Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
File: HWI-1SywRCm7q1QHwW3_MFv9zAw.mft (raw, json)
Hash identifier: iCVryruau8uMWqlQQ87UYQy4ePxXyBgOlCngmDnrVx0=
Subject key identifier: 68:79:6D:D5:CC:05:8C:99:FD:72:33:16:80:E4:9B:3B:7D:CF:9E:5A
Authority key identifier: 1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C
Certificate issuer: /CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
Certificate serial: 0196A276BE9FAF13CC3CD699850A5E444521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
Manifest number: 11F7
Signing time: Mon 05 May 2025 22:00:12 +0000
Manifest this update: Mon 05 May 2025 22:00:12 +0000
Manifest next update: Tue 06 May 2025 22:00:12 +0000
Files and hashes: 1: HWI-1SywRCm7q1QHwW3_MFv9zAw.crl (hash: AEvU/DHcfpnbdNmwSaKBXQrIJpNnrNBQfy7x0XQHLA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:be:9f:af:13:cc:3c:d6:99:85:0a:5e:44:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
Validity
Not Before: May 5 22:00:12 2025 GMT
Not After : May 6 22:00:12 2025 GMT
Subject: CN=68796dd5cc058c99fd72331680e49b3b7dcf9e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:30:fa:07:ff:b4:73:f0:7c:b5:09:af:e9:
8a:74:93:a5:61:3f:5b:38:1d:7a:80:6f:72:1f:4d:
46:ba:bf:55:a9:87:a7:c9:6a:dc:ef:8d:70:7f:c9:
cc:aa:8b:ec:d8:87:de:3d:e0:99:53:62:14:f4:f3:
22:a1:3e:89:61:23:af:d7:32:be:b9:e1:dc:f4:c2:
8a:fc:64:bf:c8:c1:b5:d0:af:4a:3d:4b:2f:a5:a5:
c9:47:c4:1c:6c:dd:46:63:25:a4:9e:c2:0f:de:bd:
1e:74:04:5e:f5:d8:32:6c:c6:8b:4a:7a:97:1a:72:
28:62:c0:3e:c8:1f:c8:62:d0:0e:c5:c2:a5:d2:91:
98:78:ba:64:63:d9:27:69:34:5b:c4:50:43:7e:4a:
69:0e:77:e9:af:8a:7d:60:a6:ec:15:df:17:2b:be:
03:12:48:8c:44:dd:e6:12:19:a2:d4:04:ea:0a:e0:
6b:6c:01:d8:e7:1c:2e:e8:cd:79:39:0e:09:3a:96:
17:69:3b:57:aa:13:ec:80:a4:56:72:1d:65:2b:55:
e6:02:3b:f5:c0:7f:a7:dc:b9:be:a3:6e:62:bc:04:
18:69:cd:49:94:69:bc:fa:b9:e4:bf:cd:30:63:db:
3d:c0:3b:df:30:3a:ae:a7:75:01:72:ad:d8:f7:36:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:6D:D5:CC:05:8C:99:FD:72:33:16:80:E4:9B:3B:7D:CF:9E:5A
X509v3 Authority Key Identifier:
keyid:1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:01:39:e9:ef:9f:90:d1:36:d5:1d:8f:c1:c9:75:0d:88:30:
1e:95:50:88:5b:e1:6e:c4:ab:2d:89:56:d3:86:07:9a:75:ff:
9d:03:d3:4c:bd:c1:59:93:58:71:85:2b:7d:70:97:bb:b6:be:
bb:af:98:7b:f6:52:a1:b8:f1:5c:c3:44:a9:f1:ab:ee:88:31:
25:72:7b:fc:b2:fc:c2:c2:cf:32:87:5a:0b:bd:46:9a:0e:f3:
1f:9c:13:91:41:4d:8c:60:8a:fa:28:0f:1b:2a:7b:f8:14:29:
bc:c2:80:76:3c:2c:9c:e2:f7:1c:d1:b5:2c:71:a1:48:89:dd:
d9:66:4a:df:e2:53:6a:5f:00:e1:ec:38:b3:4b:38:1d:17:da:
92:17:71:f9:dd:49:21:0e:3b:44:75:80:8a:81:46:0e:a5:81:
ab:ef:c0:18:65:ad:00:da:2e:61:5b:73:ed:f0:b3:90:09:76:
0f:7e:1f:c4:fb:c2:6d:26:17:29:0f:2b:48:30:d7:eb:3e:ec:
82:38:be:a3:5a:54:c8:fc:b7:d2:ab:42:a3:71:bc:a1:82:34:
db:85:da:10:a0:05:07:c6:da:b1:98:25:d3:11:13:f8:e7:9b:
35:53:7d:85:42:3b:6d:73:f3:83:2b:5b:d5:0c:88:d5:d8:c6:
59:f6:81:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaidr6frxPMPNaZhQpeREUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjIzZWQ1MmNiMDQ0MjliYmFiNTQwN2MxNmRmZjMwNWJm
ZGNjMGMwHhcNMjUwNTA1MjIwMDEyWhcNMjUwNTA2MjIwMDEyWjAzMTEwLwYDVQQD
Eyg2ODc5NmRkNWNjMDU4Yzk5ZmQ3MjMzMTY4MGU0OWIzYjdkY2Y5ZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie4w+gf/tHPwfLUJr+mKdJOlYT9b
OB16gG9yH01Gur9VqYenyWrc741wf8nMqovs2IfePeCZU2IU9PMioT6JYSOv1zK+
ueHc9MKK/GS/yMG10K9KPUsvpaXJR8QcbN1GYyWknsIP3r0edARe9dgybMaLSnqX
GnIoYsA+yB/IYtAOxcKl0pGYeLpkY9knaTRbxFBDfkppDnfpr4p9YKbsFd8XK74D
EkiMRN3mEhmi1ATqCuBrbAHY5xwu6M15OQ4JOpYXaTtXqhPsgKRWch1lK1XmAjv1
wH+n3Lm+o25ivAQYac1JlGm8+rnkv80wY9s9wDvfMDqup3UBcq3Y9zYKrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh5bdXMBYyZ/XIzFoDkmzt9z55aMB8GA1UdIwQY
MBaAFB1iPtUssEQpu6tUB8Ft/zBb/cwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdJLTFTeXdSQ203cTFRSHdXM19NRnY5ekF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80OGNlZmUtOGMxZS00NjA5LWJhZjUt
ZjY0ZmU3M2Q5YjViLzEvSFdJLTFTeXdSQ203cTFRSHdXM19NRnY5ekF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80OGNlZmUtOGMxZS00NjA5LWJhZjUtZjY0ZmU3M2Q5YjVi
LzEvSFdJLTFTeXdSQ203cTFRSHdXM19NRnY5ekF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwE56e+f
kNE21R2Pwcl1DYgwHpVQiFvhbsSrLYlW04YHmnX/nQPTTL3BWZNYcYUrfXCXu7a+
u6+Ye/ZSobjxXMNEqfGr7ogxJXJ7/LL8wsLPModaC71Gmg7zH5wTkUFNjGCK+igP
Gyp7+BQpvMKAdjwsnOL3HNG1LHGhSInd2WZK3+JTal8A4ew4s0s4HRfakhdx+d1J
IQ47RHWAioFGDqWBq+/AGGWtANouYVtz7fCzkAl2D34fxPvCbSYXKQ8rSDDX6z7s
gji+o1pUyPy30qtCo3G8oYI024XaEKAFB8basZgl0xET+OebNVN9hUI7bXPzgytb
1QyI1djGWfaBDQ==
-----END CERTIFICATE-----
Generated at Mon May 5 23:38:01 2025 by rpki-client