Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: d8BGuE8DD44H+Homn+rvXBUOTCWw3Yo/W+Va8fyDc5E=
Subject key identifier: 7E:41:42:1E:C8:45:BE:DD:88:33:EE:1B:37:04:A9:6D:29:AA:75:6E
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 0196C238EA10278052A5FF5E1B897E5F2B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 0C8B
Signing time: Mon 12 May 2025 02:00:31 +0000
Manifest this update: Mon 12 May 2025 02:00:31 +0000
Manifest next update: Tue 13 May 2025 02:00:31 +0000
Files and hashes: 1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=)
2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: gjLTuUx5WTtiFF2Ne0qxQX+l8qyNPqOIDPlrKNJGGwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:ea:10:27:80:52:a5:ff:5e:1b:89:7e:5f:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: May 12 02:00:31 2025 GMT
Not After : May 13 02:00:31 2025 GMT
Subject: CN=7e41421ec845bedd8833ee1b3704a96d29aa756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:3e:ce:a5:ba:1f:bf:40:a6:ef:d7:25:5e:
1f:f5:68:65:57:81:ee:ac:a5:56:5f:36:2d:0f:71:
2a:23:90:d2:dc:ff:0a:b1:72:70:5d:cb:5d:bf:b1:
7a:7e:61:e9:c6:b6:78:34:75:27:e2:e4:6f:a0:da:
99:8e:62:e6:56:80:cc:11:3f:6f:24:1f:12:c2:08:
80:ff:28:d8:07:94:ee:29:24:23:a2:f7:de:e7:f2:
df:ea:97:5d:b3:07:03:b7:3c:98:b0:17:07:b0:36:
a9:fa:aa:83:86:11:41:e0:fb:7a:ad:05:62:09:f6:
80:1b:9f:90:10:17:26:0c:d0:f1:c6:1a:a2:b2:d0:
ab:f2:e9:20:ad:55:aa:d2:38:51:bf:88:23:41:3b:
cc:7f:ae:19:2a:b3:ce:99:7b:2f:ca:37:41:70:d2:
d9:59:89:0a:7f:61:4e:7e:40:c3:68:df:ab:01:f8:
0f:e7:b3:25:85:9c:67:40:d3:0e:68:82:57:6a:e4:
eb:d1:88:41:a0:fa:8b:33:1d:87:be:f7:8e:d0:90:
8f:54:9e:5b:f4:df:27:53:c7:80:79:4a:8c:9d:05:
80:b0:c4:97:61:33:a8:6e:dd:b7:d7:53:f8:88:51:
8a:0c:4f:d8:7f:6d:50:76:78:01:bd:c7:db:57:bd:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:41:42:1E:C8:45:BE:DD:88:33:EE:1B:37:04:A9:6D:29:AA:75:6E
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:98:39:d5:0b:e6:84:8a:96:ff:79:49:0b:6d:65:00:f0:3e:
76:ad:e5:78:cc:19:79:72:ce:36:98:22:c9:47:b7:92:93:f0:
ea:aa:b9:31:bc:e4:9e:1f:85:09:3d:8b:53:66:b3:87:f8:00:
c6:cb:df:fd:e6:39:3f:08:26:06:a1:77:74:7e:8b:ba:9e:f8:
16:f5:a4:cd:67:57:0b:d7:1f:bd:bb:96:59:da:93:98:ee:76:
65:88:fa:0a:5f:86:b7:c1:93:0d:17:18:18:47:48:27:f0:ac:
c8:a1:09:01:b2:c5:cf:fd:dc:33:ff:b2:25:a6:ac:16:fc:65:
ba:3e:11:be:b7:21:41:06:ab:87:48:85:db:f7:af:ee:a6:25:
8d:f1:97:17:31:51:68:14:d6:d7:71:03:61:a6:54:b7:9a:06:
71:9b:44:d3:aa:fc:f2:8e:d3:e7:52:61:c6:20:af:9a:1d:a3:
e3:a2:20:17:d6:2a:36:e9:6d:77:98:e1:31:d7:fe:5e:e2:ef:
c3:ff:ca:2f:ce:0f:73:9e:69:69:f8:de:9b:fc:c1:71:e6:f1:
34:8f:3d:90:79:c4:5f:71:8d:78:ee:87:de:0f:f5:38:40:f3:
85:3e:85:cf:f3:22:a1:c4:24:81:ed:f4:31:de:37:13:01:e2:
62:58:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:46:08 2025 by rpki-client