Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: 11gVILn73mtS/QZ74EFFs44q7NrQFktTcLN2XxDyC/Y=
Subject key identifier: EA:D2:2F:44:5B:E7:92:3B:DB:3C:51:B8:0C:2F:9F:19:22:09:BC:D5
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 0197470B7B6E2699038308F07BEC7B444586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 0240
Signing time: Fri 06 Jun 2025 21:00:24 +0000
Manifest this update: Fri 06 Jun 2025 21:00:24 +0000
Manifest next update: Sat 07 Jun 2025 21:00:24 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: HGySWKuLWuzp4StKii2lHlAHwLUlLbeWSeYMoQiprEk=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:7b:6e:26:99:03:83:08:f0:7b:ec:7b:44:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Jun 6 21:00:24 2025 GMT
Not After : Jun 7 21:00:24 2025 GMT
Subject: CN=ead22f445be7923bdb3c51b80c2f9f192209bcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:50:f1:e1:50:6a:b4:f7:65:43:2a:4a:72:
7c:2b:60:ea:a8:24:7e:27:1c:ea:f7:ba:e7:0d:71:
a0:90:0f:21:ba:80:71:a8:81:c4:bb:6d:bf:56:75:
1b:db:14:89:e1:79:2a:ad:94:1f:6f:e8:52:3d:4b:
f2:1d:e7:b4:54:c0:7e:e4:ba:43:c3:9e:7d:70:12:
d5:b7:59:b8:58:4b:fd:bf:7a:63:00:37:2f:85:e1:
4a:04:ed:54:04:37:aa:0d:ba:aa:a5:8d:ed:02:41:
32:ef:80:7c:dd:90:50:cb:85:08:c3:a1:70:1d:df:
29:4e:2a:ac:41:2a:9d:51:0b:b0:11:4a:1e:8d:99:
7e:d7:41:70:d6:d3:e3:1d:24:4a:8c:69:d3:a1:88:
6a:b7:c7:fd:77:49:d2:5d:73:16:08:b1:4c:77:85:
cc:b5:54:fa:ce:38:fa:61:8b:18:af:49:9c:66:ca:
5b:98:a8:7b:d2:e3:05:ea:68:74:70:70:12:62:f7:
9e:4a:3a:e5:1b:ed:4c:aa:71:f4:33:76:4b:20:1d:
08:99:91:5f:3b:65:01:76:55:cf:2b:d1:1a:7f:3c:
47:92:f6:01:7b:d3:9a:b6:80:84:03:bf:e9:47:89:
7e:6c:19:77:a1:a0:3b:bb:e6:4a:6d:ac:1d:03:52:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:2F:44:5B:E7:92:3B:DB:3C:51:B8:0C:2F:9F:19:22:09:BC:D5
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:be:67:cf:15:a7:9d:ec:56:a8:df:59:fe:b0:c6:7a:16:ba:
ab:b3:3b:ea:5a:7e:a1:72:68:e1:88:94:76:8e:df:0a:26:27:
50:51:16:b5:92:5f:19:ac:cf:48:1c:47:bf:c5:39:54:eb:91:
8e:8f:27:55:58:68:04:76:68:7f:7c:17:42:a8:ee:84:00:ae:
6f:ce:ea:6a:3d:ec:b6:51:c7:62:be:03:ab:5e:f9:af:8c:03:
cb:09:f4:9d:90:8c:6f:fb:f1:78:2c:b3:e6:b0:db:dd:76:f6:
b9:ee:ff:3d:f1:7b:36:44:d6:c4:b8:96:ce:07:62:8e:bc:6e:
78:62:20:e5:69:82:99:8e:ca:8f:09:fd:3e:39:05:0d:70:29:
38:ce:53:bb:89:fc:d5:71:e4:41:59:0b:56:43:a6:5f:95:70:
fb:de:79:e7:0f:7b:ac:7b:8a:1f:62:6f:74:33:a4:2e:5e:37:
bf:45:13:b0:48:15:e2:98:ec:b0:19:02:1c:24:7a:81:5c:88:
c1:fc:74:82:a0:69:a8:bb:7b:94:1b:5e:a0:2b:61:d3:d9:30:
58:86:17:cf:ec:f0:4d:8b:35:7c:f4:b1:84:41:3d:d3:1c:9b:
16:67:2b:33:58:a1:02:37:b2:1c:51:fb:16:ae:49:5a:a5:2b:
74:08:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:38 2025 by rpki-client