Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: iSGvgvdgyfVbmizKUoKZ26HM2sBpyYeEtNrcUkk/7RU=
Subject key identifier: 99:34:D1:EE:1C:8A:00:4D:03:00:5F:1A:EA:84:2A:2B:A2:86:DF:24
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01975D9399F917A1B6CCA798DCE201701724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 15CB
Signing time: Wed 11 Jun 2025 06:00:43 +0000
Manifest this update: Wed 11 Jun 2025 06:00:43 +0000
Manifest next update: Thu 12 Jun 2025 06:00:43 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
4: GybFbQZPW3_7i-RQuCEFHffGer0.roa (hash: tj1qN/jD8BZvRM4L8M8Yu1BpEYn8wNg9Af4c40NWF28=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: dAp7e2jsuEZSQ4ZpjMDKldaAYbOfubL2Wr4jnHaui5k=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:99:f9:17:a1:b6:cc:a7:98:dc:e2:01:70:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jun 11 06:00:43 2025 GMT
Not After : Jun 12 06:00:43 2025 GMT
Subject: CN=9934d1ee1c8a004d03005f1aea842a2ba286df24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:df:66:e3:ee:0b:f4:c2:6d:24:46:4e:0e:
d8:ae:b4:41:2c:7f:6a:37:e8:7c:4e:9c:0d:99:59:
15:0f:70:4f:b4:87:80:9b:cc:62:1e:ef:47:9b:a5:
02:69:17:51:d4:94:06:42:58:1c:10:5a:5c:6c:ba:
c3:8e:e4:15:cf:5f:8b:f5:b5:7e:36:90:b1:33:c1:
ff:30:df:a4:15:64:07:60:f6:ec:89:e5:72:7f:d5:
51:71:51:36:64:7d:6f:74:7c:77:23:18:2d:1d:ba:
64:24:65:71:bb:a4:7a:3f:ca:86:19:11:54:99:1a:
7a:ee:9d:f4:f4:3e:32:a9:f3:ca:43:ba:e4:ea:5a:
d0:de:49:76:1d:85:3f:f5:4d:8f:12:86:5f:d1:3b:
bc:17:9b:a5:a6:f6:56:fc:bb:0d:ea:0e:80:bf:36:
7b:8c:44:e4:4f:c6:ba:49:1a:b5:f1:f2:e1:b2:0a:
0a:b3:93:18:db:91:46:7b:ce:4c:ae:46:df:41:ad:
1e:73:22:c2:fb:dd:55:c0:25:8a:52:70:1d:3d:e7:
ed:80:00:a8:0b:8c:9f:dc:ae:ed:83:9b:9b:92:f1:
04:78:b3:ed:a1:11:dd:6c:ab:9e:12:a8:cd:6f:60:
5b:74:50:8c:da:ed:1b:bc:bf:19:dc:32:fe:20:78:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:34:D1:EE:1C:8A:00:4D:03:00:5F:1A:EA:84:2A:2B:A2:86:DF:24
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ad:22:34:e7:98:a9:30:86:e0:48:1d:02:f6:ad:75:ce:d1:
99:f4:f7:77:af:af:33:ba:6e:13:cb:91:7b:ca:86:a9:aa:c2:
91:eb:b2:6c:9d:64:bb:3f:d7:22:b3:6a:16:e7:12:9f:97:1e:
aa:1b:5e:75:e9:33:d2:83:da:ac:26:9d:e2:fa:a6:37:d8:e9:
66:87:77:28:b0:30:3a:c1:19:8a:25:fb:a6:b2:4b:b2:3c:4c:
94:3b:30:5e:b5:15:48:c8:fb:45:9c:c8:10:16:48:1d:e6:ef:
b0:37:9e:fe:5c:7a:64:98:8f:28:6d:f8:18:42:b5:16:1c:d9:
7c:99:57:1b:08:ef:5a:d7:d7:e5:79:d1:fd:66:fd:13:d6:83:
36:f4:9e:46:49:9b:3f:71:5c:45:7c:25:93:ac:dd:5a:7e:9a:
0c:e2:99:09:d6:2e:39:5c:ac:d0:ab:60:43:cd:01:40:d0:cf:
83:dc:8d:e9:34:fe:64:09:93:11:bd:54:12:61:18:e4:21:a7:
72:80:e2:2a:b2:e4:3e:b6:b1:42:4f:14:d9:cf:74:37:85:b4:
58:ed:9f:cd:a7:a3:56:9a:e6:c2:5a:78:2b:fa:d7:c9:50:cf:
ce:16:b3:51:9f:9d:27:12:28:7e:79:50:1f:36:97:ec:73:d8:
59:03:81:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:35:02 2025 by rpki-client