Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: WyonralR8Th5xbxn2YsyMICeaat7vynwZu7XSbyvOb4=
Subject key identifier: 94:C4:20:67:14:5C:B2:90:B2:9B:1A:97:20:80:D0:EA:85:B3:BD:0D
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 01974EC60087B6FA48B718D97EC9E522C2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0D11
Signing time: Sun 08 Jun 2025 09:01:28 +0000
Manifest this update: Sun 08 Jun 2025 09:01:28 +0000
Manifest next update: Mon 09 Jun 2025 09:01:28 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: fM6l8E5C/CQCxxKEbcOid8mRTycALiO+g4/0LRaCmZ8=)
2: IwEBndBJay-42UjStrqkUigiaxw.roa (hash: K30WoUV1lkACaXc+c2n1S5YA0J82XCcvxybes+V2uGY=)
3: U2aJyBd8P_eUVY58McQwjVpYLjA.roa (hash: LuVboNkBf5MvVMVqL/wxb5E/X4ZkELwqjAYKuZW9FEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c6:00:87:b6:fa:48:b7:18:d9:7e:c9:e5:22:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Jun 8 09:01:28 2025 GMT
Not After : Jun 9 09:01:28 2025 GMT
Subject: CN=94c42067145cb290b29b1a972080d0ea85b3bd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:5a:08:97:4a:0d:be:a1:5c:c8:a3:e5:22:
c5:a7:b3:69:f8:4f:dd:c8:17:de:de:91:8f:39:4f:
a2:f3:60:39:6f:84:12:05:c0:da:21:40:ca:fd:98:
5e:f1:7b:a4:28:a4:da:8f:c1:cc:bd:2a:36:e3:a6:
71:d4:88:14:5d:77:d0:34:fc:93:b9:d6:d3:c7:a4:
f2:b8:f1:1d:80:bb:cd:9f:51:73:5d:2a:c5:1c:88:
eb:9c:0e:dc:bd:48:f3:cf:2d:90:05:56:02:cc:ec:
ff:89:b1:6d:d4:1d:99:a5:90:c4:21:41:48:de:23:
3a:92:d6:25:63:5a:12:bf:6d:97:15:4e:9a:d8:9e:
7c:d0:fd:ca:da:0e:07:d6:c5:91:b2:0e:f3:31:45:
02:0f:f3:b2:89:bf:ec:ed:fa:6a:de:77:d9:90:53:
98:c6:c3:fb:93:a1:ee:57:61:b9:28:6a:52:03:98:
fb:e1:bb:57:e2:ed:96:2b:d5:15:5a:8e:55:c6:93:
4c:0f:05:25:10:2b:e4:cd:3f:b5:af:13:40:74:cf:
03:ac:61:01:db:5f:32:23:2b:6e:16:85:84:90:2e:
b5:12:d1:24:d8:69:49:7b:2d:c1:5c:7c:fc:0c:dc:
6c:a4:7a:08:f9:82:8e:0a:bf:b4:3b:5f:80:de:fc:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:20:67:14:5C:B2:90:B2:9B:1A:97:20:80:D0:EA:85:B3:BD:0D
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5c:07:32:0f:a9:56:1e:5f:ad:f8:da:a5:e7:45:20:a7:a3:
17:c6:e1:68:84:94:e8:23:ea:76:8e:5e:d9:29:27:7d:96:cd:
66:f5:12:87:51:7f:06:f4:4f:0b:da:7d:f8:2a:fb:12:4e:d2:
de:00:0f:95:ab:d1:4e:5d:8e:91:77:a9:84:9d:99:9e:a8:2e:
ad:02:df:a0:90:a1:9a:c2:05:da:f8:ca:5b:05:d3:68:7d:15:
83:95:04:b8:89:0a:13:50:d5:22:33:7f:2c:b5:75:56:02:7f:
2e:e5:ed:ce:6d:06:11:a4:6e:3b:d4:65:b7:b1:14:6e:50:23:
3d:94:7d:37:4b:7a:91:29:ff:e9:c7:d2:e7:07:cc:d0:d6:46:
41:2e:f6:1c:59:4d:59:c3:b7:e1:e3:25:f1:35:14:cb:39:8b:
87:68:f8:b9:ff:84:a3:68:dd:6a:7b:1e:c0:6b:bc:39:45:a0:
c4:bb:41:e8:1d:30:b5:eb:a6:f1:cb:3a:ab:53:19:1a:16:8d:
09:f4:f2:4f:03:ad:b3:35:c4:9e:e6:ef:6e:0b:85:35:e9:b9:
44:59:63:49:7a:cc:21:dc:b8:d0:37:dc:85:b7:dc:b6:c0:aa:
60:07:7f:c7:b9:9d:69:83:93:3a:50:71:80:74:b1:42:d3:77:
b1:45:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:15 2025 by rpki-client