Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: J6YAFuwiUONSIT7srZ56KBNF43cYDkXnhsq4/Ma7x5Q=
Subject key identifier: 36:AF:A5:E6:E8:5C:2B:59:0D:26:4A:34:99:FF:B1:74:F2:C2:3C:97
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 01974EFC28775BD3B482BFE328D873A5F92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 10:00:37 +0000
Manifest this update: Sun 08 Jun 2025 10:00:37 +0000
Manifest next update: Mon 09 Jun 2025 10:00:37 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: I4FeCVWsCBvpgf9CrL2eOuH90wwOhFwQjkjv5tiYVIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:28:77:5b:d3:b4:82:bf:e3:28:d8:73:a5:f9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Jun 8 10:00:37 2025 GMT
Not After : Jun 9 10:00:37 2025 GMT
Subject: CN=36afa5e6e85c2b590d264a3499ffb174f2c23c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:74:31:f4:25:97:c4:d2:41:60:d4:0b:ff:
44:84:3f:d9:e4:a4:ba:c5:11:3a:64:bf:b0:01:91:
d2:9d:09:ef:35:fd:6a:82:4f:70:97:00:53:77:cc:
62:14:57:34:83:0f:60:ee:5d:f4:6c:15:b0:ea:a6:
41:0c:3a:aa:83:b1:7a:26:05:a0:b5:31:da:d0:93:
34:1f:5e:2e:bc:54:9d:4c:d5:d8:c8:10:e8:ce:e6:
9c:09:bc:70:51:23:5d:92:29:d9:7c:fb:4d:b8:ec:
36:0f:d3:43:20:5f:91:30:09:16:7d:87:d8:3d:1f:
73:5f:fe:ac:4c:e3:69:c9:6e:17:81:cc:b4:7e:d8:
b5:d1:e1:96:d9:7f:27:1f:1e:b7:e9:52:5f:60:a3:
ab:d1:c2:3c:d5:77:87:7c:71:fe:9b:4d:af:cb:4b:
63:b5:d5:2f:83:a0:7a:e0:1b:7d:14:29:8c:07:73:
26:5f:ec:31:09:56:8c:86:d6:69:4a:02:1f:19:b9:
79:b6:4f:76:0b:34:45:3e:9c:25:70:5e:2a:69:54:
a4:b9:75:79:fc:64:bb:a1:4a:cb:3a:7e:b8:1b:b0:
eb:ca:98:fa:ed:86:93:a4:36:61:22:3e:7d:6b:c0:
25:0d:c0:fa:a7:09:fa:a7:52:cd:9a:ad:c7:be:6b:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:A5:E6:E8:5C:2B:59:0D:26:4A:34:99:FF:B1:74:F2:C2:3C:97
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:96:d8:58:5b:68:8a:e3:51:65:e0:d0:a0:ad:f8:d1:0e:9e:
d2:4d:1b:bc:42:18:84:7f:ac:57:e6:77:c3:d7:13:e0:8e:d3:
bf:91:03:a9:0c:3c:ad:6e:d6:e1:ac:39:a0:56:a7:3a:41:b1:
16:f1:d0:2e:52:81:07:f1:dc:87:ef:a1:9f:f0:ee:c1:75:9c:
e2:a8:85:25:cd:44:b0:0c:ec:05:4d:72:5e:42:ba:2b:2b:88:
d4:21:19:9e:d4:34:b1:9d:1e:1f:6e:52:12:96:22:b6:51:8b:
87:09:1a:f8:5e:03:0c:c0:48:40:fe:c6:65:0d:51:de:47:ee:
79:70:7b:9b:f8:77:99:86:5d:6e:df:0a:0b:80:bc:99:61:2b:
5a:55:6b:f6:e5:1e:39:e7:d6:70:19:88:d6:c5:65:1c:26:b9:
1f:94:73:fc:ca:04:90:7e:56:18:83:a7:b8:5f:39:70:3a:bc:
54:24:cd:c9:bf:01:f2:ef:30:9d:02:19:41:ef:89:d2:a6:b7:
71:25:11:d0:2c:0d:4d:20:56:25:65:2e:72:86:ed:95:d2:17:
99:30:f3:2b:8d:b4:f3:47:e3:ad:64:e8:9d:f0:d6:b6:ff:a9:
b6:f6:8e:d4:e7:92:a2:44:18:1f:62:86:25:b1:56:18:67:83:
da:4d:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:34:27 2025 by rpki-client