Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: zPN8cMkKN0YusPc8ki8ulwQU++8ry2fesnjNg78ea7o=
Subject key identifier: E8:92:43:BF:B7:A7:03:7B:E7:EC:A6:61:9C:CC:76:71:DB:B3:09:8E
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 01965982A176A308DA940B1276F333186FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0C92
Signing time: Mon 21 Apr 2025 18:00:55 +0000
Manifest this update: Mon 21 Apr 2025 18:00:55 +0000
Manifest next update: Tue 22 Apr 2025 18:00:55 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: p1HhQL8fU5SHPw1eTsliLYYtC/Nr4Yszzpn5pgTRNQk=)
2: IwEBndBJay-42UjStrqkUigiaxw.roa (hash: K30WoUV1lkACaXc+c2n1S5YA0J82XCcvxybes+V2uGY=)
3: U2aJyBd8P_eUVY58McQwjVpYLjA.roa (hash: LuVboNkBf5MvVMVqL/wxb5E/X4ZkELwqjAYKuZW9FEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:a1:76:a3:08:da:94:0b:12:76:f3:33:18:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Apr 21 18:00:55 2025 GMT
Not After : Apr 22 18:00:55 2025 GMT
Subject: CN=e89243bfb7a7037be7eca6619ccc7671dbb3098e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:95:20:e9:7a:09:c5:b0:aa:69:aa:bf:16:
f6:c6:70:a4:1d:0c:23:24:c8:b6:89:4a:d1:92:b8:
02:52:3b:e1:cf:06:41:91:2a:87:c8:92:cf:5c:bf:
84:1d:7a:cf:ac:5f:41:be:69:cf:73:2f:8a:6f:0c:
9e:32:d0:bf:33:54:fd:32:09:ca:4b:8c:0e:47:83:
1f:0c:bc:9a:53:91:f8:55:54:54:d9:37:31:ce:26:
35:d6:3f:f8:ba:13:3f:1f:b7:17:8a:b4:57:1f:96:
66:da:98:d2:06:bf:72:2b:db:92:36:f9:88:ad:e0:
bc:fb:32:10:c5:3f:15:13:d6:1a:6a:89:05:1d:21:
a5:7d:18:fb:d6:1a:21:c0:2c:db:e8:0b:f2:91:c5:
05:7c:b5:05:d3:81:61:2c:01:86:fc:ed:e5:58:bd:
0e:1b:03:46:95:55:61:9f:9e:98:95:1b:ea:5d:a7:
45:01:50:44:93:87:6a:d0:2f:c9:b3:ea:3f:92:31:
17:11:80:98:f6:a2:76:af:a6:87:88:05:38:bb:fc:
0f:27:fa:58:03:e4:cf:da:65:5d:54:99:0b:cd:8c:
eb:2d:9b:ba:c7:4d:87:cf:5c:1f:d6:d1:e3:5a:63:
6b:98:50:22:27:c4:e6:ed:94:49:ee:09:4a:05:26:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:43:BF:B7:A7:03:7B:E7:EC:A6:61:9C:CC:76:71:DB:B3:09:8E
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c1:7e:70:d4:a8:66:c3:27:83:7f:f3:b2:66:99:11:18:cb:
9e:69:e9:b8:e7:56:5a:ae:86:46:9f:8b:ef:53:15:4f:0b:bd:
a5:68:f7:3c:40:83:85:12:ff:9c:6e:fa:43:e8:5e:1c:04:8e:
cb:ff:32:65:d2:a0:97:f2:0d:42:1e:ff:8e:93:21:e8:d3:16:
9a:78:0a:22:66:73:9c:5e:38:fd:d9:cc:29:0c:1f:35:d3:d5:
3c:49:e0:5e:4f:ac:ff:33:09:64:99:6f:c9:9f:a6:63:54:7c:
50:3e:23:5b:46:66:05:22:87:f6:86:a3:9d:ad:fa:bb:4d:e8:
7c:ce:2a:2e:b1:99:87:29:af:2a:1b:61:9b:f6:c5:ee:ad:17:
95:45:ad:24:f1:63:18:f0:be:7b:1a:41:43:59:a5:89:b7:03:
87:0d:6b:75:d9:1d:88:fc:f8:03:00:4d:4f:12:cd:d4:b5:d7:
05:51:10:0b:0e:85:c5:20:47:5f:f5:c9:87:8b:47:fb:58:55:
49:1e:dc:00:10:03:85:13:23:55:ab:85:4b:3b:31:44:6c:6d:
3a:ab:20:95:49:71:7d:cc:7a:07:16:6e:3e:e4:a7:87:83:6d:
a2:f2:be:5d:89:f5:fa:d7:31:8d:ad:39:df:0e:9a:a6:a7:04:
d8:27:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:16 2025 by rpki-client