Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: uLeDeTmzueqiefrpLwcAgWHY5goDmbxL8fgdZlljRLo=
Subject key identifier: 62:52:0A:73:3C:C6:EF:D4:DD:0F:D6:41:E9:4A:CD:2F:0B:AA:66:73
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 0196CCF37B2DF02A6B22E4BB80612E115FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 0601
Signing time: Wed 14 May 2025 04:00:30 +0000
Manifest this update: Wed 14 May 2025 04:00:30 +0000
Manifest next update: Thu 15 May 2025 04:00:30 +0000
Files and hashes: 1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: yZi6gis6L8RpZCByQhkZAIJ2Kzz+pNB5t1eCZ8J8ao0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:7b:2d:f0:2a:6b:22:e4:bb:80:61:2e:11:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: May 14 04:00:30 2025 GMT
Not After : May 15 04:00:30 2025 GMT
Subject: CN=62520a733cc6efd4dd0fd641e94acd2f0baa6673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5c:94:77:89:bf:90:e1:c4:c0:42:65:3d:82:
80:ea:ae:59:8d:06:76:4e:e7:c9:63:4b:dc:99:3a:
d5:f9:a3:be:0b:d2:eb:ea:95:be:25:99:12:4a:77:
09:c1:22:de:5e:ae:3f:fa:f2:74:0e:a9:54:a3:86:
21:90:e8:02:a0:d7:ab:a2:5f:74:6e:dd:78:d2:d8:
5a:22:55:ad:6e:71:b0:eb:56:8c:b6:1b:cf:b7:c5:
f3:01:b7:9d:29:e6:80:34:28:32:ce:91:52:2c:d7:
a7:f9:19:cf:2d:de:9d:6e:f2:1e:7b:73:b7:aa:96:
08:99:5d:5f:7c:6c:f2:28:1b:1f:51:e0:06:b7:f7:
b9:f9:27:ca:98:f1:bc:c4:2e:65:5e:1c:dd:f7:d9:
21:f9:8f:6f:0e:f3:d7:14:4a:66:77:0b:46:61:2c:
82:52:6e:7a:38:27:80:e2:78:77:72:2f:b6:7f:68:
2e:d0:5b:81:12:e4:8c:d3:38:f6:04:ed:7a:09:c3:
a7:cd:68:9a:0c:0b:5b:e5:f7:53:9c:37:05:3d:37:
dd:9f:94:9e:3e:6b:2e:d7:68:9d:a3:fe:35:4e:67:
04:6c:25:d0:f5:55:65:18:60:f3:de:1d:02:e8:6a:
77:28:2e:47:83:9e:4d:3b:ae:40:19:46:c1:23:af:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:52:0A:73:3C:C6:EF:D4:DD:0F:D6:41:E9:4A:CD:2F:0B:AA:66:73
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:44:1a:62:c1:f6:ec:d2:6a:d7:ca:6b:69:b0:87:03:0d:ec:
41:07:25:7e:6c:e8:db:7d:f7:c7:fb:10:bf:5e:34:21:77:fe:
45:21:25:f9:f7:75:c0:47:b3:9f:8c:35:da:3d:16:85:15:fc:
11:75:12:d0:f8:8b:20:78:e3:03:cd:e9:1b:58:5e:25:16:a8:
de:93:cf:82:13:e3:b8:65:0f:f4:1a:f1:79:2d:7f:2c:3b:59:
9a:dd:94:eb:e6:07:4b:b1:88:a2:8b:91:8f:e3:8d:ab:c0:20:
2d:b1:24:f5:fd:05:3f:07:fd:85:ad:e0:89:3a:71:b6:4a:48:
1d:aa:0c:64:8b:2b:13:69:e8:a5:50:87:03:f3:d1:a4:33:97:
be:05:eb:b8:bb:83:b3:7c:46:c4:46:be:31:8b:db:2a:f8:6a:
94:a2:f4:6d:9f:ac:94:8a:1e:c6:7e:68:1c:df:32:c9:d2:f4:
d8:fd:79:9b:59:a6:7d:4b:65:b2:c0:82:09:c2:ec:25:1e:d6:
1f:2a:42:3a:2a:62:62:7d:99:97:f1:9b:86:de:c7:40:ad:9a:
83:d7:2a:e7:36:fb:8d:14:cb:a6:27:0f:67:7f:07:05:e3:94:
25:45:f5:c0:c1:e4:8d:90:d8:a2:2e:b5:32:76:a0:68:3f:af:
d2:44:3c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:56:57 2025 by rpki-client