Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: pyQg35i08R8HJgLZcNVrht6Pb8N8u98UpyIeXDyKUYk=
Subject key identifier: 0E:6B:3F:0E:BC:9E:4D:0B:E6:5D:FB:D6:EF:B1:91:13:BF:98:9A:40
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 01964A46481A20D3C44A85803FF1D59B2092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 19:00:41 +0000
Manifest this update: Fri 18 Apr 2025 19:00:41 +0000
Manifest next update: Sat 19 Apr 2025 19:00:41 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: SybFbXcLI1B0QQ8MAonxBLRd8Kdq+kaxvYfJvtCQEG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:48:1a:20:d3:c4:4a:85:80:3f:f1:d5:9b:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Apr 18 19:00:41 2025 GMT
Not After : Apr 19 19:00:41 2025 GMT
Subject: CN=0e6b3f0ebc9e4d0be65dfbd6efb19113bf989a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:9e:90:2c:b7:39:b5:6f:0b:db:38:1a:32:
9a:04:be:45:50:e2:2d:1e:bc:3a:28:03:54:1d:bc:
d9:40:99:31:42:5e:a2:8c:df:a1:85:17:f8:6c:20:
c0:75:5c:fb:2d:c9:1d:bd:08:a6:a9:80:2d:86:03:
5d:55:8f:db:f7:39:20:0c:62:cf:f8:65:cd:48:c4:
c6:d1:f3:47:f1:a0:43:22:85:29:1e:d1:4c:a5:e9:
ae:0d:f6:af:96:f0:f2:9f:24:bf:04:37:e6:83:f4:
a7:9e:8c:32:9a:12:15:9e:33:05:1b:df:aa:ec:1e:
3d:f9:af:92:41:46:e2:88:08:92:f8:1a:84:82:c1:
29:68:7b:5b:20:23:fe:cf:81:d1:95:fc:5c:e4:4b:
2c:9c:63:08:8f:8a:b9:c8:60:3f:27:ee:ec:35:1c:
60:12:21:e9:81:34:06:aa:2c:c8:b1:99:c9:19:4a:
74:29:7e:0f:db:af:8d:96:c9:fe:bb:e8:db:fe:da:
5e:2d:cf:69:74:f9:5c:50:4c:24:71:d8:70:f0:88:
bd:49:56:2e:2a:1a:ff:77:84:c7:6f:3f:e3:6c:0c:
97:2f:04:8a:51:c8:cb:2c:9b:5b:f0:17:5f:11:2d:
c0:0e:7a:0f:c1:87:88:44:c8:1b:be:61:03:39:af:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:3F:0E:BC:9E:4D:0B:E6:5D:FB:D6:EF:B1:91:13:BF:98:9A:40
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bd:4c:75:c6:c9:82:3d:2a:cc:62:5c:91:82:30:5b:8c:23:
90:bc:ef:33:c0:0e:bc:2d:e7:f3:1b:31:47:06:ed:d7:f5:2d:
d9:83:23:05:e2:86:93:65:08:31:1f:68:e6:4b:9f:90:fc:a4:
02:43:b5:fd:d6:9c:63:e8:46:0c:ce:3a:8e:8d:04:ce:9d:ab:
5e:a6:a7:a1:43:5b:6c:25:5e:9c:d0:51:a4:7e:e7:b2:d8:91:
14:cf:79:ae:1e:e5:92:1e:c8:a6:b3:72:5e:8f:e9:73:e6:09:
64:4f:e8:b6:6b:0a:86:39:96:14:10:df:46:6d:2c:75:b1:f1:
1a:c6:65:3f:81:21:4b:69:19:1f:84:e3:64:5d:5b:62:f2:4f:
3e:10:a2:a6:74:8d:68:c6:21:b0:10:a2:93:09:3f:3b:2a:8f:
1b:04:48:3f:5e:c3:7e:b8:0c:b3:48:8a:a3:22:34:71:7e:1a:
54:d3:0b:44:84:48:51:b6:29:73:a8:01:44:ac:6d:a7:a1:d6:
94:bc:93:62:2b:5b:ec:17:6e:4a:a0:1e:87:35:5c:7a:49:52:
71:40:7b:5d:09:9d:96:08:8f:8b:12:6f:17:a7:1c:f3:28:8a:
57:8e:d2:a3:6b:5f:66:ff:58:ab:ba:83:f2:eb:70:ed:df:f5:
c6:1f:b8:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKRkgaINPESoWAP/HVmyCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx
OTAwNTQwHhcNMjUwNDE4MTkwMDQxWhcNMjUwNDE5MTkwMDQxWjAzMTEwLwYDVQQD
EygwZTZiM2YwZWJjOWU0ZDBiZTY1ZGZiZDZlZmIxOTExM2JmOTg5YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSCekCy3ObVvC9s4GjKaBL5FUOIt
Hrw6KANUHbzZQJkxQl6ijN+hhRf4bCDAdVz7LckdvQimqYAthgNdVY/b9zkgDGLP
+GXNSMTG0fNH8aBDIoUpHtFMpemuDfavlvDynyS/BDfmg/SnnowymhIVnjMFG9+q
7B49+a+SQUbiiAiS+BqEgsEpaHtbICP+z4HRlfxc5EssnGMIj4q5yGA/J+7sNRxg
EiHpgTQGqizIsZnJGUp0KX4P26+Nlsn+u+jb/tpeLc9pdPlcUEwkcdhw8Ii9SVYu
Khr/d4THbz/jbAyXLwSKUcjLLJtb8BdfES3ADnoPwYeIRMgbvmEDOa8aPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5rPw68nk0L5l371u+xkRO/mJpAMB8GA1UdIwQY
MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt
YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1
LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZL1MdcbJ
gj0qzGJckYIwW4wjkLzvM8AOvC3n8xsxRwbt1/Ut2YMjBeKGk2UIMR9o5kufkPyk
AkO1/dacY+hGDM46jo0Ezp2rXqanoUNbbCVenNBRpH7nstiRFM95rh7lkh7IprNy
Xo/pc+YJZE/otmsKhjmWFBDfRm0sdbHxGsZlP4EhS2kZH4TjZF1bYvJPPhCipnSN
aMYhsBCikwk/OyqPGwRIP17DfrgMs0iKoyI0cX4aVNMLRIRIUbYpc6gBRKxtp6HW
lLyTYitb7BduSqAehzVceklScUB7XQmdlgiPixJvF6cc8yiKV47So2tfZv9Yq7qD
8utw7d/1xh+4bg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:30 2025 by rpki-client