Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
File: hqSVrmh0HnnVjjiGviqoeMSME7Y.mft (raw, json)
Hash identifier: SAkiV5zHRczpHZDCdWeSWwoqKVPmsBhcoC/iLWt2iV8=
Subject key identifier: E8:21:D6:ED:DA:FC:FE:AD:A5:AF:07:67:35:83:65:88:80:45:08:A0
Authority key identifier: 86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
Certificate issuer: /CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Certificate serial: 019676E7A2455FBE5AF47D637D040CE3DD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 11:00:13 +0000
Manifest this update: Sun 27 Apr 2025 11:00:13 +0000
Manifest next update: Mon 28 Apr 2025 11:00:13 +0000
Files and hashes: 1: hqSVrmh0HnnVjjiGviqoeMSME7Y.crl (hash: DM0/XHNnz3hAtXaDqSTi69WP54wzXsAd2SFZ73g21wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:a2:45:5f:be:5a:f4:7d:63:7d:04:0c:e3:dd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Validity
Not Before: Apr 27 11:00:13 2025 GMT
Not After : Apr 28 11:00:13 2025 GMT
Subject: CN=e821d6eddafcfeada5af076735836588804508a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:f0:de:22:c5:b0:39:e5:c7:ad:44:88:54:
b8:bb:0f:ca:31:d5:55:b2:11:a3:0a:d0:d3:a1:44:
a1:b5:1e:d2:34:b7:e0:2a:c1:9f:39:b8:6e:22:70:
58:4e:14:a2:6e:35:02:33:ac:08:d2:c8:f6:21:e3:
68:6a:a9:59:98:5c:43:3a:b4:90:f2:42:97:a6:cc:
4b:89:06:52:26:6a:2d:91:5a:43:d5:a7:de:0e:86:
8e:d8:88:49:40:de:53:91:be:2d:bc:e0:0c:0a:23:
73:39:06:a2:e5:ae:55:5a:4a:1d:48:2f:bd:69:40:
68:60:80:39:0f:c5:32:7b:34:b0:59:7f:61:f5:f0:
32:cb:ea:79:27:8c:33:01:e2:f7:8f:83:72:72:53:
72:55:b3:4d:af:e8:33:b6:dc:7e:04:01:7f:b9:09:
53:6f:5c:67:f6:d0:66:9f:43:52:09:3b:a0:ce:1f:
d5:02:a3:3d:03:3d:93:95:39:66:25:cf:ab:26:89:
1f:1b:59:f9:9d:a8:8b:d4:b3:73:2a:be:39:75:db:
50:1c:92:f0:d6:19:28:ed:da:6b:3d:56:13:37:b0:
9c:e0:6f:73:f0:35:f0:a7:97:cd:e6:66:a4:59:02:
31:fb:31:96:36:30:bb:02:ba:66:15:c0:f8:82:8e:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:D6:ED:DA:FC:FE:AD:A5:AF:07:67:35:83:65:88:80:45:08:A0
X509v3 Authority Key Identifier:
keyid:86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0d:4a:76:9c:11:08:7d:ea:d6:b5:76:fd:1c:f5:c6:d5:a6:
c9:26:3b:ef:03:b1:b6:1c:d4:6c:b9:d5:bd:26:fa:0c:9e:5d:
b0:e0:e3:cb:89:dd:30:5b:fc:fc:fc:cb:73:48:5b:88:14:3c:
f4:2c:67:33:a9:bb:bf:71:e3:fc:24:a2:fe:ea:f6:f7:48:c6:
f4:62:ff:1b:e7:d3:1a:df:7d:52:30:ec:0f:18:de:74:5a:81:
36:da:12:51:ed:a3:04:ad:ed:d5:cf:92:e3:4f:b7:40:af:fc:
0c:f3:e0:a7:ab:fa:a3:aa:6a:a5:51:5f:83:71:1f:e0:16:83:
18:48:86:d6:0e:43:1c:24:a7:ea:fa:e9:53:e0:70:61:ec:de:
e2:8c:b7:16:62:ad:25:80:ad:fb:6b:f4:ee:52:e8:5a:3c:d0:
84:95:99:2b:8a:4d:78:88:5e:c9:a1:a4:74:bd:f8:51:3c:8b:
e3:27:3d:2f:0f:d1:78:84:f6:70:26:8d:79:26:32:29:3a:67:
82:da:66:38:f0:db:e6:5e:5e:32:12:b3:85:37:b4:7c:8e:52:
05:15:36:47:43:44:4d:1c:20:d5:1d:bd:98:f0:47:4b:09:e6:
1e:af:b9:25:49:60:34:94:0e:c7:4a:7f:be:de:ce:f5:e0:09:
f7:63:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:19 2025 by rpki-client