Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: mwKvCB5Upfkv+Ft6CaXYEO4iCrYComJDvHrEu0MjNOE=
Subject key identifier: C4:DA:67:06:64:CA:98:2A:F6:8C:9E:36:33:25:95:45:15:D4:9B:0C
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 019961D95E8E3B69003FA226D08F227B7536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 0357
Signing time: Fri 19 Sep 2025 12:00:59 +0000
Manifest this update: Fri 19 Sep 2025 12:00:59 +0000
Manifest next update: Sat 20 Sep 2025 12:00:59 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: TEzUeVOERGXDi7bTziRMdO5qOf9HlBkgfHGVxNZLWtc=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d9:5e:8e:3b:69:00:3f:a2:26:d0:8f:22:7b:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Sep 19 12:00:59 2025 GMT
Not After : Sep 20 12:00:59 2025 GMT
Subject: CN=c4da670664ca982af68c9e363325954515d49b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:5c:11:52:71:fb:84:98:9d:a1:a4:dd:89:
3a:c0:e6:73:18:ed:3b:dc:25:93:ed:41:0e:9d:a9:
d0:47:2a:38:0e:19:2e:3d:f2:3f:57:8f:3e:60:fd:
ae:30:e8:7d:5a:74:af:be:ae:e4:4c:6a:c2:8f:78:
a6:f1:55:a5:7d:f9:ab:3f:68:25:46:18:23:cd:9e:
39:80:cd:85:50:c2:6f:13:6b:ba:bb:fc:78:f6:7b:
44:a2:78:a7:f4:03:23:05:c2:8a:e9:e8:20:7a:0e:
74:54:7e:08:4f:bb:19:1d:0e:02:24:8f:ea:88:92:
cb:0e:87:03:c5:82:6b:89:91:43:f6:a8:74:0b:f8:
3c:e7:ed:62:11:72:ac:b8:21:f1:63:02:29:b9:57:
e4:65:1d:fb:28:99:22:b2:cf:28:30:9a:c8:30:d8:
b3:23:a7:2c:c0:22:71:50:fe:7c:d2:f6:47:e9:aa:
f0:6c:29:3d:e9:e0:e3:0c:69:92:de:a4:f2:fb:3f:
2b:47:8e:83:58:8d:8d:f9:e0:dd:7f:17:c7:f1:32:
59:57:78:46:d9:75:88:0f:e0:ab:30:76:66:96:07:
35:57:87:c3:41:2b:66:8e:bd:39:ac:84:d4:a8:6c:
7a:eb:3f:c1:d8:b6:48:7d:a6:ae:26:13:c3:2c:a1:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:67:06:64:CA:98:2A:F6:8C:9E:36:33:25:95:45:15:D4:9B:0C
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:66:43:93:8b:97:5d:e9:f2:3b:d0:c5:28:76:5d:65:4a:
6e:84:62:93:2e:96:32:68:a8:77:5c:97:a6:a5:53:19:7e:09:
39:e1:46:e0:0c:2f:a5:10:77:6d:01:c4:fe:4d:c6:84:04:df:
0b:de:fa:8b:ed:c4:cc:8e:24:86:1d:89:b9:eb:4b:63:a6:0a:
54:c0:71:d6:d0:44:f6:bf:16:da:49:5e:64:cb:bf:5c:93:8b:
32:62:fd:d9:2b:f8:8e:88:eb:45:2a:e1:e8:37:07:82:57:df:
a5:38:8f:8c:2e:b8:87:b8:81:2a:08:bb:9e:46:42:12:4e:f3:
86:84:e6:95:12:e2:ab:82:87:4e:6f:31:5c:71:75:0f:49:7d:
09:12:56:b7:bb:1d:a8:d8:50:69:17:41:fc:30:e4:f1:ea:87:
d3:69:1e:b9:11:a1:e8:0d:c1:be:20:76:15:f6:0e:01:47:91:
ae:44:9c:d3:f0:7b:94:33:08:31:f8:bd:c1:e9:e5:3f:ac:7b:
eb:5a:04:ed:ab:58:f6:4e:62:14:0b:03:6c:ed:97:ca:47:bc:
7b:f3:dc:98:5b:ff:84:1f:94:53:7e:7b:22:90:c0:b2:3e:0c:
98:9f:59:2e:d5:1a:a4:89:5d:ac:90:4c:d5:4f:7b:18:31:23:
ac:c5:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:37:58 2025 by rpki-client