0a:2a:d9:a2:f8:54:be:38:
a1:47:9a:8e:6e:ed:4b:8b:82:33:0b:f6:b8:90:1c:e1:63:04:
17:b4:be:98:58:a4:5a:6a:c7:1a:73:33:a3:54:4d:fe:a2:8f:
ba:58:f3:b5:b8:6b:54:ec:d4:15:0d:43:3e:e7:67:90:0c:f0:
10:07:20:fb:0c:e2:67:44:88:b9:28:8c:e9:64:ce:2f:f7:bb:
af:41:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:39 2025 by rpki-client