Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
File: hwCTRBAfUQ52oqserOnpp9kuTtU.mft (raw, json)
Hash identifier: omt8rcXIxtmqMoFHB9UEVzYR1CyNZwr9bedDgyEc8C4=
Subject key identifier: E1:B2:E6:4A:5E:3B:ED:F8:67:BB:FC:4F:EC:BF:64:57:AA:37:52:05
Authority key identifier: 87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
Certificate issuer: /CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Certificate serial: 01976F2C116799EF1A86E8D595D0FFA26B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
Manifest number: 07F2
Signing time: Sat 14 Jun 2025 16:00:48 +0000
Manifest this update: Sat 14 Jun 2025 16:00:48 +0000
Manifest next update: Sun 15 Jun 2025 16:00:48 +0000
Files and hashes: 1: hwCTRBAfUQ52oqserOnpp9kuTtU.crl (hash: lFOMVjWKmlNFjJUdCuMcpBWC6iD9mS6c3gHSiKJvshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:11:67:99:ef:1a:86:e8:d5:95:d0:ff:a2:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Validity
Not Before: Jun 14 16:00:48 2025 GMT
Not After : Jun 15 16:00:48 2025 GMT
Subject: CN=e1b2e64a5e3bedf867bbfc4fecbf6457aa375205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:d7:29:fb:86:d1:77:03:81:9f:49:be:78:
59:7f:b5:b1:53:04:99:d3:fb:f8:3e:fb:b2:f2:da:
01:91:42:9b:6c:a1:06:17:95:68:50:03:be:c4:48:
f1:7f:20:28:b9:f2:0e:45:c9:40:c8:53:65:a7:5b:
d3:d8:73:12:7b:6b:cd:16:a5:3e:d0:07:a9:5b:b2:
b0:14:0a:43:81:46:23:c7:c9:0f:7c:c9:7e:a7:8f:
00:52:5f:95:24:b9:58:ef:c3:41:df:c1:92:7f:5a:
eb:53:40:d3:78:ab:44:3f:51:10:ff:4a:0c:e8:5b:
51:5d:a3:9e:11:05:af:c1:57:21:d1:94:db:84:3b:
f7:3c:35:63:11:c1:b1:9d:e9:8b:bf:c4:fd:c1:68:
7e:67:1f:35:3c:ef:19:3f:cf:10:33:58:50:17:e8:
31:11:f7:75:4f:e3:29:2f:ac:b1:25:91:a5:3e:a2:
25:f2:df:b2:02:91:36:19:b6:5f:0e:7d:c5:86:11:
88:d9:90:b9:a6:76:96:26:ee:d6:14:91:3a:9c:46:
9a:99:bb:52:f8:ad:66:29:0a:45:8d:c1:f7:10:20:
35:e0:84:60:86:4d:30:58:77:16:68:9d:68:47:4a:
45:d9:df:88:a2:55:5d:46:1b:67:99:4d:4e:a6:04:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:E6:4A:5E:3B:ED:F8:67:BB:FC:4F:EC:BF:64:57:AA:37:52:05
X509v3 Authority Key Identifier:
keyid:87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d2:cb:74:e7:14:a1:30:14:b3:39:e0:90:58:57:c1:ab:39:
74:ca:0d:5c:d5:87:1a:f4:bb:7e:ac:8c:d3:17:c4:71:c8:d0:
11:79:10:9a:b1:77:3a:6c:4c:c5:c5:3a:02:32:91:20:ae:58:
fe:b6:fd:13:6c:b1:b3:9e:ea:e2:63:49:d3:09:4b:d0:6b:c3:
15:41:0f:26:d0:4d:36:63:51:9e:32:bb:05:d1:18:be:67:8c:
85:4a:22:3e:77:dc:56:55:c2:5b:22:62:c3:91:c4:2a:5f:3c:
ee:09:3e:3a:2c:78:22:4b:56:40:c1:9d:bb:de:b4:ab:6b:c9:
b0:f5:8e:9b:c6:5b:1f:ac:e4:8a:a7:7f:f8:be:d6:ef:4b:ba:
4d:d1:5a:25:ae:8a:bf:4b:23:2e:c4:e8:42:5e:a9:a0:1e:b6:
6f:1d:85:79:d9:0c:f0:01:c3:3f:dd:1e:b8:88:a1:aa:53:e6:
e0:85:9c:bc:7b:ab:29:6f:7d:ef:44:72:c2:cf:50:20:d3:d7:
d1:ae:28:a2:33:16:31:53:73:ea:d3:03:5f:0b:21:80:d5:cf:
cf:b9:e5:95:88:3a:16:5a:b3:90:4b:8e:b0:3c:1d:58:45:76:
9e:47:a0:1d:33:de:de:6f:47:15:6b:1b:b8:14:da:1d:6c:c5:
37:f4:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:42:14 2025 by rpki-client