![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
File: HWI-1SywRCm7q1QHwW3_MFv9zAw.mft (raw, json)
Hash identifier: y51imjrojeKxWSibbXwQ7hUsikiPEfN4foNSsBxk/Ds=
Subject key identifier: F0:2D:A6:EF:F4:E4:95:C3:22:66:92:32:00:87:EB:AA:61:F1:57:AB
Authority key identifier: 1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C
Certificate issuer: /CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
Certificate serial: 019510C780E7B5FE95BDC4DCEA762D224796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
Manifest number: 1127
Signing time: Sun 16 Feb 2025 22:01:04 +0000
Manifest this update: Sun 16 Feb 2025 22:01:04 +0000
Manifest next update: Mon 17 Feb 2025 22:01:04 +0000
Files and hashes: 1: HWI-1SywRCm7q1QHwW3_MFv9zAw.crl (hash: Fnvtbs4Mh0m4MS1rzg+29X2D0BcSfvYKb1Bkuu98XkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:80:e7:b5:fe:95:bd:c4:dc:ea:76:2d:22:47:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
Validity
Not Before: Feb 16 22:01:04 2025 GMT
Not After : Feb 17 22:01:04 2025 GMT
Subject: CN=f02da6eff4e495c3226692320087ebaa61f157ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:12:6f:d1:46:50:c8:e5:07:b0:29:a9:8a:
cf:ea:70:2b:8b:d1:91:d8:f2:ee:36:18:ae:67:e7:
27:5a:54:55:14:d7:a9:a4:7b:eb:8a:e3:4b:e3:12:
19:7e:d5:62:d4:64:94:e0:a6:36:b0:e9:35:23:d9:
7f:b7:34:e4:5d:17:a8:bf:a0:8d:5e:20:05:4f:ee:
16:e2:a3:fa:19:b6:b3:86:2f:2a:64:0b:7b:9e:c0:
fc:e4:38:cb:53:03:e3:dc:44:53:25:ab:ef:56:58:
af:af:a4:d0:1b:9b:2b:ad:93:f2:c5:13:fa:fb:92:
32:d8:67:4a:fd:36:99:3b:e7:9a:c4:37:0f:49:8c:
fd:93:4e:bd:c7:cf:dc:f3:a8:7c:f3:48:45:17:8f:
63:17:d4:e3:c5:57:4d:af:74:66:6e:0b:bc:0a:f4:
62:a5:ff:7a:29:87:55:86:b1:2b:c4:c5:6d:f0:9a:
30:81:aa:f1:87:e0:dc:a2:33:4e:61:69:2e:c5:85:
6b:0e:cb:c9:08:6e:a3:58:8c:bd:26:56:e3:57:ca:
63:9a:16:28:ca:bd:1f:af:af:29:6d:b3:bd:d3:ab:
14:75:ec:4f:7b:99:64:60:1a:59:51:8f:ff:d6:4b:
23:01:48:70:56:96:d6:9c:1b:8f:39:a2:9c:a8:dc:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:A6:EF:F4:E4:95:C3:22:66:92:32:00:87:EB:AA:61:F1:57:AB
X509v3 Authority Key Identifier:
keyid:1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:52:8a:80:a4:35:4b:bb:be:bd:e3:6c:14:eb:21:94:39:02:
f9:81:c9:d6:5a:d2:91:ce:7a:42:da:07:cd:fd:b2:06:e8:e3:
3b:21:53:8c:d5:5c:aa:3d:68:50:d2:61:4f:fd:ac:60:fc:60:
5e:6e:f4:81:e5:f0:3e:ba:26:ca:96:17:6c:c4:6a:8f:ed:38:
c5:87:9a:ed:ea:61:c4:07:a6:4a:3d:fe:f8:22:33:19:f6:b7:
b7:5b:40:52:14:f9:c7:5e:8a:86:0e:63:7d:55:7f:3a:cb:30:
cb:b9:43:30:b9:04:2a:3c:b2:9c:8f:37:16:f6:99:e7:84:dc:
19:f8:16:68:d2:89:8f:c2:ea:37:8a:99:5a:46:b1:a9:2a:5e:
3b:cd:13:ca:4a:8e:2d:5a:9f:32:7d:f6:89:63:77:a8:b3:95:
a6:3f:73:eb:97:f7:98:3c:5c:93:03:27:d2:54:a9:80:dc:3f:
70:74:c6:08:2c:08:3a:f9:61:87:71:11:59:21:85:09:7d:c1:
3e:9d:28:07:3d:cd:ae:9b:31:d5:2b:43:fb:c0:a5:5f:f1:96:
56:75:4c:08:1d:67:d1:ca:95:8f:67:49:d8:0c:0c:3d:0e:54:
45:59:1d:b5:85:79:d4:28:8d:c3:ab:59:8d:40:73:fe:9e:50:
1a:89:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:21 2025 by rpki-client