Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
File: hwCTRBAfUQ52oqserOnpp9kuTtU.mft (raw, json)
Hash identifier: bBMHHsMGjBLzy1d8NQe1S5z8k+lXO1wv9Ah1yYeOS+8=
Subject key identifier: C2:7E:BD:20:A8:08:47:42:5B:DB:2B:2D:C9:1B:A4:5A:FB:7C:9B:F4
Authority key identifier: 87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
Certificate issuer: /CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Certificate serial: 0196741E45B63FAE0C34A467DD13828DD3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
Manifest number: 0770
Signing time: Sat 26 Apr 2025 22:01:02 +0000
Manifest this update: Sat 26 Apr 2025 22:01:02 +0000
Manifest next update: Sun 27 Apr 2025 22:01:02 +0000
Files and hashes: 1: hwCTRBAfUQ52oqserOnpp9kuTtU.crl (hash: QGJ+SZQod8IQsbUMO+K5LihgXHYzWRpFqMb30YG8DXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:45:b6:3f:ae:0c:34:a4:67:dd:13:82:8d:d3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Validity
Not Before: Apr 26 22:01:02 2025 GMT
Not After : Apr 27 22:01:02 2025 GMT
Subject: CN=c27ebd20a80847425bdb2b2dc91ba45afb7c9bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:98:eb:40:6c:e7:39:95:f8:f4:89:ec:2c:
b5:82:41:05:06:bf:2d:20:05:d8:f7:85:77:df:b2:
ec:81:1b:f7:2d:d7:69:49:98:34:f9:aa:99:0e:9b:
ed:c1:64:73:a4:3c:06:12:1a:ce:95:fe:64:07:5e:
b6:60:1d:5b:a6:62:2b:53:d3:e5:aa:c6:cf:3b:4c:
63:4a:2d:38:11:76:1d:34:09:d1:d1:29:d5:fc:c7:
66:3f:d6:ca:a0:f1:26:2e:f4:df:e0:a7:ea:c7:28:
6a:56:e0:cb:44:ad:64:f3:ea:da:47:51:ac:82:d2:
eb:93:92:32:bd:12:23:46:81:06:2a:f2:ca:0c:e8:
36:16:e0:c4:f5:7b:1f:29:c5:1b:01:3f:31:55:92:
a3:41:c8:d3:cf:90:bc:6a:e3:3b:a7:14:f5:2d:c9:
4c:14:46:12:68:f4:ae:e6:e1:e7:ff:5a:30:84:d4:
3d:dc:8f:ac:a1:d8:ed:cc:2e:63:4e:e5:f0:42:e0:
90:d2:46:76:9a:7a:6f:5c:62:a6:85:87:8a:97:59:
cc:1f:6c:9b:20:49:23:6d:fe:bb:32:d8:26:cc:11:
5a:f1:5a:96:66:20:31:f9:79:f8:06:ef:02:09:d7:
14:19:bd:b2:6b:69:e1:8d:0f:75:2e:af:fc:b5:32:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7E:BD:20:A8:08:47:42:5B:DB:2B:2D:C9:1B:A4:5A:FB:7C:9B:F4
X509v3 Authority Key Identifier:
keyid:87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:96:cd:d2:58:c7:14:4c:a6:da:95:3c:7f:51:e4:4d:f8:d8:
fb:09:d2:3b:24:7f:82:93:33:e8:37:1e:97:d4:92:1e:7c:cc:
dc:f0:9a:cf:88:3b:31:47:02:7d:17:0c:a3:0e:f1:8c:55:99:
3e:f1:c6:e2:54:1c:63:71:74:e0:07:33:2b:9c:e2:7e:bb:62:
1f:76:0c:52:a6:d7:17:94:c8:dd:f9:37:c7:2e:9e:c8:9a:12:
55:e2:a0:b3:5e:7a:62:4b:2a:44:39:b1:0e:a2:01:21:00:4c:
7e:55:fd:5d:af:74:40:ec:8e:ee:a1:bf:16:bc:e0:df:68:0c:
2d:c6:c0:49:08:ba:ff:42:05:cc:ca:40:b7:81:8b:dc:7a:72:
dd:06:72:89:3a:04:26:f1:69:61:12:95:f5:51:14:02:0b:b8:
83:1f:fb:10:07:e5:3d:88:54:a8:47:20:54:e4:5a:7c:12:8f:
83:4a:28:e3:2c:61:48:9e:32:41:d5:b0:68:7c:13:a8:6a:bd:
5f:70:b8:9d:83:0b:e3:ed:09:62:dc:5b:66:b3:7b:d9:a8:2b:
d8:cf:07:7c:d9:7d:12:16:c7:05:91:4f:66:ca:a9:2b:f9:42:
01:b0:f5:1d:4f:b5:3b:1b:3d:28:e9:16:85:ff:4c:60:68:51:
82:87:b3:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HkW2P64MNKRn3ROCjdPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MDA5MzQ0MTAxZjUxMGU3NmEyYWIxZWFjZTllOWE3ZDky
ZTRlZDUwHhcNMjUwNDI2MjIwMTAyWhcNMjUwNDI3MjIwMTAyWjAzMTEwLwYDVQQD
EyhjMjdlYmQyMGE4MDg0NzQyNWJkYjJiMmRjOTFiYTQ1YWZiN2M5YmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEyY60Bs5zmV+PSJ7Cy1gkEFBr8t
IAXY94V337LsgRv3LddpSZg0+aqZDpvtwWRzpDwGEhrOlf5kB162YB1bpmIrU9Pl
qsbPO0xjSi04EXYdNAnR0SnV/MdmP9bKoPEmLvTf4KfqxyhqVuDLRK1k8+raR1Gs
gtLrk5IyvRIjRoEGKvLKDOg2FuDE9XsfKcUbAT8xVZKjQcjTz5C8auM7pxT1LclM
FEYSaPSu5uHn/1owhNQ93I+sodjtzC5jTuXwQuCQ0kZ2mnpvXGKmhYeKl1nMH2yb
IEkjbf67MtgmzBFa8VqWZiAx+Xn4Bu8CCdcUGb2ya2nhjQ91Lq/8tTJL7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ+vSCoCEdCW9srLckbpFr7fJv0MB8GA1UdIwQY
MBaAFIcAk0QQH1EOdqKrHqzp6afZLk7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTQ5MmQtOGM2MC00MDlkLWEwMDkt
ZDZhZGExMjgxNjY4LzEvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MTQ5MmQtOGM2MC00MDlkLWEwMDktZDZhZGExMjgxNjY4
LzEvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZbN0ljH
FEym2pU8f1HkTfjY+wnSOyR/gpMz6Dcel9SSHnzM3PCaz4g7MUcCfRcMow7xjFWZ
PvHG4lQcY3F04AczK5zifrtiH3YMUqbXF5TI3fk3xy6eyJoSVeKgs156YksqRDmx
DqIBIQBMflX9Xa90QOyO7qG/Frzg32gMLcbASQi6/0IFzMpAt4GL3Hpy3QZyiToE
JvFpYRKV9VEUAgu4gx/7EAflPYhUqEcgVORafBKPg0oo4yxhSJ4yQdWwaHwTqGq9
X3C4nYML4+0JYtxbZrN72agr2M8HfNl9EhbHBZFPZsqpK/lCAbD1HU+1Oxs9KOkW
hf9MYGhRgoez7w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:39 2025 by rpki-client