Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: YOJpV1HjIdBDNa7/o1xZe6USDnBY2G8KiOxEQOhGf7M=
Subject key identifier: D4:59:8E:75:D0:F8:EB:4A:77:0B:F7:DA:3A:BE:9F:97:38:53:68:CB
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 01975DCACA942FA29C169BDBCB0E0384C422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 151C
Signing time: Wed 11 Jun 2025 07:01:00 +0000
Manifest this update: Wed 11 Jun 2025 07:01:00 +0000
Manifest next update: Thu 12 Jun 2025 07:01:00 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: JWr3sVVgekuVAIO+m8SC+9xXnmUQJbRmOML86EN3VCo=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:ca:94:2f:a2:9c:16:9b:db:cb:0e:03:84:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jun 11 07:01:00 2025 GMT
Not After : Jun 12 07:01:00 2025 GMT
Subject: CN=d4598e75d0f8eb4a770bf7da3abe9f97385368cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:a6:91:39:a1:a8:1a:3f:0b:10:92:5a:ea:
45:41:55:d9:75:71:3b:93:40:46:d6:d0:4d:77:3f:
ed:09:9f:17:7b:50:01:91:c0:17:fb:a9:d0:77:06:
75:c3:e1:1e:f8:74:e2:5b:14:5c:2d:47:11:5d:83:
44:87:8c:8b:44:48:c5:9b:bc:7a:8b:12:82:4a:82:
1b:fd:dd:40:4a:83:03:51:c5:9c:81:cb:7f:1b:87:
a0:03:4e:65:34:3d:58:f1:e0:3c:5f:a0:71:cf:27:
5c:01:92:90:5a:1c:dd:1c:a5:a9:70:73:ab:ba:0e:
9b:63:f4:8e:02:1c:b4:f0:08:b0:71:44:12:06:92:
58:57:fb:73:fd:54:fe:cf:79:f7:d8:ae:28:14:7d:
2b:f9:9f:c0:ef:d3:e9:37:be:e0:25:2c:01:c5:8c:
0d:2b:ea:8b:aa:50:0a:d1:ab:f6:eb:da:4b:89:40:
1e:8e:a5:1a:09:78:7f:5f:73:20:ac:45:03:3d:d6:
61:6e:6d:2f:a9:14:5a:36:bd:aa:c9:84:9d:5a:d2:
b8:6b:6c:77:ae:b7:1d:2d:4c:70:d4:f5:31:f3:e6:
5a:95:b9:54:74:74:c2:4f:75:5f:e5:e5:42:a9:20:
87:e0:52:a2:5c:44:04:31:4a:71:ac:b7:87:88:90:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:8E:75:D0:F8:EB:4A:77:0B:F7:DA:3A:BE:9F:97:38:53:68:CB
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:55:9d:dc:0d:2f:2c:60:f1:e5:75:36:17:aa:33:7e:17:72:
9a:7d:ea:5c:85:c2:b1:ed:7d:77:dd:c2:52:06:7b:f7:8f:94:
86:1c:8f:df:c3:d2:c2:6a:bc:50:e1:8e:85:59:ca:87:5f:ae:
93:ac:49:17:dc:cc:f9:9d:7a:20:d2:9c:eb:69:18:c8:16:af:
6d:7d:78:36:1f:0a:37:a2:d5:1c:ca:58:dd:d2:71:3a:5d:98:
f6:56:90:9d:69:c0:b1:4d:02:8f:be:33:69:9d:1e:60:95:e6:
ae:f3:1c:2a:b0:6e:10:35:b0:f6:8c:6b:59:33:3a:a1:a3:1d:
5b:10:05:9b:be:0f:8c:b3:d8:39:e9:42:e2:93:04:55:59:27:
a2:ae:29:7b:ff:ca:1a:76:65:f1:e3:65:59:16:10:20:c3:c4:
22:a9:79:de:ce:1a:63:5b:7c:6a:2c:6e:85:61:71:ee:62:b9:
fc:c7:42:6a:1e:b9:e2:05:62:dd:7a:80:85:76:0e:8b:c4:4f:
c1:f8:6d:ef:a5:e8:bb:2d:34:4e:36:2e:95:63:36:50:cc:da:
ed:df:bb:71:45:6e:2b:b3:aa:d8:79:f4:65:47:85:26:7b:1e:
2a:80:2d:59:54:b9:f9:40:cd:c9:b7:f2:05:62:5b:5a:12:97:
47:cf:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:13:36 2025 by rpki-client