Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: KDFmZNek/3yO/XQ/7o18+kdO3n1wHg+eKsS0QcY9c4U=
Subject key identifier: 23:9E:FC:DD:1C:8D:A3:47:9A:BE:7A:19:17:34:2C:26:1C:89:3A:D3
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 0197BAB4471CB8AD30F298A4FD5D0196559D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 08:01:06 +0000
Manifest this update: Sun 29 Jun 2025 08:01:06 +0000
Manifest next update: Mon 30 Jun 2025 08:01:06 +0000
Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: /97nMlrlE488YHhgws+VgFJMG36dj43E65ENOSPS5+w=)
2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:47:1c:b8:ad:30:f2:98:a4:fd:5d:01:96:55:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Jun 29 08:01:06 2025 GMT
Not After : Jun 30 08:01:06 2025 GMT
Subject: CN=239efcdd1c8da3479abe7a1917342c261c893ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:b7:9e:1f:1f:d7:b5:0f:2c:ed:b2:c5:a1:
9d:35:9e:71:7e:55:59:4a:c9:9e:8e:e0:7e:cb:a4:
1f:21:8b:f8:13:a8:a8:e9:ce:e6:d7:31:01:98:42:
6b:a5:de:f1:2c:5e:dd:ac:9c:a6:3d:dc:de:e3:0b:
64:19:58:ad:d0:a3:37:eb:d4:fd:25:08:48:26:cd:
14:66:e1:5c:c3:30:21:43:f6:99:f4:3a:fe:54:d7:
2e:dd:6d:9f:e8:c7:0e:20:37:4c:66:f3:f9:8c:6c:
db:d9:75:b7:c7:24:75:aa:81:23:d4:0b:86:b4:06:
12:b1:42:9c:2a:f0:e9:ee:87:8c:0d:06:f4:f9:ae:
92:38:3b:19:b6:ee:13:0f:95:34:21:51:a6:9d:2e:
30:66:ae:c8:ba:5f:40:5c:f4:45:8c:1b:ed:b8:70:
81:d8:7a:19:4b:ae:fc:31:b6:60:3b:74:7c:6b:cf:
43:fe:31:04:6e:6a:98:f9:fa:e1:c1:9d:40:e0:e7:
a0:18:b8:1a:01:a3:95:21:a2:93:72:e7:6f:37:22:
25:2a:0a:17:35:96:29:0d:b8:63:24:14:12:e8:d3:
9d:a3:45:92:ad:28:b0:d9:37:a4:24:33:4d:2f:80:
7d:76:2d:41:5b:31:7b:de:49:56:38:36:b8:f3:4e:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:FC:DD:1C:8D:A3:47:9A:BE:7A:19:17:34:2C:26:1C:89:3A:D3
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:68:20:5e:71:c3:85:14:d6:31:6c:2a:f3:9b:58:bc:26:cb:
51:19:5d:51:7e:d0:da:5a:23:51:ff:b1:56:ad:da:75:d6:6c:
ff:4f:e7:59:03:50:35:6a:3b:3e:a0:75:c2:d7:4d:d4:fb:b3:
1e:fd:10:f0:52:fa:6b:32:14:07:3b:77:be:19:5e:c0:2d:55:
4c:bd:93:52:b2:07:c7:37:2c:11:27:a9:29:23:7f:6b:8a:0b:
4c:bd:2d:58:4d:ec:48:9b:b3:19:87:56:d8:8f:f7:22:e5:cb:
43:17:2f:bd:41:8b:96:af:e0:3d:6d:26:5a:a7:21:8b:24:4f:
f6:15:eb:52:a9:c2:e0:84:e8:66:6d:ce:54:21:38:2d:e1:43:
8a:db:f5:35:f2:ed:75:67:12:0d:6c:16:88:61:6f:63:54:bf:
a8:b6:b8:68:4a:b9:5e:70:89:2c:fc:e8:11:a4:d9:c2:42:27:
8e:27:32:b2:41:aa:0d:47:3a:c7:31:e2:04:61:97:98:5f:22:
16:6d:42:48:62:34:c2:09:8c:44:d0:53:56:85:18:23:cc:ef:
57:3d:cf:21:be:61:f0:35:0e:ec:ff:1c:4e:02:ce:fb:55:7a:
b2:83:9c:8c:ab:32:d0:c3:8b:77:7a:3c:7c:6d:3f:ef:89:80:
08:a7:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:40:07 2025 by rpki-client