Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
File: hqSVrmh0HnnVjjiGviqoeMSME7Y.mft (raw, json)
Hash identifier: Y0+SDnXBjnZo3Cw/hpVDUYrPxSD42WeYYXQ1TLIVSb4=
Subject key identifier: A0:44:39:7D:0F:9A:92:91:2A:B2:CF:FC:35:D5:17:2F:E6:79:21:56
Authority key identifier: 86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
Certificate issuer: /CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Certificate serial: 01988243272A4BEAF30066BAFD3519F400A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
Manifest number: 161B
Signing time: Thu 07 Aug 2025 02:01:35 +0000
Manifest this update: Thu 07 Aug 2025 02:01:35 +0000
Manifest next update: Fri 08 Aug 2025 02:01:35 +0000
Files and hashes: 1: hqSVrmh0HnnVjjiGviqoeMSME7Y.crl (hash: JkXRJxnO4m+p8WzOuySVnrwwRo1kr16rxz+ZHmZDjnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:27:2a:4b:ea:f3:00:66:ba:fd:35:19:f4:00:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Validity
Not Before: Aug 7 02:01:35 2025 GMT
Not After : Aug 8 02:01:35 2025 GMT
Subject: CN=a044397d0f9a92912ab2cffc35d5172fe6792156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:b2:20:35:a9:2b:70:62:f5:a5:d6:03:e2:
85:6b:fb:9d:55:74:83:8e:95:b1:c1:5f:b0:5b:08:
74:13:20:4a:12:d2:14:de:4e:28:c4:e2:c2:ce:2c:
be:8d:52:99:f6:60:9b:75:e3:36:60:53:67:ef:60:
38:06:75:81:dc:44:03:85:e1:a4:e0:e6:f3:68:c5:
58:0d:9f:11:e4:91:99:bf:12:1c:74:cb:3d:72:16:
26:b9:5e:da:37:90:4f:8a:f2:3a:6a:54:5c:14:99:
22:7a:77:2a:9e:25:c1:55:67:86:d6:c0:4f:dc:6a:
5d:0f:ca:a2:ac:b1:1c:e8:37:ae:8c:43:94:27:91:
fe:56:bb:6c:2e:02:64:39:ab:67:4b:dc:bd:ff:0c:
64:a6:e2:4a:47:b9:f4:85:97:7f:24:3a:d1:c6:7b:
a0:9f:0a:28:09:03:c4:35:80:a2:ad:28:77:fa:82:
17:f0:65:89:5d:2a:cf:5d:e0:71:6f:0f:22:c5:06:
4e:a2:c6:13:5d:d0:3b:f2:a8:c6:34:be:69:99:ee:
88:8b:47:2c:fe:91:8a:9f:2d:18:46:16:cb:ec:53:
21:3f:7b:32:14:b1:29:9b:25:82:a8:26:e8:d8:55:
54:39:16:ff:5d:d9:d7:83:23:bf:bd:50:fd:9a:8d:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:39:7D:0F:9A:92:91:2A:B2:CF:FC:35:D5:17:2F:E6:79:21:56
X509v3 Authority Key Identifier:
keyid:86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8d:e7:cf:76:a0:16:d7:6a:27:8e:03:3a:60:6d:1a:b5:c4:
92:af:57:38:03:5d:0b:d8:57:d4:1d:b6:5f:c4:7b:ae:88:34:
ed:32:85:2e:43:60:e0:11:8f:e8:ae:04:3e:a0:85:ba:0c:3a:
d4:ad:7f:43:87:f6:13:18:d5:63:c2:95:7c:6a:bc:72:ff:16:
1a:48:5e:74:c8:08:5e:af:9c:7b:66:f1:b3:8e:ee:84:1f:c0:
0e:44:b2:34:45:2c:78:25:22:e5:93:63:b6:27:3f:b9:7b:7f:
b6:12:f3:81:5e:a7:63:8c:ea:52:75:19:e9:40:c9:a9:6a:03:
df:4a:b1:1e:75:32:c2:78:c2:84:05:76:9a:83:bb:91:75:a4:
d1:7d:ee:98:16:33:ac:68:e4:72:e2:3f:cc:76:5b:a6:b9:24:
14:d9:a6:20:8c:6f:e8:b9:28:ab:10:53:62:7e:0d:54:ad:e3:
1a:22:af:1a:a2:33:90:1e:fc:68:48:d8:c2:8c:67:01:04:84:
28:55:e4:81:87:45:ab:c5:39:88:b8:2e:b9:83:c4:23:e6:6e:
1a:73:1f:d1:20:ac:3a:3b:87:7d:1e:cc:1e:3d:1e:c0:0b:5a:
74:17:5d:41:4e:ce:10:ef:52:ac:67:1b:8c:31:82:bf:93:ad:
2e:71:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:21 2025 by rpki-client