Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: 1BRAXUS8UjDGt6aIIl9iwPKAmw8ZWXssG03NJyqIEGQ=
Subject key identifier: 6B:5D:61:AD:3E:FC:32:F8:5F:8D:71:43:6B:BD:EF:7A:BB:93:6A:19
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 0199FEEBC36DE07AAAD30FA177F92B62E246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 15EF
Signing time: Mon 20 Oct 2025 00:01:27 +0000
Manifest this update: Mon 20 Oct 2025 00:01:27 +0000
Manifest next update: Tue 21 Oct 2025 00:01:27 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: YEtp1tBAR8r2y/VKYkFI9ymf1Eo8LHAxJ1C3ee4Puy0=)
2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c3:6d:e0:7a:aa:d3:0f:a1:77:f9:2b:62:e2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Oct 20 00:01:27 2025 GMT
Not After : Oct 21 00:01:27 2025 GMT
Subject: CN=6b5d61ad3efc32f85f8d71436bbdef7abb936a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:16:86:20:fe:ca:c5:53:e7:bc:8f:a0:73:
37:b1:0e:81:e5:ab:c3:2b:d3:a7:41:ce:64:d9:cc:
a8:a3:b5:2d:a5:fc:35:d5:58:ab:39:ef:1b:42:be:
fb:26:33:20:f1:d5:7a:5b:68:37:2f:e2:1c:17:32:
56:6b:2d:f6:d4:dd:10:77:b9:48:d1:39:43:94:5b:
2f:16:d2:47:f8:80:c2:2f:9e:f4:85:47:7c:be:bf:
e2:91:7b:26:bb:4b:9f:45:94:50:f5:ae:71:56:4e:
ca:ee:e4:10:2b:11:bd:51:ca:25:b5:78:00:ff:4c:
21:81:85:f0:e4:23:74:02:78:73:72:ea:40:f5:49:
86:ea:79:39:09:58:89:90:a8:d8:ed:6c:a5:bf:84:
f8:6c:3f:a3:2d:27:a7:21:53:3a:5e:5c:4b:7d:c3:
ea:3b:09:1a:8b:e6:1d:14:ae:f9:f1:7f:60:b9:85:
28:e5:3c:ef:9b:39:26:05:47:a1:f9:42:73:92:77:
18:c3:6a:c4:55:b3:de:06:15:3c:b5:95:65:f7:13:
11:e8:a4:bc:a4:61:f5:72:78:c9:96:00:c3:51:11:
f3:e8:8f:b9:48:00:02:a1:a6:05:a5:83:d9:a0:b7:
c1:77:b2:24:67:89:64:32:83:78:6d:60:b8:22:68:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:61:AD:3E:FC:32:F8:5F:8D:71:43:6B:BD:EF:7A:BB:93:6A:19
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7e:07:89:c6:f9:35:d6:03:7a:34:00:51:9f:9c:42:ed:67:
cc:77:88:ad:ee:c5:0b:c8:90:c7:96:ef:47:8f:d1:26:b5:c3:
d1:ae:a9:81:4c:91:73:b5:00:d6:3e:71:46:b6:fc:d2:ac:e5:
bc:ec:55:bb:74:72:1b:80:fd:35:86:59:24:5e:91:76:28:8d:
69:14:78:d1:9a:a6:c8:84:ed:af:dd:97:5b:c6:7d:6c:a4:af:
20:20:ab:1a:88:c9:7d:79:36:28:8b:46:a4:71:48:f0:40:6b:
1a:80:40:f7:94:9d:bf:a6:11:54:8e:4b:9a:b9:11:b4:5f:aa:
f1:3e:74:70:ee:58:bb:73:a4:db:99:1a:be:ca:a3:c5:bd:2e:
8e:60:8f:ce:72:0b:7d:66:7e:d1:73:8f:15:31:57:b4:01:e6:
22:82:16:4b:d2:c0:29:0e:37:e3:d4:1c:57:2d:f8:68:92:3a:
b1:26:d7:f3:0d:41:47:32:a0:4c:94:4c:b3:d0:cc:95:15:20:
ea:83:80:dd:b5:4d:72:15:f9:d6:82:14:45:a0:c0:74:ae:8a:
93:9c:45:0a:d7:a0:47:90:7e:bb:09:28:20:37:2d:59:96:b1:
9d:0b:bd:17:84:74:5c:7c:25:06:dd:dc:11:22:59:ab:be:be:
c0:e5:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:20 2025 by rpki-client