
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
File: hwCTRBAfUQ52oqserOnpp9kuTtU.mft (raw, json)
Hash identifier: p8MBFd3cbMzFrIa6duXHKnGDPoQnTLP2zRJCmMbhz7g=
Subject key identifier: E8:6A:EB:48:84:5E:48:74:D0:A7:2D:54:E7:50:03:81:97:95:B4:18
Authority key identifier: 87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
Certificate issuer: /CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Certificate serial: 0199FBEC251013011113E0C82480E63ADBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
Manifest number: 0944
Signing time: Sun 19 Oct 2025 10:03:00 +0000
Manifest this update: Sun 19 Oct 2025 10:03:00 +0000
Manifest next update: Mon 20 Oct 2025 10:03:00 +0000
Files and hashes: 1: hwCTRBAfUQ52oqserOnpp9kuTtU.crl (hash: h2O1NcRCA2Ko/Ssp+jaHTreipOOp388eQaHGHFXeTS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:25:10:13:01:11:13:e0:c8:24:80:e6:3a:db:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Validity
Not Before: Oct 19 10:03:00 2025 GMT
Not After : Oct 20 10:03:00 2025 GMT
Subject: CN=e86aeb48845e4874d0a72d54e75003819795b418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:c1:d1:00:53:de:af:94:0e:b1:56:a0:10:
7d:04:fc:f0:08:c0:56:61:50:7d:92:de:b0:64:44:
32:bf:ef:ac:7c:2d:80:78:9c:d9:87:7e:74:d5:2a:
65:5f:8b:51:5e:fc:85:b8:69:1e:c5:b5:01:a0:41:
21:4d:c3:49:06:44:30:4d:14:5c:c7:00:6f:8c:95:
73:e9:da:10:04:0d:be:42:db:4a:ac:1e:f3:95:cd:
ad:5b:47:c8:33:ee:3d:1d:1f:a2:bf:06:af:4b:8c:
fe:cf:f8:a8:e2:5c:bc:28:ff:35:4f:ed:3d:83:04:
1f:96:7b:76:c3:bf:3b:e5:2e:9b:f8:6e:9b:8d:46:
bd:9e:e8:b2:a4:4e:69:ac:f5:21:20:62:2a:4b:0a:
4d:2c:26:e1:66:a7:43:e7:f2:ee:ae:9f:ef:6e:85:
a8:fb:06:76:aa:9b:60:99:0b:a9:36:05:93:2d:f3:
8d:a9:df:e3:56:5d:ea:e1:f1:d5:bb:38:7a:4e:57:
4c:98:df:b4:e8:dc:15:93:03:b2:d3:46:b4:57:6b:
d6:cc:54:b5:c5:fc:2d:db:99:eb:e2:94:b5:70:86:
e1:29:5b:03:5f:63:e3:8f:57:5d:22:a1:af:7b:58:
d9:57:1a:ef:15:00:7d:84:44:08:73:f6:6f:fb:71:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6A:EB:48:84:5E:48:74:D0:A7:2D:54:E7:50:03:81:97:95:B4:18
X509v3 Authority Key Identifier:
keyid:87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:06:86:54:b9:45:f1:d6:65:54:6b:51:cf:a2:32:70:97:52:
7a:75:21:74:74:6c:73:26:60:5c:00:1c:f8:74:50:fe:ef:f2:
3e:16:50:76:7e:7d:4a:ac:22:77:41:78:81:14:c4:34:43:26:
c0:20:00:ef:d9:a1:d8:89:84:3a:f5:29:20:9e:6e:c1:6a:40:
4c:dd:eb:52:15:d6:9f:3d:47:17:ea:53:f8:7f:62:6e:07:11:
3e:11:01:87:7c:08:e8:8a:9f:56:6c:c3:d2:ff:0a:b9:d3:07:
79:b9:9a:ca:01:df:83:3e:e7:33:25:01:45:c0:34:54:04:e3:
06:bc:c1:f3:2d:e5:ce:26:f1:e6:38:69:f1:16:53:1a:83:d9:
56:c0:81:71:12:3a:45:69:4b:d2:9c:bd:18:76:18:55:53:5d:
e5:ca:4b:18:b6:65:6a:d9:1e:cd:78:dc:e1:1d:ae:48:d9:86:
4e:da:a3:e9:95:69:6c:39:17:8a:83:3d:2a:33:24:eb:fb:9a:
90:0d:81:fc:26:ab:02:ed:75:2d:11:60:bd:e6:82:05:3e:19:
e6:9b:88:bc:ed:c2:fd:e9:12:f6:53:61:26:4a:16:dd:9a:a3:
2e:86:77:cc:49:02:0c:43:20:a6:f5:8f:87:e7:e0:c2:7c:40:
4b:0c:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:22:25 2025 by rpki-client