Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.mft
File: hEnGCTJcOmYCBHJgydMAE1CVuLg.mft (raw, json)
Hash identifier: E29zHjuD+SWLoRXEsi5atZaTPgm4J8e0opgrmY8MU0E=
Subject key identifier: 69:0A:75:A0:F1:60:A7:00:87:58:C5:7E:BF:78:9C:7E:4E:A7:6D:9B
Authority key identifier: 84:49:C6:09:32:5C:3A:66:02:04:72:60:C9:D3:00:13:50:95:B8:B8
Certificate issuer: /CN=8449c609325c3a6602047260c9d300135095b8b8
Certificate serial: 0198D4DFFF5AFE22D708A37DBEC31E69BC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEnGCTJcOmYCBHJgydMAE1CVuLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.mft
Manifest number: 061A
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: hEnGCTJcOmYCBHJgydMAE1CVuLg.crl (hash: /JQMgoFQODG/2YtwxtINNhTWWXjPNcqp0wnrBrNxB08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEnGCTJcOmYCBHJgydMAE1CVuLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ff:5a:fe:22:d7:08:a3:7d:be:c3:1e:69:bc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8449c609325c3a6602047260c9d300135095b8b8
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=690a75a0f160a7008758c57ebf789c7e4ea76d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:e7:16:04:82:b4:0e:87:0a:18:c3:8c:71:
75:66:4b:41:cb:ca:2c:ce:f3:ca:f5:82:ab:51:16:
59:4e:1f:ea:e1:47:87:59:ae:e5:61:24:b6:0a:4b:
35:f8:9c:dc:85:97:18:58:85:6c:52:de:99:f5:dd:
37:c8:47:96:07:bd:de:58:d3:50:98:95:5c:9a:59:
7b:06:87:43:64:4c:86:dd:d4:2c:21:1a:da:2a:26:
32:1c:64:07:d4:63:65:fc:ac:7d:87:7b:c6:93:18:
4b:4f:60:30:24:07:13:82:98:f3:8d:ed:93:ce:22:
6e:43:ae:fe:e2:68:a9:fb:33:a9:61:ea:0a:e7:24:
9e:1e:59:c9:63:67:ee:76:ed:bc:b6:c8:0b:7a:7c:
e2:d4:2d:ca:4f:ab:d2:9e:39:2b:ac:d1:51:49:a2:
27:25:16:09:76:9e:f0:a7:43:0f:0b:3d:38:ad:40:
71:97:e5:de:4b:a1:9a:2a:d7:0f:f8:04:95:2c:59:
43:9e:5b:77:a8:b9:41:a4:7c:17:dd:2c:cf:ae:c1:
e5:4c:46:8a:d3:8c:14:d5:d1:6a:0a:3a:7d:29:51:
e0:b2:a1:8d:85:d6:26:1c:5d:03:45:b9:86:b4:42:
e4:09:ca:9f:99:78:56:ea:8b:e2:c3:f3:6c:c9:2d:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:75:A0:F1:60:A7:00:87:58:C5:7E:BF:78:9C:7E:4E:A7:6D:9B
X509v3 Authority Key Identifier:
keyid:84:49:C6:09:32:5C:3A:66:02:04:72:60:C9:D3:00:13:50:95:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEnGCTJcOmYCBHJgydMAE1CVuLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2edfb1-cc91-4893-a14e-688f8fa22e98/1/hEnGCTJcOmYCBHJgydMAE1CVuLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:de:c5:87:96:a4:e9:a8:8d:36:f7:22:f8:0a:26:d7:7e:
bb:ac:0e:6d:70:f2:0f:c6:8b:1b:89:1f:8b:5b:0f:a5:6c:e5:
1f:dd:87:d9:73:97:1f:d4:6b:1d:45:34:bb:1c:6e:c1:90:bb:
fe:69:53:be:98:bd:6c:5f:fc:cc:49:25:b0:96:53:ba:5b:42:
d5:71:d7:1f:c1:0c:27:3a:d4:a0:6e:43:bb:81:c7:20:ca:29:
a6:e0:7d:1d:dd:f9:0f:cd:4e:55:4b:d0:5f:6a:0b:75:8b:10:
d9:5b:66:79:45:13:c7:7c:99:1f:41:aa:cd:e5:9c:32:76:7a:
14:16:8b:43:f5:e0:fa:8e:fd:70:75:96:2c:54:2c:fb:8a:6f:
52:6f:18:b0:e0:3a:e6:b3:ab:d9:e2:7d:fe:5f:b2:1a:ec:f1:
d4:c0:58:75:0f:05:16:15:43:06:93:7b:bd:61:80:9f:74:9a:
8b:a3:b7:80:61:7b:1c:0d:58:d2:e3:7f:e9:4a:4a:ba:96:93:
51:69:90:2e:a1:7b:54:52:be:44:db:b9:68:d4:f9:87:7e:dc:
a1:6a:13:0e:45:ed:10:ac:f2:a4:9f:6a:ff:eb:1a:f3:d4:69:
93:a9:19:dd:75:ce:8c:a4:ac:98:f7:af:23:ec:40:24:6a:49:
02:49:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:16 2025 by rpki-client