Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: 7yY3vBsmNYuWo500QAiq1W5kCiqKE4g6e3zM0w+eTNI=
Subject key identifier: BA:00:C1:96:E6:CD:CC:E5:52:B9:EC:B4:59:3E:90:C7:74:E7:63:D6
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 0197B7EAAB54F78E3AD94B2903649FF7A838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 0E89
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: KUbbCCzNPI3rhkSgejKmD5+uJHwihtL5+17TWz+/G0E=)
2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ab:54:f7:8e:3a:d9:4b:29:03:64:9f:f7:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=ba00c196e6cdcce552b9ecb4593e90c774e763d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:5e:b1:72:a9:5d:00:9a:6c:c4:5c:73:e4:
bc:23:52:3a:39:6e:a3:bb:15:2f:38:9f:f3:96:ae:
ee:2c:79:e9:34:ff:75:06:d4:6a:9d:9a:a6:40:b9:
90:2c:eb:c0:8e:05:c9:f1:f3:72:80:dc:64:11:bf:
38:b5:ef:c3:7f:a0:66:cf:b2:0a:ff:17:91:a1:14:
5a:29:30:4a:97:66:01:0c:67:bb:ab:c7:cc:c9:23:
b9:3f:e8:88:44:e3:c5:4d:f4:be:bd:7a:e0:79:7d:
3c:c5:fe:01:3b:5a:65:3b:a4:21:5a:5d:0a:91:b8:
27:bf:8d:30:8e:fe:51:91:03:5d:76:b8:c6:69:5d:
cc:38:30:ef:db:06:f5:c3:93:20:1a:4a:94:e2:34:
94:4a:cf:6f:c0:54:8d:4d:3a:8b:84:88:b8:1f:95:
b3:96:b6:93:15:b0:c6:1c:6d:95:f3:f2:b7:02:06:
ea:b3:c1:bd:81:d6:ff:b9:18:ad:6a:88:30:3a:ac:
b1:dd:a9:82:24:58:fd:ef:e0:13:5b:3d:ce:e6:22:
e7:b8:fe:6f:32:74:a4:18:22:4b:a0:80:e1:eb:be:
5a:81:7c:a3:6c:79:86:4b:df:95:63:89:aa:bb:a6:
a8:c2:3a:99:3d:f2:c6:45:b0:cc:85:6a:49:e5:c2:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:C1:96:E6:CD:CC:E5:52:B9:EC:B4:59:3E:90:C7:74:E7:63:D6
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:71:ce:19:91:d7:c0:fb:c3:23:87:79:02:3e:76:d1:01:61:
a0:38:cc:2e:8b:21:9b:22:17:9d:e1:db:0f:4a:5a:a8:ea:7d:
47:23:a2:69:49:b9:a7:eb:16:70:9d:b6:af:36:1e:03:e7:2a:
89:07:72:03:16:5a:8b:95:63:2c:d6:60:54:96:8a:55:aa:47:
e0:3c:e0:cf:d7:5b:14:6a:fc:f0:84:6f:b3:44:26:52:80:da:
fb:60:58:60:84:5f:75:75:39:85:c0:4c:ab:ef:67:9d:9c:a6:
53:37:8c:46:c1:e5:61:92:c8:c6:7f:78:86:91:85:94:47:c4:
1d:94:99:60:20:7f:1b:e8:fc:84:fa:4e:8e:c9:33:19:e4:8f:
3d:36:16:40:9e:57:20:aa:22:16:c1:c5:28:09:39:d3:cf:72:
50:74:de:33:fd:ee:cb:13:0c:b0:d4:23:da:5a:1c:cd:6d:b1:
85:69:54:60:dd:18:44:96:5c:0f:1f:05:25:8a:fe:10:4b:6f:
00:76:89:a0:e4:ae:d9:30:ac:d6:11:1a:d1:4b:0b:69:f6:1f:
02:11:17:b7:ee:a8:e4:af:b8:c3:0e:6e:ab:79:7c:e0:84:b5:
fd:7c:74:25:0f:67:c9:98:cb:1f:97:c8:56:d2:be:5d:d7:d9:
13:b3:9c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:36 2025 by rpki-client