Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: jgNa2AD3hmKuXjstb4A+CYVnf9EwzuAhbjKEXowY6EQ=
Subject key identifier: 2C:21:7C:94:28:2A:38:49:AE:0E:1F:15:2D:1F:3F:19:6D:BF:20:D1
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 01964C34991EEF060BC8304194A74ED72ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 04:00:37 +0000
Manifest this update: Sat 19 Apr 2025 04:00:37 +0000
Manifest next update: Sun 20 Apr 2025 04:00:37 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: 4831d8ogn4pqBhjfQtYjCXMnsQY1ZhLooVTP35n+Mlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:99:1e:ef:06:0b:c8:30:41:94:a7:4e:d7:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Apr 19 04:00:37 2025 GMT
Not After : Apr 20 04:00:37 2025 GMT
Subject: CN=2c217c94282a3849ae0e1f152d1f3f196dbf20d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:a6:77:2a:75:59:9b:da:51:c8:a9:80:ef:
9c:0b:59:32:9d:02:48:70:a8:eb:02:89:98:a6:8e:
9e:22:4f:91:0b:be:af:eb:58:54:0a:a0:6c:10:b1:
79:e2:bf:11:36:22:d8:d8:45:65:3e:72:c1:b1:c4:
b3:1c:1a:f0:56:bd:dd:86:0c:2f:9f:cd:a5:a8:94:
22:48:f7:33:3e:81:d8:70:7b:34:f3:2d:25:ce:15:
c6:dd:38:85:e6:4b:11:65:11:22:9d:ec:2f:74:43:
f7:95:fb:86:9a:69:f2:ed:70:10:07:36:d8:07:55:
91:42:14:ae:5d:c7:9d:df:48:d5:99:c5:40:87:d6:
e4:4d:5c:5a:e0:26:20:a7:29:9b:e0:8b:94:77:04:
03:2a:ef:aa:9f:7b:b9:42:e9:b5:0f:48:15:b7:ce:
dc:a9:63:58:1a:f9:5f:0e:75:85:b3:c6:00:fb:4a:
8d:08:2c:bc:5d:55:bc:13:b0:32:14:03:14:d7:5f:
44:e8:77:29:a5:69:71:70:97:35:02:34:a2:04:1f:
27:d1:64:fa:49:a5:09:7d:58:04:22:05:d0:9e:4d:
82:e4:1c:20:d1:41:4f:68:52:cc:00:c9:ca:e7:98:
e9:82:c4:d2:45:05:73:a4:6e:5e:b8:a8:fe:d7:db:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:7C:94:28:2A:38:49:AE:0E:1F:15:2D:1F:3F:19:6D:BF:20:D1
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7d:87:88:10:05:da:45:e8:13:88:04:4b:4f:f5:91:55:af:
53:87:9d:6e:21:ce:91:86:3f:eb:d1:01:93:53:34:1a:b0:d7:
ef:6d:b1:c3:3a:3a:5b:bf:80:ac:49:7e:e2:bf:db:38:51:f5:
35:48:67:09:b5:3b:b0:8a:74:dc:0a:fa:e2:cb:d3:cd:9d:3d:
82:a9:33:91:26:e6:7d:57:87:ef:21:83:73:60:d1:cc:b3:93:
e8:b7:46:b6:3b:94:b3:33:bf:73:b3:b2:be:57:ba:89:03:69:
de:5a:7e:99:e4:2a:5a:30:79:99:a3:30:c0:01:72:c2:9e:87:
09:18:fd:1f:de:4e:0e:de:fd:9b:9c:b0:29:1c:65:2d:ef:ee:
12:74:a5:91:50:2b:18:3d:cb:b0:b1:76:22:60:ba:c5:8d:1d:
cd:bd:54:1f:9d:1f:ac:e1:d2:32:fa:80:9c:9a:de:51:7f:68:
46:7b:0c:5e:6f:54:2e:13:12:87:74:e6:60:2a:cf:33:2a:43:
81:33:52:3c:a8:32:c2:d4:1d:ec:51:01:71:a4:65:92:0a:63:
57:c2:45:22:3d:d1:db:9b:e3:83:f2:b7:95:d2:f2:37:eb:26:
99:52:07:b1:a1:7c:b9:37:c8:ba:02:37:f8:2e:d5:5f:38:d0:
7b:f5:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:40 2025 by rpki-client