Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
File: HWcc95_PZtKf7A13pmp9DqG7dZs.mft (raw, json)
Hash identifier: TD8GsNIAeu5xzLygQ91TTKP8J6sF9CQ+640vtQkZfgI=
Subject key identifier: DF:D2:90:0D:5A:43:F9:1F:63:A6:9C:D3:E7:59:60:C0:34:C9:51:E4
Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
Certificate issuer: /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Certificate serial: 019A239C02CA674D2F001DEF2C0ACFE6DD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
Manifest number: 08D2
Signing time: Mon 27 Oct 2025 03:00:18 +0000
Manifest this update: Mon 27 Oct 2025 03:00:18 +0000
Manifest next update: Tue 28 Oct 2025 03:00:18 +0000
Files and hashes: 1: HWcc95_PZtKf7A13pmp9DqG7dZs.crl (hash: SICgvDdMfivfFYhqP2/zcztVoLrv2jlt8am5Ouxt528=)
2: hRN9-wiS61xemcnu2IzA0-iM9GY.roa (hash: 3iVa28JdgJ+v6CoS2A5zsaGzlJ7m8oreOdh8XsM7vXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:02:ca:67:4d:2f:00:1d:ef:2c:0a:cf:e6:dd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Validity
Not Before: Oct 27 03:00:18 2025 GMT
Not After : Oct 28 03:00:18 2025 GMT
Subject: CN=dfd2900d5a43f91f63a69cd3e75960c034c951e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:18:1b:93:28:6e:13:e8:ca:68:fc:81:cf:
dc:97:84:86:ce:93:00:d7:5c:f0:0f:55:26:f1:cd:
e7:dd:55:65:3f:59:a5:06:8b:42:46:fe:09:a5:83:
99:cd:f1:c2:65:d6:c4:39:90:98:4e:16:0d:38:9d:
a8:ae:7b:1e:30:4c:d6:cf:dd:7b:28:d8:80:a3:d2:
90:40:39:0b:13:e7:72:82:fc:e0:08:86:5e:a0:ab:
5e:98:f9:48:2a:0a:ab:3d:1e:9b:8c:b0:ff:cd:57:
62:4b:ba:b2:20:9e:2f:7c:91:55:6f:e2:87:85:4d:
3a:0c:f9:e7:e2:2c:8e:8c:05:e2:eb:72:80:05:db:
68:98:71:ba:a7:9c:0f:27:e4:af:54:e9:69:7b:bd:
7e:6d:95:b4:9a:64:0a:3b:08:74:fb:87:4c:6a:51:
ae:db:82:0f:c3:51:f0:d4:78:b2:dc:e7:11:8e:49:
bf:cb:84:8b:0a:73:9b:b9:80:63:2b:3c:fe:da:46:
1f:e3:1c:c0:f5:0d:9a:42:20:29:20:14:fa:b6:1b:
59:04:46:46:a4:15:1a:22:c8:c2:31:be:d0:6e:9c:
26:c2:c3:0a:b7:19:21:e1:f6:db:57:43:f7:71:bc:
73:cf:51:cb:82:dd:e2:ee:4f:6a:d5:46:e1:13:7e:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:90:0D:5A:43:F9:1F:63:A6:9C:D3:E7:59:60:C0:34:C9:51:E4
X509v3 Authority Key Identifier:
keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c1:e6:ce:ba:b1:70:cd:1f:e1:58:b5:69:90:bb:c6:db:d5:
5a:9e:db:c1:43:81:4f:a3:e3:c1:91:47:11:27:28:e5:30:69:
17:66:e1:26:07:22:9c:69:bb:d6:24:a1:a0:15:87:30:19:0f:
7b:80:ca:36:ee:ee:86:03:4d:f4:49:d4:b0:e2:c7:8d:c8:b0:
6e:b0:d1:d2:d1:c5:71:03:a4:08:47:1a:e9:64:13:7a:6e:a6:
33:54:5d:92:09:a7:bb:42:94:a7:27:96:f6:09:60:3a:22:91:
20:93:fa:9e:94:85:71:be:3b:af:0b:5f:a2:6c:a0:f0:76:30:
25:4d:e3:a7:be:e0:86:62:08:32:86:2b:0b:3c:3f:18:4f:26:
00:c3:db:0c:c5:57:3f:61:01:59:0d:80:b7:a1:ba:96:f5:08:
09:59:00:3f:c2:f7:8d:38:fd:5f:3f:f4:e1:01:1b:e2:ff:65:
d0:72:58:c4:46:9c:18:38:21:b8:20:cc:40:b1:51:83:5e:56:
95:ea:25:52:7a:a6:99:c2:30:67:06:d9:85:bb:ec:f6:a6:3e:
71:85:e9:b5:01:7f:47:cd:e1:c2:3e:15:09:2b:39:18:e7:6e:
30:f2:13:8b:4d:c6:b7:13:00:15:3e:d1:fa:69:54:f4:45:82:
47:b9:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:53:19 2025 by rpki-client