Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: ASl33Y1/EMCzT3yVayzkeLHAGtx4cu5GmUp8ytWFC94=
Subject key identifier: A9:AD:AB:A7:A3:36:36:B5:0C:D0:1F:F9:75:25:B4:21:1D:A5:CE:53
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 01974AE8DFB0A2088B2A5622B02BFA63385D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0AC2
Signing time: Sat 07 Jun 2025 15:01:04 +0000
Manifest this update: Sat 07 Jun 2025 15:01:04 +0000
Manifest next update: Sun 08 Jun 2025 15:01:04 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: 3zmdYA/xAUUvciZscDoHRIw+ffVbqjnaW8yUaimd6xE=)
2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:df:b0:a2:08:8b:2a:56:22:b0:2b:fa:63:38:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: Jun 7 15:01:04 2025 GMT
Not After : Jun 8 15:01:04 2025 GMT
Subject: CN=a9adaba7a33636b50cd01ff97525b4211da5ce53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a3:86:02:81:16:f8:aa:e0:40:d0:5a:73:3d:
73:d7:73:02:9d:76:e8:81:8a:64:6e:08:dd:3f:cb:
71:cc:e0:97:24:e1:d1:ba:34:06:e5:03:7b:a6:fa:
e2:c9:9c:45:86:3e:1f:16:c8:1f:32:e8:d4:83:9b:
bc:f6:ae:4e:ab:d3:dc:4c:06:2c:c8:41:68:ef:c0:
2e:e5:38:d0:1a:56:73:4a:4e:46:ee:31:65:98:dc:
8e:f0:2c:4c:3d:a0:7a:9d:e0:a5:9a:8c:46:77:48:
7a:24:50:78:e0:bc:c0:67:14:e1:19:76:ce:6b:2c:
59:7d:5c:ea:34:ce:19:3e:40:a4:38:5e:41:c6:03:
d2:72:a0:01:e9:f8:1a:35:d6:89:33:17:e9:1c:e4:
de:87:67:61:b1:fa:bc:fd:5f:44:ca:e3:3a:d5:b4:
e9:9f:30:eb:f4:3d:7f:2a:20:b7:0d:96:11:9e:03:
16:c1:0e:a0:f9:a5:a7:b7:47:b1:12:70:49:0f:53:
de:ac:7e:f6:35:fd:f6:fa:f0:89:75:a8:e7:a0:05:
fa:3a:0e:af:7d:2c:19:0c:96:b9:4d:d3:bd:7a:c2:
8c:e4:ba:01:cb:3f:b1:ad:68:55:cd:45:fd:f2:54:
24:a2:da:a8:9e:6e:11:49:08:52:c7:60:ad:67:eb:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AD:AB:A7:A3:36:36:B5:0C:D0:1F:F9:75:25:B4:21:1D:A5:CE:53
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d9:79:b1:45:b6:84:b8:63:68:d1:01:9b:29:19:cf:5c:36:
35:6d:92:77:e5:bd:f8:53:28:4e:8d:6f:36:13:60:5b:b3:66:
b7:f1:fe:f5:65:ff:86:3e:cb:2f:44:89:3f:0e:d3:10:35:77:
62:8d:5f:d1:01:92:f1:5e:9e:ab:d7:a2:72:45:fb:44:42:00:
05:89:4a:05:f4:38:a9:90:3d:b2:bc:ed:74:ff:8d:34:47:2d:
6d:e3:a3:ac:7d:56:25:e0:a8:b0:f7:b4:de:4b:5d:4c:cc:2c:
d0:e8:48:54:6a:36:2e:1d:f8:f8:3c:af:5c:d0:3a:08:5f:53:
3c:f8:67:b5:bf:bb:64:33:18:cf:4c:70:ae:28:5e:f7:14:7d:
9f:ea:73:17:12:29:3c:8c:03:8b:45:e6:e0:58:31:0f:f4:3e:
72:ad:af:86:e4:68:1a:d4:4b:48:9e:1d:ab:ad:5a:b2:dc:7d:
d7:52:45:c6:cc:98:69:72:e2:bf:4b:9d:3d:09:cb:37:fb:48:
d1:77:41:41:c2:61:63:67:89:d7:c7:99:16:0e:18:07:97:ae:
2a:b7:da:9f:7f:94:6d:91:55:05:05:bb:71:0b:d5:5b:50:95:
ff:0b:2f:cf:de:a1:4e:ea:83:58:7c:0c:83:90:b7:48:66:05:
c5:d1:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:49 2025 by rpki-client