Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
File: hqSVrmh0HnnVjjiGviqoeMSME7Y.mft (raw, json)
Hash identifier: NgU324WhaswCxGTUeiy9kyVpkZU+f3S2aQ14V/rha6c=
Subject key identifier: 4E:4C:24:CC:06:5A:64:29:86:FF:B3:7C:39:07:7A:1F:E4:EF:08:F4
Authority key identifier: 86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
Certificate issuer: /CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Certificate serial: 01977007845DD0004B5E4EF4E15B3B5614C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 20:00:30 +0000
Manifest this update: Sat 14 Jun 2025 20:00:30 +0000
Manifest next update: Sun 15 Jun 2025 20:00:30 +0000
Files and hashes: 1: hqSVrmh0HnnVjjiGviqoeMSME7Y.crl (hash: uONT86JAKUV+hR0zw48MyssNYQIRnWuQP84n8UuFkTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:84:5d:d0:00:4b:5e:4e:f4:e1:5b:3b:56:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Validity
Not Before: Jun 14 20:00:30 2025 GMT
Not After : Jun 15 20:00:30 2025 GMT
Subject: CN=4e4c24cc065a642986ffb37c39077a1fe4ef08f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:f1:e6:5a:56:19:f6:6f:f2:ba:aa:0e:fa:
c8:08:9c:8e:48:a4:3f:72:a7:ea:d4:9d:a4:e9:df:
66:df:17:82:f8:3e:d5:16:0e:ee:f9:a4:2a:e6:0a:
43:f6:43:c1:61:2b:c5:95:c6:42:40:62:2b:21:74:
dc:6e:67:06:d6:11:35:1e:2a:94:ac:5f:8a:62:ac:
e0:3d:77:cd:d1:7c:34:73:4a:dd:6c:fc:d1:7c:12:
0d:86:d2:d5:d3:82:df:af:f6:26:5c:1d:5e:b0:97:
d1:4b:b5:20:7d:1b:49:2f:e7:a0:b5:a1:d1:39:3d:
3e:2d:4a:b3:6c:f7:5c:dc:fb:05:93:a8:4f:3d:ec:
f7:f1:9d:d3:37:c1:88:a6:dd:23:d7:5f:9d:d3:d0:
ce:c6:f1:33:0e:e6:56:f7:71:ee:bf:92:7b:96:4d:
fd:a7:19:89:e4:68:03:98:9c:19:db:8b:73:da:89:
2a:a8:e5:d6:ac:24:0e:b9:14:7c:6d:5c:b8:49:4c:
41:49:55:74:44:7f:ec:f8:75:ae:cd:38:71:22:07:
bb:91:5f:a8:13:fb:85:d5:a3:62:62:18:95:ec:0d:
2e:9b:28:82:b4:50:7b:61:bd:ae:89:2e:aa:1a:7a:
0b:c7:e6:06:40:1b:93:e2:35:31:0b:65:97:93:47:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4C:24:CC:06:5A:64:29:86:FF:B3:7C:39:07:7A:1F:E4:EF:08:F4
X509v3 Authority Key Identifier:
keyid:86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:1d:89:0c:43:c0:86:1a:fa:25:1d:43:2a:ce:79:dd:50:
9f:8a:a2:48:fd:42:ba:4a:92:bb:02:54:12:fd:1c:db:46:12:
3f:b0:cb:3d:57:6c:7a:1e:c8:ce:cd:df:36:c6:7f:d2:f0:a7:
66:6f:b6:f1:ed:c6:a4:96:cc:13:48:7c:59:67:aa:e7:75:4e:
c6:73:f2:23:eb:6a:8b:e6:9f:5e:67:fa:85:d3:23:f5:6f:67:
ae:1f:ec:f6:25:d1:41:0d:a7:7a:eb:49:32:cf:80:8e:f8:a7:
de:1f:d1:8f:82:c2:9d:ee:a3:14:bc:f9:57:89:9c:61:94:fd:
3d:c3:1b:59:cc:35:52:74:66:7d:8b:10:f7:23:13:ac:54:be:
8f:d5:18:90:c9:05:3a:60:28:c1:99:52:89:ad:12:96:2c:77:
4a:3b:b6:5e:37:c3:d1:d7:ff:9c:de:00:f5:91:4c:53:27:b2:
a2:77:37:0b:2e:23:cb:9e:8a:b3:d4:bf:6d:35:f7:d4:27:59:
fd:0c:31:38:7a:a9:b9:42:6e:bd:72:9f:d4:40:e2:e4:a2:dc:
bc:8e:7b:d3:90:da:be:47:96:ad:ef:6f:1c:2d:c2:5f:95:04:
29:fa:0a:27:2b:fc:0b:4d:4b:34:1e:1e:fb:bd:f5:1f:65:c7:
83:34:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:50 2025 by rpki-client