Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: VPC88j1zU8urRgOrxiNqBOhVZW1pZM8x6JoodWmPqPc=
Subject key identifier: C1:63:FB:11:75:92:1A:3E:12:AA:7C:25:A2:06:E6:5A:B8:B0:90:6C
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 019764DF6EB94D89046AF23F17A87D203D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0C41
Signing time: Thu 12 Jun 2025 16:00:53 +0000
Manifest this update: Thu 12 Jun 2025 16:00:53 +0000
Manifest next update: Fri 13 Jun 2025 16:00:53 +0000
Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: RmYS78pj8pHJ5oeQPCaIXZwz3gGQRz+i+nIab04yqL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:6e:b9:4d:89:04:6a:f2:3f:17:a8:7d:20:3d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Jun 12 16:00:53 2025 GMT
Not After : Jun 13 16:00:53 2025 GMT
Subject: CN=c163fb1175921a3e12aa7c25a206e65ab8b0906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:1e:de:88:25:92:59:78:c7:ba:43:e6:d2:
82:c5:1d:51:53:66:ca:c5:59:cb:cf:2c:5a:a0:58:
90:70:e8:2c:91:2b:86:81:22:85:35:d1:30:51:0f:
5a:a6:d5:21:7d:f7:a7:d0:08:6a:0c:da:29:cf:b2:
75:f3:d8:e2:97:6b:48:c2:2e:c8:73:90:5e:54:6b:
25:14:b4:59:6c:31:a4:73:66:01:2c:a2:8a:8b:d3:
37:e8:4f:af:bf:46:42:08:46:fd:0b:d7:02:7c:8b:
cd:c6:6e:3c:8c:fc:f9:dd:6d:6a:45:11:50:3a:5b:
ab:b4:8f:a7:09:e0:e7:1a:d7:c2:a4:56:45:6a:90:
5b:e6:a7:74:08:e4:c2:58:8e:89:7d:bd:e9:bd:cc:
16:21:d9:eb:18:74:8a:99:4c:f3:ea:9a:0c:24:25:
e2:09:32:b6:f3:1d:ec:c0:26:50:d2:3c:20:15:1a:
09:df:ed:94:7e:17:45:4e:f8:d5:07:41:ee:cc:49:
1b:a1:7f:31:ba:22:12:05:ee:82:b5:96:af:e1:8d:
e4:7c:8d:b9:6f:a2:15:23:dd:6f:d8:1b:17:0d:99:
fb:67:de:65:8a:b8:7d:b4:81:77:ca:03:04:ea:1a:
69:aa:c0:d1:e0:b1:3e:d6:0a:f8:a1:5d:6e:b7:4e:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:63:FB:11:75:92:1A:3E:12:AA:7C:25:A2:06:E6:5A:B8:B0:90:6C
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:65:28:cc:21:1b:01:00:37:04:ea:d3:6d:65:d6:69:97:ff:
5a:df:37:c5:ac:c1:fa:04:8a:f5:be:24:95:3f:49:7b:d1:f0:
c3:11:6c:81:71:84:1d:08:43:a5:03:37:b4:a9:6f:1b:69:95:
ae:a7:5a:4e:85:64:e9:a2:cb:88:ac:19:d7:7e:3e:33:be:fb:
ab:25:8d:07:8b:98:74:aa:10:af:cb:ec:8e:00:8f:f3:b0:a0:
77:c6:93:1c:f4:44:52:1c:a7:4f:5e:e3:03:d7:dc:c6:c7:05:
b5:8d:5c:92:59:7d:08:2a:12:0f:33:8b:22:a0:66:7f:b1:99:
7e:2c:96:3b:8e:f3:c9:eb:0f:36:9a:be:6e:53:86:46:fa:74:
a4:b7:71:f2:df:6a:2a:f7:98:f3:2c:65:43:dd:75:cb:69:a1:
24:00:57:f3:7c:ff:82:0c:b5:e7:17:c8:b8:3c:3c:fe:9f:ab:
ce:b0:ae:8c:cc:c8:fe:e1:24:f3:2a:13:cd:a8:be:26:95:09:
94:50:bc:9f:af:a3:d3:d0:39:55:3f:c0:e5:d9:c4:e9:fc:85:
64:bf:a8:52:d7:37:6a:94:65:0b:71:7b:0b:4a:3d:19:65:fb:
a0:fd:ab:81:8e:85:7b:51:9f:2a:ee:8d:c6:bd:16:66:64:1d:
9d:39:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:43:28 2025 by rpki-client