Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: mBRIamH2wIaaaPbsYvu41CJ8//DMgOBseP1kMGMoyWk=
Subject key identifier: 36:AB:69:56:A8:F6:66:AE:1B:F9:98:68:3B:72:EF:ED:B9:25:1E:99
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 0197B7B32653EA09D7FAD888639F7AD0E75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 14C1
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: Pxj5CRmRd8uZSGEMcSJU16U0u0ujpF2Q98Yh7To0Mkg=)
2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:26:53:ea:09:d7:fa:d8:88:63:9f:7a:d0:e7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=36ab6956a8f666ae1bf998683b72efedb9251e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:75:aa:35:d0:38:ba:b0:0c:76:64:75:60:
74:06:66:e5:38:db:aa:df:52:21:34:06:82:6c:24:
cf:05:30:b6:23:1c:14:2e:08:77:3a:e2:08:0b:42:
c1:0b:79:b0:10:28:07:7c:b5:fb:05:9d:e3:2d:b3:
c4:c7:fd:21:45:cc:ac:f2:91:a6:a0:de:c5:1d:f7:
01:8e:72:5b:5f:06:5f:3f:f5:07:88:83:20:d5:4b:
d4:c3:b3:bd:14:c9:49:c5:d7:91:49:74:93:78:02:
23:46:58:6b:93:1f:93:8c:e3:8c:74:a1:46:16:6a:
80:e7:f6:f4:8f:eb:64:34:90:50:2c:3d:14:ec:ec:
bd:ea:34:2e:38:a8:93:11:68:c1:a6:c6:3d:d3:9d:
53:fe:3f:17:13:8a:69:67:cf:ad:c9:f7:e5:db:f3:
6f:06:d7:70:17:e9:0b:fd:98:c6:61:db:3e:c6:45:
d3:2e:9f:e9:8b:86:0c:23:bc:4d:f0:4f:5d:f1:f6:
8f:63:f2:e0:69:eb:98:57:7c:6e:67:80:8e:e7:49:
d2:23:4f:cd:ce:f9:02:b7:8b:43:c9:5d:b3:b6:18:
56:21:f3:04:35:78:ee:96:53:42:7d:ba:da:63:40:
28:6c:d5:ec:60:fc:94:cd:37:0f:c6:92:03:ac:60:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:69:56:A8:F6:66:AE:1B:F9:98:68:3B:72:EF:ED:B9:25:1E:99
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:99:28:f2:ce:c9:69:ae:bb:8a:cc:ae:24:81:f4:c6:fa:ad:
54:b4:44:ea:40:c4:91:cf:2b:f1:ff:89:aa:3b:04:62:44:09:
6b:c7:67:7f:ef:5f:a9:7b:45:a2:43:a0:2c:16:da:d8:34:00:
2b:5a:2f:e4:00:6e:64:5a:e5:9a:eb:a9:fd:92:58:f0:b9:b4:
86:8b:bc:56:4e:ae:2a:e4:69:30:fc:72:27:9f:61:96:c8:54:
a7:1d:ab:49:a2:2b:78:62:3b:b2:a8:c9:55:e7:cf:50:e1:f9:
22:e0:f8:4b:33:37:98:59:4e:eb:be:77:6f:be:36:47:c8:43:
0c:0c:88:fc:87:8a:8f:3d:29:44:f1:4e:28:fd:35:06:31:1c:
0a:95:00:0a:4d:72:2d:c1:7f:c6:cf:b9:93:99:73:6b:4f:65:
fd:f3:47:2c:3e:9e:54:23:2a:d2:8c:a2:d8:da:66:94:98:86:
3d:1c:cd:03:99:f4:05:aa:8f:43:bb:11:21:99:a0:74:3e:64:
86:95:09:e1:41:0d:17:a4:9e:f7:51:26:3e:59:84:70:30:5a:
47:70:b7:11:2e:0e:37:32:21:a5:16:e6:cb:01:ae:c4:6c:99:
ac:e7:e5:a4:ea:79:59:ca:f9:58:17:86:cf:20:05:cd:e3:1d:
b2:14:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:16 2025 by rpki-client