Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: YJaZ891j6s3tJmtlfLGlf87DEp03cp13VjlGrAZJAfo=
Subject key identifier: 0C:EB:D9:23:F2:BF:46:1B:72:38:C3:5C:97:9C:E5:D8:2A:5A:91:07
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01962AF2CF5F437A2E6D9B4C3BDDF2A8E410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 152C
Signing time: Sat 12 Apr 2025 17:01:17 +0000
Manifest this update: Sat 12 Apr 2025 17:01:17 +0000
Manifest next update: Sun 13 Apr 2025 17:01:17 +0000
Files and hashes: 1: 6lZmng0xHa3v1kTd1z_jq-ERGOM.roa (hash: UTqY+wA/uciwVEvUAPtFraoFsMSyPYX4ydyMxQUmWbE=)
2: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
3: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
4: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: JR2/UvxUZ9WazgoWmroojAD/EcFplJGBDhXPi1EtDho=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:cf:5f:43:7a:2e:6d:9b:4c:3b:dd:f2:a8:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Apr 12 17:01:17 2025 GMT
Not After : Apr 13 17:01:17 2025 GMT
Subject: CN=0cebd923f2bf461b7238c35c979ce5d82a5a9107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3d:10:83:23:1e:b5:4a:2f:09:4d:b0:c1:13:
9f:6b:28:dc:24:24:97:ab:6f:8c:7c:b5:dd:60:56:
ba:32:fb:63:6a:91:eb:0b:f4:7b:a6:aa:95:a3:56:
7e:84:dc:fb:20:59:d9:42:3e:e7:db:fb:05:64:15:
5a:bd:97:ed:8b:f2:59:79:f3:df:30:f7:51:b7:af:
05:43:a3:6d:4b:f7:8c:ca:5e:2f:65:fc:d0:d2:7e:
a2:91:54:b0:60:45:b8:46:50:eb:89:df:d4:24:8d:
95:53:d4:72:89:19:2b:4d:3b:b0:71:cc:e0:30:6e:
05:f3:ac:20:71:2d:1b:51:0a:fc:01:ab:d7:7f:80:
1a:00:b4:b2:03:44:8c:7c:66:52:4d:de:a0:a1:26:
cd:9e:39:5e:b3:f5:ad:29:5f:bd:a5:a2:5b:10:b0:
88:de:a3:19:96:ab:7d:ac:08:49:43:45:a0:10:38:
e2:f0:ae:11:d9:35:7f:eb:ed:34:e9:f0:48:a1:e9:
9f:c5:bd:ad:15:f5:fb:73:8a:3e:82:db:ed:81:a7:
ef:a5:c1:dd:46:d2:cc:82:4b:10:77:0f:c7:b4:ff:
6c:cf:fc:af:ee:49:a0:27:ea:2d:6a:c0:24:f8:f5:
39:2f:34:26:ae:7f:5f:96:c0:81:bd:ee:cc:c5:a9:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:D9:23:F2:BF:46:1B:72:38:C3:5C:97:9C:E5:D8:2A:5A:91:07
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:c1:c0:c8:b1:76:b5:bc:d2:8f:00:0f:a1:35:f8:f4:11:
48:6d:ff:f2:e6:17:be:54:8b:42:27:de:bc:b1:60:16:ed:34:
b8:9a:ec:8f:20:6e:42:79:cb:10:fc:2a:8b:f1:f5:83:31:d7:
b8:54:45:36:bf:ff:b2:80:74:01:c9:e8:09:5d:14:9d:71:dd:
fd:47:a1:6c:6d:d0:f6:39:45:ce:88:90:3c:aa:7a:82:6f:60:
53:96:67:86:51:19:e7:fe:2b:7e:5b:c4:8d:0d:fd:b5:35:a8:
fb:ae:e7:40:36:d7:2b:38:70:84:bb:85:aa:e8:ab:0e:8b:a1:
10:60:b7:5b:6c:3d:49:b4:34:e2:d0:57:a2:48:c7:c7:f8:16:
e2:41:15:72:5f:26:a8:6a:3d:d0:57:6a:ad:2b:40:77:9a:1c:
d6:cf:2e:85:1f:bc:80:d6:03:59:1e:c4:c7:3a:bd:f8:b0:d9:
77:44:10:f6:3b:81:2b:43:b3:b7:5b:3b:6f:6c:95:58:40:4a:
29:6f:83:60:8f:64:a2:a1:03:d8:8e:82:e7:60:2d:ff:82:9a:
cd:84:b8:1a:87:1d:79:53:20:84:e2:61:32:67:c1:19:30:23:
c9:10:e8:ab:e3:1f:5a:7d:60:24:9e:5f:14:63:12:1f:41:a8:
ba:62:2e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:52:56 2025 by rpki-client