Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: fhMNXcuLA8VdrHRdGbBpvg4WOA+PlVRwuJmsMv7Xk1g=
Subject key identifier: A7:FA:50:DF:30:4A:1A:77:DE:66:81:1F:1F:16:AA:93:5F:D8:73:56
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 0197474284843122ACB57405D0FF024DA635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 22:00:30 +0000
Manifest this update: Fri 06 Jun 2025 22:00:30 +0000
Manifest next update: Sat 07 Jun 2025 22:00:30 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: NHUngvELogrbd//k0PtHKt3M+IorEbax9knYMpluVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:84:84:31:22:ac:b5:74:05:d0:ff:02:4d:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Jun 6 22:00:30 2025 GMT
Not After : Jun 7 22:00:30 2025 GMT
Subject: CN=a7fa50df304a1a77de66811f1f16aa935fd87356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:29:16:1f:d6:f1:2a:a4:5f:29:50:05:4d:
4f:73:1e:a8:4f:25:47:91:a5:b0:29:3b:e2:7e:98:
bc:4e:0e:7b:bc:c7:99:0e:4f:b8:08:f9:73:92:eb:
be:62:58:6e:16:bf:56:30:68:21:13:45:c4:1f:13:
7b:c8:ba:d6:95:86:1d:34:1e:35:69:f3:46:6f:e3:
14:31:59:29:71:dd:c3:bb:0b:27:67:1f:11:98:e3:
1d:ad:a3:9b:e4:95:ad:51:f4:31:20:76:e6:5a:a8:
c2:5b:84:ff:83:09:2e:d2:09:d7:5b:df:7b:23:c4:
0d:99:1a:7f:6e:a7:b4:46:fc:cf:cc:32:36:4d:f8:
21:a9:bc:fb:2e:21:5e:68:11:39:75:dc:f8:8b:19:
31:d4:ba:5a:eb:9f:1f:ae:d8:d5:04:fa:8e:99:dc:
da:88:d6:c7:80:f1:1a:64:52:63:30:69:ac:17:94:
e5:10:b7:8e:0f:b9:dd:4c:19:c4:ae:30:c3:54:5c:
61:3b:3b:d4:d6:30:84:d1:af:55:d8:d8:94:15:2b:
52:9e:08:cc:42:a6:00:5f:45:91:8b:1c:53:19:51:
65:b9:23:c4:af:4a:b5:60:9e:9e:58:a5:bf:1a:65:
46:ef:63:e7:1b:cc:3c:20:60:00:90:58:28:56:c6:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FA:50:DF:30:4A:1A:77:DE:66:81:1F:1F:16:AA:93:5F:D8:73:56
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:0f:ad:1c:da:3f:88:de:22:b7:21:ad:d2:9a:88:e1:c2:07:
35:2f:85:ea:e5:67:70:0d:73:86:f6:4a:6a:99:e8:b6:d6:f2:
5b:97:ed:fa:f3:17:c5:51:6d:bd:81:0a:f9:61:2d:8c:bc:bf:
e4:fb:e8:88:a3:d8:37:18:f4:b9:12:85:4f:15:09:1e:20:78:
bc:fe:db:c0:cc:e9:43:b3:34:52:a0:b8:e3:97:d6:e4:9e:3e:
00:72:c4:ed:af:cd:3d:88:e2:3f:8a:4f:8d:6e:08:e8:ae:54:
3e:a8:22:72:7d:c1:01:1f:1c:5d:d1:2b:8a:81:dd:04:d7:68:
77:46:6c:94:01:10:94:59:03:fa:9f:7f:f7:3d:fd:6b:de:ed:
e3:59:89:40:39:3d:3e:26:a7:43:73:66:b6:8d:c1:be:e7:b7:
54:77:8a:c2:e6:44:bf:2f:6c:c4:66:f3:49:4c:21:46:24:54:
6b:e3:01:b5:dc:9f:7e:11:ad:5d:45:a8:30:63:a8:d4:d0:01:
99:5c:0d:98:69:33:a8:56:38:39:03:3d:da:71:fb:cc:85:bd:
1c:65:c3:5a:e4:ed:94:ac:70:7c:32:59:0d:bb:68:26:3e:49:
91:ab:76:14:ee:a8:92:2a:b7:37:0a:a3:5c:a2:7d:f2:c1:b6:
d8:21:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:31 2025 by rpki-client