Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: uE1Pn8HdUglZl6jWKi9KGjfy337h9WWtHptExUfiC4Y=
Subject key identifier: B1:8E:D3:67:39:FF:01:61:CD:3D:7E:1F:F3:73:06:15:8C:15:DB:96
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 01965A5DFCDFD4E2D2204A1CF1A91440F206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0BB7
Signing time: Mon 21 Apr 2025 22:00:31 +0000
Manifest this update: Mon 21 Apr 2025 22:00:31 +0000
Manifest next update: Tue 22 Apr 2025 22:00:31 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: Rnem1ArfNbGzXF+9lQTp6PzxEQY5ZHncZNv9D8wBgc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:fc:df:d4:e2:d2:20:4a:1c:f1:a9:14:40:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Apr 21 22:00:31 2025 GMT
Not After : Apr 22 22:00:31 2025 GMT
Subject: CN=b18ed36739ff0161cd3d7e1ff37306158c15db96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:43:e6:a3:05:80:b6:05:03:aa:d4:71:1e:
f0:25:0d:2a:18:9c:c5:1e:9b:c5:67:cc:4e:6f:d9:
ab:2f:52:f7:62:26:2d:a7:a6:5a:99:91:4b:50:08:
2c:a9:bf:45:7f:87:99:3d:aa:5d:9c:f9:5a:b2:5d:
bd:73:07:d0:47:0e:69:4d:c9:17:dd:e5:18:8c:d2:
22:87:45:b2:51:28:77:9a:8e:ea:79:3a:41:d0:3d:
6e:11:8f:6a:39:39:a4:bf:73:0c:c4:d0:44:94:d5:
31:d1:d1:15:eb:a1:13:bc:e4:48:b0:16:eb:43:32:
4f:6c:93:bd:7f:63:24:04:5e:a8:ea:d2:a4:ef:9f:
2b:4d:72:60:9e:94:a4:4b:ca:d7:32:af:a1:a8:f0:
04:1e:80:55:e8:31:4f:e1:28:6d:e8:fb:3a:83:16:
54:90:87:12:82:f7:f7:d6:63:eb:2f:cb:8d:93:db:
31:b1:ae:c6:2a:d0:33:20:a1:a1:ae:7e:ad:27:2f:
11:f4:02:b5:79:0b:31:67:bd:8e:60:44:14:65:33:
25:54:a7:51:64:8c:29:f4:85:19:59:dd:7d:69:27:
87:ac:94:16:b0:0f:5d:53:0f:4d:4a:af:8e:14:7d:
f5:85:fe:2f:60:53:e6:83:08:e6:9d:ed:35:cf:ac:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:D3:67:39:FF:01:61:CD:3D:7E:1F:F3:73:06:15:8C:15:DB:96
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:46:84:ac:5b:bf:ff:76:ac:6e:04:b0:89:b9:71:87:f8:8b:
41:d3:27:83:2d:71:06:c2:6e:d3:77:16:ba:92:5d:5b:72:65:
e9:0a:ec:93:00:47:6e:d1:93:7e:e6:7c:bf:5d:78:eb:fd:ad:
07:5c:20:e9:fc:9a:c8:94:f8:fc:c2:ca:9f:a9:81:28:13:57:
c8:d0:fe:32:05:5c:17:37:da:32:02:07:9b:2c:d1:cf:db:04:
0e:54:32:2b:4c:d0:19:4e:b7:97:e5:65:7a:49:74:4a:3a:63:
de:3e:b5:74:19:06:4d:04:c8:eb:1d:f6:b5:da:94:33:91:91:
61:a5:67:e2:ae:7c:72:e9:20:12:b6:c6:79:49:da:e4:6b:ec:
cd:c9:7d:14:b9:93:ce:07:c3:e0:ed:97:e7:5b:2b:ef:c6:a2:
05:b1:7c:da:70:6c:db:6c:e4:b9:8f:14:f8:10:eb:4b:38:77:
50:84:c4:ac:9f:ae:8b:f6:06:e5:ef:61:db:35:10:1a:5c:4b:
1b:df:49:90:74:19:06:59:23:be:db:ca:bd:50:6a:52:8e:6c:
63:70:33:cb:d8:34:b7:8f:96:a4:3e:44:4c:01:24:cd:2f:3e:
8a:4d:8e:d2:5b:0b:91:28:c4:d1:40:d9:f5:71:b9:13:76:e6:
57:ad:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:38:13 2025 by rpki-client