Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: pHFzfGP5vFwLHbxiv/fnIdx62NGBFVN/yOhnyync10o=
Subject key identifier: 10:9A:9A:24:F1:96:F5:B5:A5:59:F7:C1:F1:50:E7:E1:87:25:61:C1
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 0196C081A24ECAE4DA7A8C20F5A6DC4F9DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 1441
Signing time: Sun 11 May 2025 18:00:43 +0000
Manifest this update: Sun 11 May 2025 18:00:43 +0000
Manifest next update: Mon 12 May 2025 18:00:43 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: tsTyULyV+baibTuV0dHZ2K+g7uPXIkzyJvOshzkJtTg=)
2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:a2:4e:ca:e4:da:7a:8c:20:f5:a6:dc:4f:9d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: May 11 18:00:43 2025 GMT
Not After : May 12 18:00:43 2025 GMT
Subject: CN=109a9a24f196f5b5a559f7c1f150e7e1872561c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:c2:52:3a:d2:71:f5:10:35:34:6c:95:8f:
4c:49:5b:11:32:02:31:3a:b7:a4:da:f1:2d:10:68:
f4:3b:ed:e1:80:79:88:b1:48:d8:4f:1b:3d:20:c5:
aa:88:9f:54:97:7a:a6:4c:e0:95:26:14:3d:59:f5:
e3:5d:28:e0:f2:3a:2f:c1:57:b5:71:b7:18:69:c1:
6f:3f:8b:c7:6c:e8:d5:8e:9a:c2:9b:8b:af:02:56:
48:fb:7a:1f:54:c2:dd:7b:03:4f:7f:93:39:c9:5f:
0a:85:97:5a:c9:ec:66:e6:1d:42:8c:30:e9:65:80:
4b:51:46:4b:ce:d9:05:35:2d:5a:fc:15:3c:a6:9c:
02:c7:53:f2:66:2c:30:86:7b:e3:33:a1:35:c9:eb:
e4:80:17:a3:f0:e6:d3:bc:5f:54:c3:d7:6a:63:4f:
cd:e7:f2:c3:33:5c:05:dc:7c:17:23:22:01:68:ee:
3c:8e:f1:09:89:bf:75:21:ad:e6:d9:6b:0f:74:1d:
8f:02:09:d7:6f:44:d7:e6:af:be:bb:43:17:5b:37:
29:63:a1:b8:2d:41:f3:c9:dd:6b:ef:dc:ee:d5:fc:
9c:25:d3:30:ac:3e:90:fe:7b:83:e7:3c:c8:05:5e:
c9:d2:02:47:e6:3b:84:2f:fb:57:c9:34:31:db:d3:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:9A:24:F1:96:F5:B5:A5:59:F7:C1:F1:50:E7:E1:87:25:61:C1
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8a:d4:03:9e:78:7f:a3:53:11:5c:00:87:62:82:dc:fd:22:
ba:f8:b8:a1:8a:3b:9f:8e:27:70:f6:9d:64:c5:00:ad:2d:34:
7e:68:03:53:d3:f1:78:9f:21:75:ab:fe:54:40:07:af:bf:be:
61:d9:ab:45:1c:98:89:54:07:3d:d0:65:db:a5:11:d8:ba:c1:
ef:c7:31:0b:18:82:33:56:3b:1c:3d:1f:8f:88:f5:9c:af:46:
5d:78:12:59:d0:d3:38:d8:ce:62:b6:c5:7f:6d:34:c2:6e:b0:
d7:74:af:41:7c:40:08:bd:67:58:aa:49:da:98:b8:27:79:c0:
7f:44:4d:4c:1b:35:f7:5c:b4:e3:8c:ca:47:08:89:01:52:32:
62:4c:b6:2f:97:8e:fb:04:40:19:39:e1:7d:5e:4b:9e:86:de:
1f:ff:9a:b8:82:85:c6:37:eb:39:93:93:df:5e:87:99:a7:5b:
30:eb:05:7a:0d:3c:9b:f6:7e:f7:a3:ab:1a:cd:09:96:3a:4e:
f1:68:b1:a2:98:77:0c:49:c9:5d:2b:40:ed:29:07:93:6c:ef:
d9:24:91:af:15:b6:af:a8:36:6c:1c:01:69:46:54:0f:75:00:
3a:a0:06:18:5d:af:12:a9:a3:33:ea:52:5d:3f:ba:d8:ce:bb:
06:f8:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:08:14 2025 by rpki-client