Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json)
Hash identifier: /zW1irp7ZxxPH52OheZOOWj+Udrqk3tL9Jt87MvnjJA=
Subject key identifier: 5F:91:2F:57:CC:9E:43:E4:70:08:91:9B:E9:C5:4D:E3:7D:07:AE:39
Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Certificate serial: 019A4E1918A06AA5BD0AC9050D2D10B2C085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
Manifest number: 1618
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: g2RIfkiAUkAtRLhRYZtlJjnFP9KT5kHsQx/9FAmWLVk=)
2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:18:a0:6a:a5:bd:0a:c9:05:0d:2d:10:b2:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=5f912f57cc9e43e47008919be9c54de37d07ae39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:59:f9:7c:f1:78:db:4f:d6:ae:c5:cf:ad:
d7:a3:64:c3:01:f7:04:60:47:80:54:ad:d8:84:5d:
57:25:d5:53:4e:0a:19:37:81:d4:d3:a9:22:cd:12:
c3:3e:8e:0f:58:4a:66:95:c0:da:bb:48:53:5c:b6:
ef:0b:59:ce:23:c0:9d:72:86:a2:7b:a5:eb:7f:9a:
9f:a4:02:62:8a:28:33:35:4a:85:96:19:06:b0:17:
a5:e8:64:cf:5b:f9:2e:86:5a:7d:26:60:aa:d0:e5:
06:f9:0d:57:ed:11:87:98:9f:6b:b6:14:53:4a:b1:
5e:42:ee:ea:1e:40:f8:f8:ac:7a:bd:5d:0e:ac:6c:
d4:30:54:bd:17:18:63:89:c2:1f:65:d5:b9:15:38:
43:89:ac:08:1e:50:11:a5:80:04:fa:ab:9b:6e:4a:
f0:8e:76:d1:b2:a0:6c:b3:31:7e:d7:4d:14:9c:a7:
7f:2d:34:51:00:a9:8a:a7:80:5b:b1:5b:6d:84:b8:
70:de:96:80:bd:64:6a:f8:9d:68:a7:48:c3:27:93:
5c:12:1e:8e:ca:9b:5e:72:48:5c:3d:47:4f:2b:e2:
ff:dd:34:29:ca:b1:d4:8e:d4:fb:42:55:4c:7b:28:
95:33:80:db:78:98:9d:d2:b6:b9:13:b6:ce:5a:38:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:2F:57:CC:9E:43:E4:70:08:91:9B:E9:C5:4D:E3:7D:07:AE:39
X509v3 Authority Key Identifier:
keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c8:07:10:dd:8d:56:02:35:e2:9a:49:23:e6:3b:01:91:da:
ea:5b:41:ea:bf:18:19:85:44:c0:28:e8:b5:e1:4e:ff:c5:29:
ed:01:b5:2b:3e:52:5f:16:a4:44:f1:a5:bc:e8:3a:e6:34:47:
95:78:22:77:c1:4d:10:34:12:ea:3e:21:59:48:f8:1d:92:a3:
0f:0b:93:72:f1:0c:6a:ba:b8:c9:34:de:07:f8:3a:f8:2f:1b:
f3:28:db:b4:9d:bd:32:ae:dc:c0:de:bb:91:61:6d:f4:63:a2:
da:e4:8b:34:b1:d2:fd:6d:56:6a:d0:93:36:1a:33:82:b4:d3:
6b:e7:32:f4:d7:0e:3c:9d:c6:06:2a:cd:24:18:6e:0e:9e:a9:
46:6e:15:f9:58:c4:3c:11:b0:58:3c:1a:57:d5:20:7f:d3:60:
01:f1:3e:2d:07:aa:ce:62:2a:9d:19:81:eb:48:21:40:f6:27:
03:bc:e2:86:83:09:c9:f2:b0:98:cc:f2:d2:6c:f1:7c:b4:c7:
d5:ce:8d:3c:c3:8f:9f:e9:b7:b7:82:9d:81:6b:83:94:02:e6:
4c:6b:03:57:61:5f:b9:96:7d:c6:ce:4d:cf:94:61:cb:f4:6c:
ae:e1:19:de:b1:ef:51:d8:5a:9f:92:ee:b9:68:7e:5a:bc:0b:
e3:ae:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:51 2025 by rpki-client