Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: rjhJz9tL0Ytxhv1gQ8/jzHsd7T1bxG1n9ddbrdllGiw=
Subject key identifier: 34:9C:5F:AC:69:F6:80:8A:B2:12:EB:DC:F8:45:69:D5:F0:58:58:3C
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019896A5A7E540AD4942124DC32696522111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 01:01:35 +0000
Manifest this update: Mon 11 Aug 2025 01:01:35 +0000
Manifest next update: Tue 12 Aug 2025 01:01:35 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: UvAgr++ab+p2w//EJoe4OQIVEZcmvN2h7PnkRtqcSOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:a7:e5:40:ad:49:42:12:4d:c3:26:96:52:21:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Aug 11 01:01:35 2025 GMT
Not After : Aug 12 01:01:35 2025 GMT
Subject: CN=349c5fac69f6808ab212ebdcf84569d5f058583c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:c0:75:9d:f3:53:b8:07:99:15:f1:0c:3e:
d2:ed:ad:0d:58:b3:48:fc:b2:32:e9:ea:64:ee:41:
88:56:8f:c1:d2:12:5d:0a:38:d3:69:07:7d:77:33:
06:f6:ba:b4:c0:1c:c6:e1:d3:93:e2:10:45:fe:fd:
b7:ae:de:53:78:12:6f:ea:40:86:15:e1:de:f1:20:
8e:a4:85:b8:50:eb:e6:c7:d1:ac:f3:39:8a:60:ce:
70:a2:c0:ed:9f:a1:a3:56:30:8c:13:19:8c:d6:a8:
52:95:ff:98:c2:f3:bb:42:37:5b:4f:0f:c2:d3:a3:
72:20:34:bf:46:ae:eb:65:27:f9:ba:7b:dc:8f:8e:
48:22:96:51:7d:c7:5a:3e:c6:9a:f2:9a:5f:5e:21:
00:6c:10:2a:9f:74:32:a4:6f:83:f5:25:ab:e2:cf:
7f:11:29:f7:bf:92:17:b0:a9:de:ac:aa:e3:40:db:
ad:26:8c:96:2f:40:01:4e:03:35:6b:81:43:0b:fb:
af:56:a8:eb:3d:2a:31:76:e6:7a:47:14:ae:6b:33:
a6:47:42:ba:85:4b:38:3e:c1:52:7e:63:04:f9:8c:
c9:43:d6:03:b6:ab:f3:18:e3:95:17:ab:2d:2f:f5:
a0:b4:12:66:d1:ca:21:ad:90:65:b4:a1:3c:2c:49:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:5F:AC:69:F6:80:8A:B2:12:EB:DC:F8:45:69:D5:F0:58:58:3C
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:14:b7:4f:a1:a8:2b:a7:7e:e6:2b:a2:c6:b5:b9:63:24:08:
1e:76:0b:72:8b:3e:c3:bc:6f:da:31:fe:35:85:b6:e4:cf:0d:
89:17:21:35:23:43:13:25:ad:2c:b3:2a:67:e7:85:17:ab:01:
7b:23:db:75:67:0e:25:3f:e9:76:c9:59:93:5d:85:59:94:c1:
0b:e3:db:49:02:20:70:27:ab:50:8b:90:fb:3f:da:e6:2f:90:
a5:eb:00:3e:28:f3:65:fb:9f:43:f8:b1:4d:57:a2:6c:e2:05:
42:2b:4d:7b:87:fa:62:d6:98:28:0f:29:4b:2c:e1:16:00:71:
ed:76:44:de:1a:6f:99:11:dc:0e:cc:5d:07:36:83:b7:88:0c:
ec:65:8f:2e:b3:00:b9:fe:ce:5f:7d:e5:f0:ec:4c:a2:18:fa:
9b:bf:35:2b:f6:08:78:57:e9:96:72:12:57:d0:6f:1e:e1:75:
e9:c1:6f:81:d2:07:3c:e3:30:59:66:c5:af:1f:5d:6d:62:26:
42:54:4c:04:75:ca:f8:1c:a0:30:80:6b:da:52:56:08:96:db:
50:a6:dd:a9:ed:51:7f:a1:da:8f:3a:65:b2:ad:d5:64:a6:39:
dd:71:59:6b:bf:75:4d:ac:79:3b:b3:10:b8:06:7e:3f:0b:26:
ac:0c:1a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:02 2025 by rpki-client