Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
File: hqSVrmh0HnnVjjiGviqoeMSME7Y.mft (raw, json)
Hash identifier: dzqC/VxR1OdVjSdtnw4BybgvLxhkXqBN7voPeyb04ok=
Subject key identifier: 9B:9F:BB:56:4A:F7:F6:D3:99:3A:6B:CD:5A:66:E1:D4:87:13:FB:0D
Authority key identifier: 86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
Certificate issuer: /CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Certificate serial: 01984E1E4056920043B324270FF0E489CCBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 23:01:02 +0000
Manifest this update: Sun 27 Jul 2025 23:01:02 +0000
Manifest next update: Mon 28 Jul 2025 23:01:02 +0000
Files and hashes: 1: hqSVrmh0HnnVjjiGviqoeMSME7Y.crl (hash: FGcJ3LJ2bMPUcbEme2y+RgQYpsGnKdc3sYtob4zj1sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:40:56:92:00:43:b3:24:27:0f:f0:e4:89:cc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a495ae68741e79d58e3886be2aa878c48c13b6
Validity
Not Before: Jul 27 23:01:02 2025 GMT
Not After : Jul 28 23:01:02 2025 GMT
Subject: CN=9b9fbb564af7f6d3993a6bcd5a66e1d48713fb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:eb:6d:27:7b:1b:51:ba:f0:14:8f:19:0f:
9a:25:cf:54:b3:94:4e:97:bb:36:1e:5d:9b:73:70:
d0:9c:13:cb:58:89:42:93:87:2d:26:f3:7d:da:90:
6c:1f:2c:96:ef:a7:af:8b:6b:25:77:23:6a:8c:85:
a9:25:ad:da:19:86:83:60:5e:10:be:6d:61:aa:45:
cd:46:a5:98:94:f4:5d:14:38:db:65:7b:0d:70:6f:
78:d7:9b:fb:0f:dd:3a:89:d0:6e:9e:2e:df:4e:c3:
20:0c:aa:6d:d3:d3:cb:eb:f2:6d:1c:3d:61:e9:90:
f1:92:3e:7d:84:7d:de:1b:b4:a8:7a:52:62:37:4c:
ad:77:a4:5c:aa:46:83:e9:6e:3e:dd:9a:22:c0:72:
79:6f:79:e2:da:96:dd:32:ba:11:65:f7:97:72:35:
21:dc:60:22:f0:4e:56:ea:42:13:14:2e:df:f1:ae:
09:02:dc:a6:92:6c:bc:e5:54:e8:63:67:1a:ce:06:
e5:4f:9d:ff:9e:1c:f9:bb:73:d2:e9:72:23:df:53:
d4:45:92:80:5a:8a:d0:17:14:b3:e5:2d:7d:bb:d6:
4e:42:d4:2e:68:c0:d6:66:eb:6c:ef:c9:83:13:39:
3d:5e:a0:df:cc:20:a7:e4:0a:0d:0d:10:94:22:1d:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:BB:56:4A:F7:F6:D3:99:3A:6B:CD:5A:66:E1:D4:87:13:FB:0D
X509v3 Authority Key Identifier:
keyid:86:A4:95:AE:68:74:1E:79:D5:8E:38:86:BE:2A:A8:78:C4:8C:13:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqSVrmh0HnnVjjiGviqoeMSME7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/15c39c-f7d4-4a1f-a49a-4918b02742c7/1/hqSVrmh0HnnVjjiGviqoeMSME7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:66:cd:2c:ba:d7:10:d6:d1:71:5e:5c:63:22:f6:72:26:61:
e8:96:6a:0b:fb:02:bd:8b:a0:78:fb:a2:83:f7:d7:dc:d7:c2:
cd:ec:82:29:68:0f:e6:90:a6:b4:77:3c:0b:08:2a:e8:89:c5:
7b:9a:ac:8a:2e:64:f9:ab:25:9b:fe:fe:80:9a:47:db:8a:dc:
5b:b7:1a:af:a7:ad:eb:d5:8c:a3:12:b7:6c:34:ae:7c:c0:04:
f1:ca:2b:65:37:84:53:c4:da:d7:b7:c3:5a:16:56:a7:0c:70:
70:25:13:3c:f1:13:ef:d9:21:d7:84:da:a4:0e:5e:82:29:c3:
91:a1:8e:44:2a:38:07:12:79:40:3c:bf:93:9b:0a:f0:e0:f8:
58:41:d3:6b:cc:50:e6:02:5e:54:ed:4b:af:5c:82:e9:a5:aa:
de:a4:c5:1f:d0:f2:f4:ea:5d:c2:29:6a:5e:06:22:86:8d:fa:
5e:b8:2e:e5:da:5a:a7:5d:64:05:8b:a6:12:75:57:1d:fc:e3:
2f:d9:22:74:0f:ca:94:6b:eb:e0:76:45:69:23:77:11:6b:a1:
c3:36:27:e4:0a:da:ed:fe:25:6a:27:17:b4:95:0f:69:63:85:
ac:5c:c9:2c:f9:33:87:72:4d:61:c7:17:e9:00:6f:23:42:33:
4a:7e:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:07:08 2025 by rpki-client