Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
File: HwGmewzRspUViU7OlrUurL4EG9Q.mft (raw, json)
Hash identifier: kQh24jYM0kA2JR7jdySF3GN/KuTyTg4G9wsKp6rxXTc=
Subject key identifier: 1E:BC:F9:56:08:2E:DA:C8:90:6C:E3:C6:1B:AF:4A:13:C7:7D:37:E7
Authority key identifier: 1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4
Certificate issuer: /CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4
Certificate serial: 019A7180871ACA37B0358B60C119D5CB1E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
Manifest number: 0A51
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: HwGmewzRspUViU7OlrUurL4EG9Q.crl (hash: pK3V0M5OPniRjIrPXz9bA55MiXvKG4u+tzyYxcNr7Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:87:1a:ca:37:b0:35:8b:60:c1:19:d5:cb:1e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f01a67b0cd1b29515894ece96b52eacbe041bd4
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=1ebcf956082edac8906ce3c61baf4a13c77d37e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:3c:87:4c:1a:cc:e7:ac:48:ad:e8:d1:3b:
31:51:24:3c:db:65:d3:b7:e3:6b:5c:2a:d6:22:50:
44:f5:0c:c5:b8:ed:08:80:29:85:bc:d0:f1:04:50:
fc:05:14:c1:6d:85:0e:fd:15:c1:e9:d2:44:11:9e:
f8:a6:ab:5b:46:80:c7:72:1d:92:ea:5f:93:57:a7:
08:58:c9:e4:67:4f:47:ec:4d:7b:47:db:84:ba:0d:
cb:aa:10:61:2f:53:61:14:39:f4:1b:2c:50:6e:9b:
1d:f8:a2:73:7e:00:ac:dd:53:8c:82:ff:b7:7f:01:
82:48:91:ac:06:2d:64:53:1f:df:ac:e4:1c:2f:30:
81:e4:97:58:30:07:39:d9:76:36:7d:48:c7:b5:39:
c3:07:93:d0:95:ab:a5:6c:08:0d:7d:fa:3e:5e:f8:
2b:76:92:33:00:d5:28:9f:c5:c4:90:4c:20:25:6d:
f4:8e:73:a0:0d:83:40:63:de:bf:4b:71:89:1c:f6:
81:57:94:74:e9:1c:ae:0b:c9:32:21:08:1c:40:a9:
64:a1:7a:ac:21:c2:1a:8c:c2:3a:5e:b5:0e:34:95:
13:cd:2b:c3:6c:0c:d5:73:fa:76:01:70:50:a0:7e:
f1:a9:5d:37:6b:59:d8:dc:1f:42:cc:4a:81:02:34:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:F9:56:08:2E:DA:C8:90:6C:E3:C6:1B:AF:4A:13:C7:7D:37:E7
X509v3 Authority Key Identifier:
keyid:1F:01:A6:7B:0C:D1:B2:95:15:89:4E:CE:96:B5:2E:AC:BE:04:1B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwGmewzRspUViU7OlrUurL4EG9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ea2e93-31d0-48ad-87ec-bdc117122efb/1/HwGmewzRspUViU7OlrUurL4EG9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3a:8e:c9:7b:76:9e:b3:d6:27:3e:cc:a1:09:89:9b:b3:72:
88:89:ee:9d:91:a7:8d:03:d0:97:f1:2c:9d:08:cf:d9:4a:d1:
f5:04:37:15:ee:20:d0:28:0c:b8:1f:b5:04:5a:37:f1:96:e3:
da:ba:6a:da:df:92:0e:93:72:a1:7d:c8:7e:55:52:55:1f:62:
08:7f:e4:93:e2:37:36:a2:10:9e:48:13:1c:2d:9a:b9:81:a9:
11:08:d8:f3:40:57:23:cc:75:10:7a:89:35:bd:4f:9c:33:b8:
52:cc:de:4b:80:d0:a3:db:31:df:22:b6:a3:32:c9:d4:f7:ea:
1a:19:6c:53:89:97:30:e6:36:45:bc:1c:25:77:30:a4:cc:98:
4a:ea:53:f2:38:cd:12:da:db:bf:59:22:7c:69:00:90:d5:c7:
d7:6d:0a:ef:63:7f:66:cd:06:e9:a3:d1:0e:7b:47:bb:ba:dd:
95:ee:12:0f:7f:b7:b5:8a:d4:31:e0:f1:6d:95:4d:dd:02:57:
ba:2e:66:ae:bf:cb:82:25:01:50:01:b5:96:24:1a:d3:32:d7:
25:7f:35:75:ab:46:1b:c1:08:3d:b3:76:d7:92:a7:24:14:cc:
b9:d0:d3:c6:07:a9:4d:6c:e9:15:f9:85:fc:02:72:8a:0f:d9:
de:ee:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:18 2025 by rpki-client