Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
File: hqSVrmh0HnnVjjiGviqoeMSME7Y.mft (raw, json)
Hash identifier: AANetUwm7FXus87w7hpA4Ne+C8RKM7h7OdVpLCGpSmo=
Subject key identifier: 82:D3:F6:1F:78:49:99:32:76:0D:8F:1B:4C:46:D2:68:23:4F:45:53
Authority key identifier: 86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
Certificate issuer: /CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Certificate serial: 019A51BE634C7F1A31BD10160D9FCEC7F609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 02:00:23 +0000
Manifest this update: Wed 05 Nov 2025 02:00:23 +0000
Manifest next update: Thu 06 Nov 2025 02:00:23 +0000
Files and hashes: 1: hqSVrmh0HnnVjjiGviqoeMSME7Y.crl (hash: Q+XQzuyX0dpYv2TxC9YG4J7RHKM8zgFGoGvJ0rgz6VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:63:4c:7f:1a:31:bd:10:16:0d:9f:ce:c7:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Validity
Not Before: Nov 5 02:00:23 2025 GMT
Not After : Nov 6 02:00:23 2025 GMT
Subject: CN=82d3f61f78499932760d8f1b4c46d268234f4553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:44:5f:e6:f0:d9:d1:67:50:3d:53:f6:83:
4a:ee:52:ac:e7:99:08:f5:fa:ff:cb:0d:a0:5b:ab:
07:3b:f4:2f:bc:4d:f8:67:03:ae:e6:74:8b:93:2b:
e8:eb:cd:3b:83:25:c3:6a:00:38:66:5f:54:59:d3:
68:18:50:a9:48:33:1f:55:06:ed:37:22:47:7f:d3:
2e:53:f2:17:10:0e:07:b5:e4:cf:3f:8e:cb:0b:c1:
e0:ac:36:e9:9e:c5:1f:b3:a4:af:e5:2a:83:11:9d:
15:47:76:bc:03:58:cf:b1:3b:72:45:5b:f1:4f:71:
a5:f2:bb:bb:3f:12:a8:2c:ef:4c:6f:d3:c4:05:e8:
92:5c:ed:27:72:7a:84:a7:db:12:7a:74:3e:b6:c3:
48:3e:70:22:81:df:92:85:eb:77:8d:d5:69:1b:35:
c2:57:47:88:0e:35:ce:53:89:21:8a:ea:d0:89:06:
17:7d:ef:12:4e:ca:60:78:b9:9e:18:86:b8:ce:23:
b6:50:b2:8b:0b:0b:4d:3d:29:7b:86:a8:df:bc:5b:
95:a8:7b:59:1b:2b:6b:48:22:82:ff:f4:0e:f8:63:
e0:00:59:bc:e4:e5:90:0b:fa:74:ff:06:ab:6b:35:
51:3f:fe:10:b1:e8:e6:05:a8:65:1e:9c:82:47:4f:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:F6:1F:78:49:99:32:76:0D:8F:1B:4C:46:D2:68:23:4F:45:53
X509v3 Authority Key Identifier:
keyid:86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0e:b6:29:e3:96:b9:eb:f7:9c:d1:61:a6:de:d0:e2:85:63:
cb:fe:d3:81:61:27:21:2f:5c:6e:fa:a3:1c:b2:9a:78:ff:c0:
00:8d:bf:5d:7c:91:34:56:f8:dd:1c:a6:1d:67:38:48:5e:03:
4a:24:92:76:d9:76:30:76:9e:f7:4e:27:37:8c:f2:8c:47:eb:
04:63:01:56:af:83:94:d5:fa:e2:41:6a:21:05:8c:db:01:63:
10:38:4e:2d:81:a1:21:bf:f4:35:86:21:c9:d8:d2:73:60:ba:
13:2e:6b:8d:5e:2f:36:30:be:64:21:29:bd:73:29:78:fe:42:
54:50:3d:56:ea:a4:af:f1:b2:04:d9:0e:ca:9c:27:b2:2a:fd:
84:29:fb:41:96:7e:42:4b:e8:24:60:04:c1:a2:98:50:73:d2:
6d:30:b6:40:c3:1f:10:52:44:21:cf:c5:18:3f:d7:e1:99:70:
ba:ab:65:52:89:3b:73:27:db:b3:89:3f:aa:d9:3d:c1:e7:fe:
2e:10:30:2b:c0:23:92:9b:e8:95:49:52:b3:7f:62:b9:92:cc:
f4:28:08:93:7e:96:ca:93:4a:9f:4b:5b:b9:83:26:06:6a:b0:
84:00:9d:85:17:cc:0a:1c:cc:84:22:b6:27:92:10:be:f8:f0:
8b:76:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:38 2025 by rpki-client