Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: GbCu5oLxlsGW5JzBfPrQI7E+ccvPKrZahitSYSxDNSw=
Subject key identifier: 74:77:93:C5:DC:4B:D5:66:36:32:ED:88:9A:07:87:42:7F:91:DC:6D
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 019749D5C113F023F4E6EB78A6B9B7843206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0B40
Signing time: Sat 07 Jun 2025 10:00:34 +0000
Manifest this update: Sat 07 Jun 2025 10:00:34 +0000
Manifest next update: Sun 08 Jun 2025 10:00:34 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: 7DEB5Hd0tsejMdC/LDkXnfj3tlgdOMTnGNhbQIA9uaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:c1:13:f0:23:f4:e6:eb:78:a6:b9:b7:84:32:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Jun 7 10:00:34 2025 GMT
Not After : Jun 8 10:00:34 2025 GMT
Subject: CN=747793c5dc4bd5663632ed889a0787427f91dc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:e3:ae:b3:6d:88:2b:4c:7f:22:d6:17:c5:
40:0d:be:61:eb:6f:26:96:01:08:dd:c0:ab:a1:28:
06:16:eb:92:c7:91:5f:c7:93:ea:14:ce:54:6a:fb:
8c:fe:38:2e:c8:0a:38:38:32:76:2d:2f:bb:bd:4f:
ce:af:1f:63:ca:3c:2f:59:4a:87:42:06:09:3d:f4:
a2:51:d5:da:1e:63:15:84:ce:5a:02:7c:c4:2b:bc:
74:07:f7:a0:b2:89:71:b4:53:71:ad:4b:60:cb:c3:
7d:63:da:de:95:38:68:c1:37:81:06:9c:d0:f5:5b:
70:72:5d:2f:95:e1:59:3e:81:47:94:4d:db:00:0a:
44:d5:37:53:c1:d4:ff:82:9c:dc:98:b1:ac:21:6c:
04:a1:47:00:fe:5d:b1:08:db:d5:0a:57:c1:17:e5:
82:ca:9e:13:92:e3:7b:21:c7:aa:22:12:5c:21:17:
4e:a6:1d:03:a0:63:19:cf:95:cd:4a:2f:11:f1:38:
42:94:50:52:06:b6:73:68:63:39:36:e7:74:cc:26:
35:ec:40:88:ac:aa:62:41:21:45:71:6d:5d:67:9d:
62:67:d6:dd:b4:88:6a:e1:98:56:e9:88:cb:fd:fa:
d7:24:50:f3:1c:c9:a9:0d:18:61:67:e2:8e:5f:28:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:93:C5:DC:4B:D5:66:36:32:ED:88:9A:07:87:42:7F:91:DC:6D
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0f:53:d0:5e:47:ce:59:5e:33:05:ca:6e:50:17:5f:24:7e:
0c:cc:80:18:34:47:26:50:40:12:68:e5:fe:f7:89:10:92:3d:
26:d0:c0:78:1b:57:93:da:26:0f:dd:26:c5:bd:fa:9f:b5:0d:
38:da:79:70:17:87:b3:91:55:6f:84:d4:eb:ae:af:81:96:d4:
e5:ce:9e:d7:79:17:97:13:e6:7a:c6:51:94:b4:ab:f8:90:83:
9f:67:26:74:8b:85:2c:14:f9:f9:80:d5:e9:a7:19:ad:ff:ff:
26:f7:35:d9:6a:3a:2d:f4:41:a5:b5:8d:80:6c:11:3a:3a:a0:
28:d7:de:b5:40:9b:f9:56:e8:84:c9:3b:0a:0e:3b:eb:f5:8b:
75:2e:9c:68:82:14:0e:0e:94:06:aa:a0:84:9c:8e:a9:7e:bf:
77:03:06:33:de:73:e5:85:a5:40:c4:0d:fe:17:ee:98:78:89:
e9:02:a5:80:c8:01:97:77:32:18:4d:ac:e8:07:db:9a:44:2a:
c8:a6:6a:2a:0e:df:eb:e5:c6:77:9d:a0:02:d4:2c:7a:3c:b1:
71:a0:77:b2:7f:75:36:7c:e5:22:e3:36:95:2d:26:ca:3a:8c:
d4:2e:b8:72:a3:3b:e6:34:ef:a1:c8:10:f3:e3:14:44:ac:66:
36:8e:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:43:33 2025 by rpki-client