Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: RNo/P699Og9CRAKuGD9w+4DPsmp72cC+mCjBvVmXXtk=
Subject key identifier: C5:36:35:49:0A:0F:4C:F2:CC:BC:9E:B9:16:56:88:3B:49:10:21:69
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0197654D4FA6DACF9BD1DC9A9746EAEAAB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 15CF
Signing time: Thu 12 Jun 2025 18:00:54 +0000
Manifest this update: Thu 12 Jun 2025 18:00:54 +0000
Manifest next update: Fri 13 Jun 2025 18:00:54 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
4: GybFbQZPW3_7i-RQuCEFHffGer0.roa (hash: tj1qN/jD8BZvRM4L8M8Yu1BpEYn8wNg9Af4c40NWF28=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: ohUdzJyR6VHhHnRWpqALMQ0OOVr8/94UEUnNQALBDcM=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4d:4f:a6:da:cf:9b:d1:dc:9a:97:46:ea:ea:ab:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jun 12 18:00:54 2025 GMT
Not After : Jun 13 18:00:54 2025 GMT
Subject: CN=c53635490a0f4cf2ccbc9eb91656883b49102169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:c4:7c:d1:56:d9:6e:e5:10:28:dc:87:a8:
1b:a7:52:01:98:4d:58:bc:dc:aa:3d:be:8d:d2:fc:
c7:61:31:e6:94:bd:a7:fa:10:43:18:7f:d5:e4:1d:
69:3d:48:f5:a6:83:01:d3:31:d7:16:54:4c:5c:ea:
3b:81:aa:2a:e7:93:df:e4:60:e6:a6:4f:87:ce:89:
ac:bd:d9:63:34:01:f1:83:24:c2:ee:a6:b2:0f:fb:
66:fd:47:c3:10:8b:02:67:04:37:ea:53:08:d5:88:
da:d7:f3:97:13:52:af:72:07:34:80:0d:18:5b:4e:
88:27:a6:60:5d:be:1e:58:76:57:ec:35:f0:e8:99:
0e:05:92:83:51:22:c0:98:fb:a5:fc:7b:6c:86:d6:
c3:92:ce:b8:95:64:1b:29:1c:15:87:84:7d:5a:e0:
07:96:1e:71:c7:4e:53:07:e6:8d:1f:f7:96:b4:73:
35:1c:4e:fe:25:65:db:fc:b2:68:d9:32:03:e9:7c:
46:df:9c:5a:aa:88:bc:6a:2a:66:1f:c2:35:aa:c9:
89:a8:48:34:8f:fb:3f:5b:87:6f:1f:8b:9e:c9:9a:
e9:f9:72:cf:98:60:c8:4f:a2:2c:b5:97:7d:81:b8:
4c:ba:08:c9:41:bd:59:11:80:b7:53:dd:31:95:e4:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:36:35:49:0A:0F:4C:F2:CC:BC:9E:B9:16:56:88:3B:49:10:21:69
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:08:fe:c6:2d:88:4f:d5:c7:c0:cf:4c:9e:9b:ed:2e:89:
07:9f:8b:5d:c4:3f:d8:67:70:27:b7:21:db:e9:d9:e8:09:e3:
01:a3:22:64:25:7a:ef:db:bf:fd:2d:4f:f5:a3:87:65:2e:18:
49:cf:19:2a:4b:9c:64:3a:c2:2a:16:94:5f:64:18:b6:45:97:
83:b4:51:24:06:2a:a5:9f:29:0f:e2:f3:62:65:ee:fd:ab:df:
9a:9a:f3:32:61:21:62:78:55:6f:64:5b:a7:cf:67:fb:75:08:
bf:9f:fa:32:1e:34:17:04:06:07:46:1a:0a:fb:fa:71:43:1f:
53:25:7f:bc:ad:01:4b:ae:e3:33:b1:a7:96:c5:7e:31:75:b5:
b7:41:e2:d7:4a:79:cc:d2:ab:32:ef:05:2a:6f:bb:a3:68:d6:
b9:14:ec:47:0e:a1:76:3b:f1:d6:d6:de:8d:fc:4b:01:e6:ae:
fa:bf:2a:6c:85:85:23:c4:77:b0:55:65:b6:4d:18:52:2f:38:
c3:f1:b4:ce:f5:fa:5c:23:2b:7f:99:e1:5c:b0:1e:9d:a4:57:
a0:e8:87:7c:f3:ef:a0:54:30:20:4f:bf:90:bd:61:c6:35:40:
bc:b5:e4:80:b3:b6:12:e3:2e:08:74:47:45:ff:d7:f8:8c:89:
2d:28:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:43:50 2025 by rpki-client