Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: eQYOrAut1orK+s7Ke6MN1TWkOckdz1tJ8BuDYG+w/Cg=
Subject key identifier: 5E:87:3A:92:53:B2:9E:C8:51:63:CF:BD:BD:43:EE:F7:CB:46:97:57
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 019754227C16035B21103BCD99C3C047D5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 0647
Signing time: Mon 09 Jun 2025 10:00:35 +0000
Manifest this update: Mon 09 Jun 2025 10:00:35 +0000
Manifest next update: Tue 10 Jun 2025 10:00:35 +0000
Files and hashes: 1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: j6L73zHNpP/6s7F7h5c/bZaDX8/F07dD3xWkA4wfrZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:7c:16:03:5b:21:10:3b:cd:99:c3:c0:47:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Jun 9 10:00:35 2025 GMT
Not After : Jun 10 10:00:35 2025 GMT
Subject: CN=5e873a9253b29ec85163cfbdbd43eef7cb469757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:b5:81:9f:48:a8:a6:5a:98:47:f8:20:fb:
3d:83:bd:4d:9d:ee:ec:ec:a3:42:ff:eb:6f:a2:b2:
eb:eb:63:c5:b3:cb:26:8c:a1:aa:77:86:a9:1f:57:
1d:38:9a:47:67:c3:48:20:8d:a9:9d:cb:40:c9:b0:
68:84:a8:2a:09:94:14:37:9f:28:99:52:91:99:e2:
e4:d4:50:16:4e:66:21:22:c2:c2:cb:cc:73:f3:f9:
97:1f:71:10:9c:ee:60:9b:05:ff:09:e5:a8:0a:fb:
18:e5:49:e3:24:37:d7:86:46:01:7e:57:65:47:c2:
41:19:0d:3c:7c:15:7b:ed:23:bc:16:24:4d:b4:6e:
0c:e4:fc:37:a9:c1:e3:ae:31:0c:bc:06:a2:79:20:
c8:f2:4d:2b:f5:17:a2:fb:e8:0c:06:a0:f2:90:2c:
a0:11:99:f2:6a:bf:e6:06:3b:f1:c2:6a:36:f4:84:
f4:c8:79:81:c7:c0:a2:2b:88:11:c9:b5:78:ac:53:
ee:2d:75:21:a7:31:cd:84:72:9f:ff:c4:ab:d0:c5:
f8:b3:a0:f2:44:e8:b2:01:3c:d2:a1:02:dc:4a:ca:
25:00:6f:1c:8d:92:9e:74:33:29:66:d7:8b:de:03:
10:f4:9f:f8:ed:fe:d2:09:f1:29:28:eb:65:cc:d0:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:3A:92:53:B2:9E:C8:51:63:CF:BD:BD:43:EE:F7:CB:46:97:57
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:26:28:bc:ca:d8:61:5b:9b:0d:81:27:88:1f:fb:fb:d9:d4:
46:75:dd:39:53:91:89:72:ce:51:33:6f:3f:21:f0:23:e2:d0:
92:84:a8:8e:86:f7:19:15:3e:53:a7:e5:a9:ee:e4:2b:d5:77:
4a:82:e4:a7:a8:e4:73:28:d3:00:4d:b4:06:ad:f1:1e:61:79:
b9:8d:44:d7:fa:d8:ef:21:48:06:f0:22:27:c2:d5:29:85:90:
e4:10:c4:19:4f:99:9c:41:1e:4f:ef:ea:74:1f:75:9e:08:cd:
51:38:75:cd:56:c8:ab:55:9f:14:ae:d1:95:11:3f:87:a1:0d:
a2:f2:ba:3c:37:59:ee:12:14:87:4d:09:b4:30:cf:74:69:32:
47:d3:fd:d4:20:c7:d6:73:01:2c:7b:05:df:11:12:9c:8c:44:
fc:a4:ae:d9:3e:3f:d7:99:61:2c:56:d8:e6:bf:d5:ae:33:e7:
94:4c:b3:94:79:c5:40:7a:86:6e:62:01:d2:17:2a:2c:dd:ac:
3d:27:61:0f:ff:d1:af:a3:66:26:c7:3e:e4:4d:6d:73:98:9a:
4e:ee:a2:82:b6:ad:9f:fb:a4:ce:fa:4d:58:6f:30:50:83:2e:
4e:de:e6:bc:9c:7f:4d:7c:af:79:39:dd:5f:e8:a0:6e:f2:57:
01:53:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:36:09 2025 by rpki-client