Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: +8ZdLNkSF1oWcPHYUmmfQUP6+i+47+Gp69poo/R+nTQ=
Subject key identifier: A6:E8:A9:4E:22:65:0F:43:4D:44:A6:50:99:F0:06:07:D1:C3:F9:74
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 0198D7A8AB623E00B838C74A04A13371AB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 0F1E
Signing time: Sat 23 Aug 2025 16:00:11 +0000
Manifest this update: Sat 23 Aug 2025 16:00:11 +0000
Manifest next update: Sun 24 Aug 2025 16:00:11 +0000
Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: 1IP/FJc0Z5dcUak07jNBdMtR6OQBq2KVBcntMJvSqj4=)
2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ab:62:3e:00:b8:38:c7:4a:04:a1:33:71:ab:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Aug 23 16:00:11 2025 GMT
Not After : Aug 24 16:00:11 2025 GMT
Subject: CN=a6e8a94e22650f434d44a65099f00607d1c3f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:9b:9e:9b:e4:ed:b6:ab:bf:68:f3:a6:79:
a3:e0:05:53:cc:da:4f:8d:89:a5:8c:c4:d4:63:b5:
04:7f:88:64:02:dd:97:23:22:6a:93:91:85:c9:83:
0a:ad:36:af:bc:19:e4:fe:1d:98:78:52:00:6e:65:
f7:20:ae:1e:d3:b9:e0:ea:9d:19:ac:1a:30:08:6d:
bc:26:08:9e:cb:18:b5:e9:44:da:7e:0d:37:24:40:
7c:e1:77:23:60:20:be:d4:bf:4a:ea:02:75:06:86:
ca:db:f6:fc:33:f7:8a:bb:cb:91:b0:9c:3f:f5:ed:
b8:02:77:cb:6a:c9:13:b2:01:6f:bf:20:b6:be:17:
d0:d4:2e:cc:d5:a8:00:1a:9c:de:89:52:18:76:d3:
b0:3f:87:3f:75:f9:aa:71:3b:b5:ac:70:b5:b1:a5:
a1:0d:0b:69:4d:7e:23:e4:73:2d:68:7d:cb:39:54:
80:e9:a2:da:dc:70:20:2e:ec:c3:61:91:25:6d:b3:
14:16:e2:d1:b4:a7:c3:cd:5f:35:41:ae:89:2c:12:
8a:90:d6:bf:97:f5:95:45:ec:3b:99:7e:b2:75:60:
d4:0e:4e:33:95:11:83:19:eb:60:f0:88:28:0a:a9:
5e:d6:07:62:8c:51:a5:92:ea:6d:6f:0d:b3:e2:07:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E8:A9:4E:22:65:0F:43:4D:44:A6:50:99:F0:06:07:D1:C3:F9:74
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:54:99:83:8f:db:79:e5:ec:6b:b7:67:86:b0:9f:70:08:d3:
46:00:48:cf:ee:83:89:b4:a1:fc:62:88:d6:9f:49:89:d9:85:
ee:fb:3a:e7:08:16:42:d1:75:60:e0:11:a9:b4:ed:ff:69:d4:
1d:14:12:c1:48:df:cb:37:7c:00:fc:00:e5:31:ca:ef:b5:eb:
32:34:e1:12:22:a8:44:ec:9e:8d:bc:62:27:c1:d5:fa:64:e0:
60:8e:69:bf:9f:7b:f4:0c:14:11:f1:b4:a1:42:a9:87:09:2e:
2e:d3:f8:15:7f:27:a2:3e:bb:bf:24:6c:c9:e7:cf:15:d5:4f:
d9:0e:4a:5c:be:c7:71:08:ad:7f:38:aa:90:17:88:15:63:6b:
1c:28:11:52:e1:46:ae:68:83:9d:b4:3c:cd:b5:20:f7:bf:2c:
31:47:9c:2d:d0:40:c5:c4:23:d2:2d:62:66:27:f5:cc:0f:9d:
86:c7:8c:55:79:3f:80:5f:0e:61:ab:5f:c5:e1:68:6e:2d:63:
5b:a6:70:34:2e:74:3a:03:8b:89:3d:61:63:47:e4:0b:17:55:
4b:74:0a:ad:f2:9d:b0:6e:46:e6:f9:d0:4c:2d:dd:c7:a7:ed:
8b:04:d8:08:62:10:c3:26:76:37:f6:59:9f:20:95:88:c3:43:
84:72:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:45 2025 by rpki-client