Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: 8dsPQhXFX4kT9seEImVjXrxjjDewTIXgQKOGwp1F8H8=
Subject key identifier: 87:D6:55:13:E8:83:34:6C:53:CE:5E:EC:7A:66:5B:50:BC:97:7E:5B
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019759B6D232BBCAB6CDC6835176A2020A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 15C9
Signing time: Tue 10 Jun 2025 12:00:42 +0000
Manifest this update: Tue 10 Jun 2025 12:00:42 +0000
Manifest next update: Wed 11 Jun 2025 12:00:42 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
4: GybFbQZPW3_7i-RQuCEFHffGer0.roa (hash: tj1qN/jD8BZvRM4L8M8Yu1BpEYn8wNg9Af4c40NWF28=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: 0FZcR6FMHih74gwNhG6BBmnKElAx07Y1lhQcl1IIsgw=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:d2:32:bb:ca:b6:cd:c6:83:51:76:a2:02:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jun 10 12:00:42 2025 GMT
Not After : Jun 11 12:00:42 2025 GMT
Subject: CN=87d65513e883346c53ce5eec7a665b50bc977e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:7a:ce:8b:76:67:d2:f1:44:84:4f:b6:30:
85:9f:57:20:bc:1c:2d:ec:d2:84:c5:9a:95:b0:72:
f0:be:ae:a2:04:c1:49:d4:ce:e5:33:ab:2c:a1:2f:
b7:ff:51:17:9c:79:7a:be:ce:70:5f:05:00:7b:df:
5d:29:b4:27:e1:56:a6:aa:22:67:57:5f:63:a5:2f:
b5:75:3d:88:a7:a3:d4:90:f6:9b:ed:bc:d1:b6:ea:
43:7c:db:43:97:a0:58:01:34:0b:2c:45:15:a6:2a:
e8:b7:0b:07:69:c0:b0:31:50:15:e1:2c:03:e9:c0:
3a:04:f4:97:30:39:d8:2a:ce:24:fb:a8:a3:b2:88:
90:18:48:0b:aa:14:c5:8f:10:ac:1b:1e:f3:07:31:
01:07:3a:0e:f8:34:55:6f:59:65:54:a4:6e:14:7a:
94:1f:eb:42:cc:b1:b6:d8:cc:97:c1:52:ca:a6:51:
af:ec:06:5e:bd:10:75:e9:24:5a:12:81:40:34:a4:
1e:9d:1d:92:d2:07:f4:db:12:51:fa:9a:1d:aa:bb:
96:e5:17:66:9d:cb:53:52:dd:6c:d6:39:03:3f:06:
37:f5:92:42:91:ee:c4:93:50:c9:97:8f:7b:cd:55:
d1:e6:7e:36:f0:45:65:39:ba:44:05:ce:ea:10:7e:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D6:55:13:E8:83:34:6C:53:CE:5E:EC:7A:66:5B:50:BC:97:7E:5B
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b6:28:d0:b1:a9:a5:e9:63:d1:12:75:e5:3f:ca:21:f5:49:
a1:94:a5:97:cf:ed:c1:86:14:2e:07:75:b9:d1:be:84:d6:fe:
5a:5b:c7:df:84:ac:67:e6:06:4a:44:08:fd:d3:f5:a3:e7:7c:
70:67:6a:c0:19:e7:58:2e:ef:0c:66:2b:2e:9e:1c:57:80:6c:
f8:7a:bf:05:5a:5e:29:f3:89:d0:78:54:8e:6a:eb:a9:b0:0b:
96:ac:95:6c:3a:aa:5b:3c:24:05:79:20:f9:68:3b:2e:b9:cc:
3f:31:20:84:91:88:bb:29:05:71:21:e4:c9:9b:a8:6f:2e:ac:
36:fe:49:b5:3f:53:88:81:2a:ca:5d:a8:01:d5:fd:9f:12:e8:
0d:a7:dd:35:24:4c:7f:4e:9b:45:5a:66:0b:a8:41:14:0c:af:
7f:8c:8b:a1:40:31:cb:51:ac:a9:50:82:58:ae:9a:f6:c5:fe:
d3:6e:56:7b:c9:50:37:ff:a0:b5:75:84:de:ca:0b:c1:74:a1:
e2:a3:6f:08:ea:28:07:14:1b:c2:5e:d8:c5:e7:35:f1:4b:09:
c4:dc:30:3e:17:38:e9:a0:a9:9e:00:0b:9b:ff:8b:8d:1d:07:
1d:e4:66:8d:f5:10:77:14:1b:91:f8:92:19:5a:3b:69:92:ef:
da:5c:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:06:08 2025 by rpki-client