Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
File: hwCTRBAfUQ52oqserOnpp9kuTtU.mft (raw, json)
Hash identifier: s1x2ngO6axMxbY8hPHJQ0DmIsWd46DX4zCzVkzewbOY=
Subject key identifier: 20:37:93:42:A9:19:2B:72:4E:A0:AF:3C:96:6F:6B:1C:ED:F6:57:74
Authority key identifier: 87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
Certificate issuer: /CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Certificate serial: 019873E31065C05D7996848790006E15DD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
Manifest number: 0879
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: hwCTRBAfUQ52oqserOnpp9kuTtU.crl (hash: x91r0BrNHJPac12WxlQuForHDG7NZpsheFugSt2P0Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:10:65:c0:5d:79:96:84:87:90:00:6e:15:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=20379342a9192b724ea0af3c966f6b1cedf65774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:fe:39:91:77:67:48:0a:f7:ae:75:1e:3d:
29:3f:3f:1b:69:f2:8f:e6:86:f9:c2:54:33:98:9d:
85:b0:cc:10:1c:f2:4b:94:c2:1a:66:b4:ad:f5:72:
45:34:30:d3:1b:1e:7f:86:e9:e1:05:24:2c:40:a5:
1e:42:60:e1:77:39:82:e4:58:fb:05:02:e1:be:ee:
b2:05:4a:00:40:7d:f5:4b:e6:88:ea:02:18:9c:c7:
14:c9:23:15:67:35:90:ec:65:60:80:0d:f2:bc:ef:
09:03:f4:d8:ec:cb:56:77:8e:3b:75:de:e9:d7:a2:
4a:f6:ce:84:47:60:6a:94:28:e9:55:f5:a5:fe:23:
75:65:1c:cb:61:58:62:20:1f:e6:fc:ae:63:f3:f8:
c5:d6:85:39:b8:8d:0a:8f:b9:ca:1d:d9:e3:3f:38:
43:4a:72:5e:6f:7d:d8:ed:2c:5f:d7:d2:01:9f:81:
b7:81:4a:64:a7:a0:e6:29:e7:96:c1:e2:fe:56:2d:
20:30:e9:69:83:2c:5e:88:ae:7b:96:b5:3c:73:a6:
9a:4a:64:3e:50:21:8f:fc:60:11:f3:bc:40:89:50:
2d:55:29:cd:b3:fe:68:a6:01:b7:31:10:16:0f:5f:
61:69:2d:07:2a:40:7d:5f:85:66:68:26:10:1d:23:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:93:42:A9:19:2B:72:4E:A0:AF:3C:96:6F:6B:1C:ED:F6:57:74
X509v3 Authority Key Identifier:
keyid:87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:11:a1:06:16:d1:30:d5:22:b1:dd:33:f0:8b:74:ca:cc:
5d:3b:7c:9f:6c:ae:e9:01:96:c3:ba:35:14:b6:bb:78:03:70:
ce:3a:16:e9:c0:36:ae:a5:31:1c:a1:b9:32:e9:92:fa:62:24:
1f:da:13:c3:b5:ad:d7:4d:9f:f1:36:7a:ad:07:3c:54:29:aa:
b7:39:48:de:73:69:b2:1c:13:6e:d3:45:71:93:09:90:f8:86:
ca:1a:46:3d:83:d5:77:78:52:95:1a:3c:06:fb:82:1c:64:2c:
38:c0:87:81:06:47:cc:7c:d3:72:de:9b:b6:d8:f7:f2:0d:ce:
eb:da:02:46:e4:6e:be:01:7c:52:5b:a7:a7:fc:78:42:d1:71:
50:cf:0b:ec:2c:c6:62:8f:34:4f:5e:be:85:fb:d5:08:c2:d2:
00:e0:22:fb:08:9f:19:ec:18:ed:e4:b4:96:35:8d:74:5e:49:
f5:ca:bc:71:b7:c2:df:45:fe:71:28:2d:dc:be:9d:44:d4:1b:
e4:ca:cd:49:6d:35:82:1b:a7:7d:35:11:a0:3e:fd:e9:09:84:
fd:98:8e:6e:24:2a:c7:3f:28:4b:61:34:04:5c:ab:aa:9e:5e:
cb:98:c1:2b:38:ea:93:ed:c8:e6:c5:63:90:17:4e:b5:2c:eb:
df:b9:fe:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4xBlwF15loSHkABuFd0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MDA5MzQ0MTAxZjUxMGU3NmEyYWIxZWFjZTllOWE3ZDky
ZTRlZDUwHhcNMjUwODA0MDcwMTU3WhcNMjUwODA1MDcwMTU3WjAzMTEwLwYDVQQD
EygyMDM3OTM0MmE5MTkyYjcyNGVhMGFmM2M5NjZmNmIxY2VkZjY1Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9/+OZF3Z0gK9651Hj0pPz8bafKP
5ob5wlQzmJ2FsMwQHPJLlMIaZrSt9XJFNDDTGx5/hunhBSQsQKUeQmDhdzmC5Fj7
BQLhvu6yBUoAQH31S+aI6gIYnMcUySMVZzWQ7GVggA3yvO8JA/TY7MtWd447dd7p
16JK9s6ER2BqlCjpVfWl/iN1ZRzLYVhiIB/m/K5j8/jF1oU5uI0Kj7nKHdnjPzhD
SnJeb33Y7Sxf19IBn4G3gUpkp6DmKeeWweL+Vi0gMOlpgyxeiK57lrU8c6aaSmQ+
UCGP/GAR87xAiVAtVSnNs/5opgG3MRAWD19haS0HKkB9X4VmaCYQHSNLBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCA3k0KpGStyTqCvPJZvaxzt9ld0MB8GA1UdIwQY
MBaAFIcAk0QQH1EOdqKrHqzp6afZLk7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTQ5MmQtOGM2MC00MDlkLWEwMDkt
ZDZhZGExMjgxNjY4LzEvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MTQ5MmQtOGM2MC00MDlkLWEwMDktZDZhZGExMjgxNjY4
LzEvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4ERoQYW
0TDVIrHdM/CLdMrMXTt8n2yu6QGWw7o1FLa7eANwzjoW6cA2rqUxHKG5MumS+mIk
H9oTw7Wt102f8TZ6rQc8VCmqtzlI3nNpshwTbtNFcZMJkPiGyhpGPYPVd3hSlRo8
BvuCHGQsOMCHgQZHzHzTct6bttj38g3O69oCRuRuvgF8Ulunp/x4QtFxUM8L7CzG
Yo80T16+hfvVCMLSAOAi+wifGewY7eS0ljWNdF5J9cq8cbfC30X+cSgt3L6dRNQb
5MrNSW01ghunfTURoD796QmE/ZiObiQqxz8oS2E0BFyrqp5ey5jBKzjqk+3I5sVj
kBdOtSzr37n+xw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:51 2025 by rpki-client