Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: +TbpBGi3x3lWHT2lBPl2PS8bgdXZBh/wUYLnkLtxZwg=
Subject key identifier: 1B:DE:E0:D4:D4:5E:F8:DE:44:D8:C3:C8:FC:1C:7D:94:84:E3:C6:FB
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 019848C04C98DD5F6EEF675535CCC387ED23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 0ED4
Signing time: Sat 26 Jul 2025 22:00:18 +0000
Manifest this update: Sat 26 Jul 2025 22:00:18 +0000
Manifest next update: Sun 27 Jul 2025 22:00:18 +0000
Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: 31oKzvPu2Z4XJxgJsnOqdl3VUwrzgoi08hWNd3c7OCg=)
2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:4c:98:dd:5f:6e:ef:67:55:35:cc:c3:87:ed:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Jul 26 22:00:18 2025 GMT
Not After : Jul 27 22:00:18 2025 GMT
Subject: CN=1bdee0d4d45ef8de44d8c3c8fc1c7d9484e3c6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:3a:31:fb:bd:2c:ae:dc:e1:de:0c:fe:a0:
fc:1d:ef:36:c1:bc:43:ac:da:d4:0a:b3:45:62:95:
1b:9e:96:fb:34:72:0b:62:4c:05:b8:ab:dc:72:43:
9b:70:0a:c0:98:9d:fb:83:5e:19:85:83:23:e4:75:
e8:4a:f6:5e:2c:24:28:b5:a0:3c:3c:a2:f2:fb:5d:
0e:f9:88:a7:0b:d2:d7:fd:f5:3f:c4:fd:ed:50:91:
9e:1c:09:f1:fc:cb:23:eb:11:16:d0:02:d4:58:10:
17:16:81:b3:0f:c7:22:79:56:8c:a4:e4:e3:e5:3c:
10:2d:5f:81:71:77:aa:0e:0b:96:fa:d2:93:a7:78:
55:a2:39:c1:b4:2d:13:37:0d:f4:c4:99:5c:9b:28:
22:06:91:84:f8:d3:56:f5:aa:4f:9e:ca:2f:1a:77:
f6:0d:d1:52:da:ec:12:f2:7a:49:2d:67:28:49:5c:
fc:91:55:0d:cf:d3:aa:fc:d4:15:13:11:d6:9c:98:
14:52:25:ff:cd:20:90:91:09:3c:d3:c2:1e:8d:ec:
c4:4b:93:d0:f6:64:c3:ed:63:89:90:0a:db:60:88:
11:f2:64:61:86:94:f5:92:82:4f:29:30:8d:3f:27:
99:35:12:79:93:5b:23:c6:66:ce:73:3b:06:54:16:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DE:E0:D4:D4:5E:F8:DE:44:D8:C3:C8:FC:1C:7D:94:84:E3:C6:FB
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2b:f7:2f:94:e0:3b:67:91:b1:d8:f1:d4:58:26:05:f1:7e:
34:a2:ed:26:03:bb:97:d0:83:b7:1e:8b:e8:68:d7:e9:4e:d2:
cb:3f:27:2b:e7:5d:72:59:b5:b1:b2:91:ab:17:97:b2:ab:49:
59:26:5b:d3:cc:ad:a8:73:a0:6f:48:10:65:1c:89:60:e3:bd:
f9:42:71:18:7c:80:31:de:a2:04:1d:a9:64:b7:bc:8e:b3:d5:
82:68:dd:1c:c2:4b:a8:89:87:f7:cc:26:fe:60:20:70:da:d8:
8d:7e:a2:09:c2:06:08:6d:49:47:d1:c6:29:37:00:8e:a3:1c:
6e:6b:ef:cb:ee:d2:bc:1e:eb:52:e5:87:94:19:dc:e6:1b:b3:
ad:53:a2:71:42:b3:57:b9:ca:b9:6a:8a:24:b4:4d:71:71:3b:
9b:b2:db:6e:f9:bb:42:45:2d:e1:30:81:39:ed:7c:fc:0c:29:
1f:0c:7d:b3:24:83:4c:da:60:ef:dc:fe:bb:14:6d:d6:df:f5:
21:b4:ae:ee:81:13:a3:4e:5c:cf:8a:a9:37:b3:86:36:39:d9:
cd:77:4a:90:f1:ad:1b:43:21:ab:86:90:da:eb:f1:01:00:e7:
aa:10:77:8e:95:33:da:b9:94:6c:bf:3a:43:04:f7:89:29:4d:
e3:bd:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:14 2025 by rpki-client