Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: t71vKbvS+gbKHBy2X3Q9Tfy8G+yk3GZ1y/mhXhOREsM=
Subject key identifier: 49:1C:DF:0B:03:73:2D:90:B3:2D:DE:DA:9F:1C:90:73:9E:46:E6:CF
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 0197B77C1FE75E3E7412B5401EB3B67A01F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 0D0A
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=)
2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: LQPZRm5beouaPcvQwJ4EJBBkpMCtPgnr+yXNNbfgy8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1f:e7:5e:3e:74:12:b5:40:1e:b3:b6:7a:01:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=491cdf0b03732d90b32ddeda9f1c90739e46e6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:e3:af:1c:20:ee:00:d3:4b:09:50:3d:bd:
68:9c:5a:27:80:8e:8a:dc:b3:63:42:28:61:3a:e4:
ab:2f:cc:fd:3b:c9:c1:4b:03:c1:5d:6a:63:72:89:
c4:50:3b:4c:ad:25:00:d8:19:78:a8:cf:16:96:9b:
23:71:d5:ac:46:ad:f0:95:b0:eb:bf:72:1f:60:85:
0f:ce:a9:9f:99:19:74:98:73:29:95:6d:55:d5:b2:
c5:fa:ad:55:ea:4e:79:7c:61:9b:dc:83:01:21:19:
29:12:d6:70:f2:ac:28:2c:90:ed:79:a9:a5:7d:da:
ec:d6:a7:c6:b3:28:63:d4:3f:56:5c:8c:85:8d:a4:
a8:8c:2b:5c:92:51:79:24:67:6c:36:01:42:fb:2f:
ae:65:56:43:56:bf:28:93:60:3b:a4:78:bf:f1:bc:
e3:5f:5a:ff:33:32:f0:28:51:9d:7f:41:eb:55:a0:
e1:6a:2d:bf:31:37:3f:ae:9d:95:c9:73:98:35:a9:
78:10:ae:f0:f6:e9:02:8d:0e:c5:1d:13:8c:5f:36:
55:4b:8e:ca:e1:11:ef:6e:63:d7:d7:5f:f9:b9:11:
aa:6a:71:f3:56:42:a1:1a:60:ee:74:63:a9:75:e4:
ba:6c:f2:9d:9a:f0:35:3d:94:a3:de:06:41:92:08:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:DF:0B:03:73:2D:90:B3:2D:DE:DA:9F:1C:90:73:9E:46:E6:CF
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:30:1c:05:96:50:a7:56:53:96:7c:57:e6:70:15:97:76:
85:f2:fa:cc:17:59:07:ee:0d:83:07:e9:e2:98:ff:fc:33:46:
65:83:9c:c8:17:ee:3e:f3:06:46:e6:b5:d8:e2:0a:bd:5d:14:
cb:dc:45:61:e9:ef:f7:fa:12:ce:54:ba:73:df:96:92:97:d5:
20:5b:3f:84:1c:38:75:53:cf:71:bc:66:e7:65:72:5d:bf:73:
25:b5:cb:e2:ad:6b:0a:83:00:0d:5c:d3:48:8e:0c:f4:f8:59:
4b:c1:5c:15:c1:6e:02:b4:7b:09:1b:a2:d5:da:4f:69:98:f5:
f2:ac:03:63:e8:01:53:7f:81:5f:0d:2b:20:9e:f4:b5:26:ea:
30:f2:84:68:06:ba:55:d0:1d:2b:18:f6:37:95:93:5f:93:4c:
e7:46:da:43:27:59:d2:9d:cf:a6:6c:ea:a7:1c:4f:94:b2:20:
6a:18:07:34:9c:b0:44:69:7f:26:64:cf:6c:77:c3:d9:67:90:
d7:46:3d:83:0b:5b:31:74:8a:b4:29:69:78:b1:e9:5d:23:61:
a7:e8:7b:8d:2c:45:08:8b:fd:b2:c7:36:5d:af:1b:ce:6e:24:
43:95:32:d0:de:7e:a7:3f:7c:fe:23:48:56:40:62:ce:e4:d3:
4b:c9:24:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:12 2025 by rpki-client