Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
File: HWI-1SywRCm7q1QHwW3_MFv9zAw.mft (raw, json)
Hash identifier: ZaxYFIN9uhrAk8HsU1V9dlsNpjyZynlTW+ok6zlv0Sg=
Subject key identifier: 6F:EA:D5:FD:95:82:CD:8B:3A:1E:F4:52:9E:3D:FF:E0:4E:43:C3:79
Authority key identifier: 1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C
Certificate issuer: /CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
Certificate serial: 01976960A1F547C1C352A9DC9E53B9F36CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
Manifest number: 125E
Signing time: Fri 13 Jun 2025 13:00:29 +0000
Manifest this update: Fri 13 Jun 2025 13:00:29 +0000
Manifest next update: Sat 14 Jun 2025 13:00:29 +0000
Files and hashes: 1: HWI-1SywRCm7q1QHwW3_MFv9zAw.crl (hash: bVdl/PN4W+FKGeAXW6UVbSBZkoKkGIO94XEHKmkM4KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:a1:f5:47:c1:c3:52:a9:dc:9e:53:b9:f3:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d623ed52cb04429bbab5407c16dff305bfdcc0c
Validity
Not Before: Jun 13 13:00:29 2025 GMT
Not After : Jun 14 13:00:29 2025 GMT
Subject: CN=6fead5fd9582cd8b3a1ef4529e3dffe04e43c379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:e3:cc:65:35:33:9d:f6:97:e9:95:3f:3d:
e5:b0:64:be:26:e3:3c:4d:f5:8d:72:b5:47:15:07:
6d:9a:34:ce:48:aa:32:78:a0:8c:a2:1c:62:b4:d9:
01:27:c8:18:cb:99:30:d1:11:3b:61:64:4c:6b:4f:
1d:b3:1d:de:9d:d4:7e:10:e2:27:c0:77:eb:db:fe:
86:f4:92:3b:c4:46:51:68:ed:04:61:92:1b:2b:d6:
a1:19:91:6d:ff:42:3a:39:e6:ac:79:75:bf:5c:ea:
e5:aa:8f:f9:a4:1f:34:d9:fe:9b:99:97:89:a8:4c:
1e:af:43:83:26:36:6f:4a:8b:bd:f4:68:ef:df:58:
e9:4c:a8:f9:45:4d:74:ac:48:0f:ee:5a:3f:df:26:
7c:39:3f:9e:60:74:38:26:52:ed:4b:b4:47:50:3f:
3b:c1:23:57:11:6b:9e:84:35:b1:5f:94:7f:ea:22:
93:a3:30:a3:fe:b7:d9:3e:8c:bb:19:ee:ef:4b:7a:
74:fd:21:e8:04:0a:38:f0:1d:ad:97:e6:0f:71:d7:
2c:6c:9d:5b:b9:c4:44:7d:3a:b9:d5:ef:9a:e5:1c:
43:47:93:4b:38:af:33:6b:73:fa:64:4a:bd:2b:85:
4a:57:61:97:ea:10:7c:88:a9:4e:d8:7c:22:3d:16:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:D5:FD:95:82:CD:8B:3A:1E:F4:52:9E:3D:FF:E0:4E:43:C3:79
X509v3 Authority Key Identifier:
keyid:1D:62:3E:D5:2C:B0:44:29:BB:AB:54:07:C1:6D:FF:30:5B:FD:CC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWI-1SywRCm7q1QHwW3_MFv9zAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/48cefe-8c1e-4609-baf5-f64fe73d9b5b/1/HWI-1SywRCm7q1QHwW3_MFv9zAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:36:f1:99:78:2c:5d:bc:77:be:44:35:76:d6:bc:47:06:f8:
20:7f:03:db:54:47:e6:da:0d:e5:c2:bd:ad:2f:01:bc:92:8a:
2b:8c:c8:fc:6f:fc:78:d0:01:a1:4c:c0:07:d5:00:68:f2:58:
be:a6:af:ab:4e:68:e2:61:50:7e:f0:4f:2d:c9:ee:36:bc:0e:
16:34:c9:c3:fc:cd:b2:8d:e2:ca:e9:9e:44:60:18:f0:0a:b7:
0f:18:56:83:f6:6f:e8:19:ab:be:2a:9a:95:d9:da:21:2f:5b:
f4:c4:c5:76:61:94:b2:23:37:d4:51:08:36:4b:59:55:86:7a:
14:57:de:27:76:68:04:74:96:c6:44:69:e0:ae:1c:81:74:dc:
92:47:01:18:27:0e:5f:b9:3e:40:1c:2f:90:18:43:76:a4:d1:
58:35:92:6e:8a:c2:4a:9d:e5:04:0c:e4:71:87:66:3c:aa:1c:
c8:f3:91:29:fa:b3:85:43:0b:ba:ea:c5:b7:62:40:9d:4c:4e:
8b:52:eb:e1:2b:19:f4:7d:94:ae:72:cc:21:fd:1c:6a:26:a9:
89:74:aa:13:fd:7b:77:9a:eb:41:bf:54:ca:b1:6a:36:12:57:
20:71:3c:27:1e:10:08:99:6f:5d:ad:c5:6f:b1:5b:93:f5:66:
41:66:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:42 2025 by rpki-client