Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: beQ4M4tuQwe+UwVa6uM5z83NI3jX+AkKkORqYnZrTY0=
Subject key identifier: 91:DD:D3:C3:F5:E7:34:01:8A:D5:3B:32:B7:55:D2:62:5A:31:1D:DE
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 019654934146416E999DEAA2E46D6C3818B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0AC1
Signing time: Sun 20 Apr 2025 19:00:58 +0000
Manifest this update: Sun 20 Apr 2025 19:00:58 +0000
Manifest next update: Mon 21 Apr 2025 19:00:58 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: HGCVj4gN3d712yrY2CBL8mBHWLfn3myW96GIKDgRoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:41:46:41:6e:99:9d:ea:a2:e4:6d:6c:38:18:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Apr 20 19:00:58 2025 GMT
Not After : Apr 21 19:00:58 2025 GMT
Subject: CN=91ddd3c3f5e734018ad53b32b755d2625a311dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:ff:fc:56:0e:bd:37:61:7d:07:76:62:ba:
c7:2e:df:4a:19:6b:fc:6c:2a:36:10:df:e8:5a:1d:
ca:8a:9f:36:1f:10:f3:cf:3e:3a:64:46:1e:0b:4a:
d8:a9:a7:f3:94:e7:6f:b8:38:ed:e4:6a:1f:fb:0f:
76:63:e6:a8:bf:7c:5a:c5:03:8d:b7:db:a6:1d:b1:
7a:90:08:b2:1a:92:c2:3e:b3:14:94:e7:1b:58:1e:
92:ac:89:1c:b1:0d:fb:55:2c:39:d4:eb:99:3f:5a:
e6:05:76:57:84:4f:01:20:1d:60:f5:f2:c4:df:a3:
63:f9:70:47:db:ed:ff:4e:e4:2b:b7:7a:bf:31:cf:
18:fd:7f:97:53:b4:f5:1a:9a:00:08:95:0f:9e:0d:
f7:fc:2f:18:93:5e:f9:15:73:bc:4a:cf:be:87:78:
8d:13:08:23:4c:39:fd:d1:61:a8:be:6b:b3:64:9e:
56:ba:8b:30:ed:15:15:b8:aa:ec:c1:27:84:d0:65:
1b:05:ef:42:b1:1a:c1:1f:50:ce:07:49:45:38:7f:
88:ed:0c:75:92:db:04:38:06:12:19:eb:14:02:b0:
26:ce:7f:04:d0:36:53:69:30:f8:2d:0c:88:72:94:
af:ef:64:21:08:a6:d8:d6:d6:37:73:f4:0d:27:b0:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:D3:C3:F5:E7:34:01:8A:D5:3B:32:B7:55:D2:62:5A:31:1D:DE
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f1:3e:d8:34:c3:4b:35:7f:dc:4c:1d:eb:52:f4:44:f1:39:
ee:a7:d3:7f:f5:ff:c9:7e:50:24:09:89:af:03:13:4d:32:c9:
71:9a:0a:37:e6:60:7b:98:9c:ba:c9:57:37:fb:6b:a3:4e:af:
bb:4f:be:3e:08:be:e3:45:6a:16:75:3b:00:71:50:aa:c8:25:
9b:7e:f0:80:f1:5d:72:2c:5b:d7:b0:49:d9:b2:78:2c:4e:81:
76:2e:4d:02:59:e4:5c:0e:17:9b:9f:ce:a0:35:ad:93:3a:62:
a3:f7:b3:38:4b:b4:56:b3:6e:b5:c1:76:30:63:59:ef:ac:98:
42:61:2f:12:8d:fb:0d:f6:e8:8b:33:0e:50:e7:bd:a4:33:53:
d2:07:36:39:d4:3b:bf:ca:7a:59:c7:41:f4:ea:ad:e7:71:83:
b4:8c:67:ee:db:84:ac:a5:21:42:8a:69:27:57:15:a5:e4:52:
8a:30:c4:9e:f9:f8:68:38:eb:10:7a:b2:6c:86:8c:a2:2f:29:
27:c2:0c:81:78:c6:ed:5b:70:80:88:3a:57:66:41:4f:a9:88:
99:c7:a2:63:ff:02:6e:a0:59:29:9d:68:85:46:45:5b:0a:22:
64:45:04:eb:8f:37:0c:48:3b:3a:9a:db:68:d8:5c:88:98:cc:
a4:0d:3f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:42 2025 by rpki-client