Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: hEkgEkd6uxKeTbndkaLbxZu3izg/SnBomXEgECA+1g0=
Subject key identifier: E3:EA:23:90:FC:DA:29:DE:C3:68:7F:B8:AC:08:42:F4:AE:F9:46:37
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 0197B745097F6FA560EC34FD049FCA405874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: JKTTLo1TrdIfFXnQqfZxFDw6qyn9tXFaSWet3Nhjp3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:09:7f:6f:a5:60:ec:34:fd:04:9f:ca:40:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=e3ea2390fcda29dec3687fb8ac0842f4aef94637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:ad:d1:86:f5:a5:49:be:ef:09:70:7c:b9:
25:b0:4a:4e:10:2b:07:bd:ca:9b:29:8a:2a:c8:28:
ee:9f:96:ad:d9:0e:9a:12:07:69:b4:1c:30:44:d8:
c0:5b:a1:5b:d9:5f:d8:e0:5f:66:64:c5:55:cd:59:
dd:7b:35:db:15:e3:6d:2d:c2:68:ff:72:8b:3f:46:
29:34:bd:10:b2:3f:32:e9:37:f8:d1:94:75:6d:0c:
5b:c7:3e:dc:03:8b:13:7a:5f:4f:fd:f1:be:df:55:
c2:da:a0:3b:bb:29:ff:ee:1d:cf:30:87:3a:99:c7:
44:7b:49:9f:c9:1f:41:e1:39:a6:81:ab:0c:3c:18:
00:16:cc:b8:6a:ae:9a:86:11:c9:08:7e:d1:c5:aa:
84:3c:ec:4f:4d:16:69:38:16:5e:c3:15:e1:b5:d3:
fb:d2:40:20:03:fd:b3:c2:12:3e:6e:4e:f4:f1:c0:
38:96:3a:17:e8:8d:6f:cb:81:10:a9:27:c0:f4:22:
26:5c:e4:8f:a8:b5:79:9d:9e:c7:9d:45:9c:ec:c2:
e7:d4:2e:de:f1:27:ad:23:f8:ba:2f:e2:6f:ed:e4:
c1:fd:0c:77:e1:e7:5c:6e:06:2e:18:d0:92:3c:ff:
65:00:45:23:1e:91:39:17:e6:ce:c4:bd:66:ff:8d:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:23:90:FC:DA:29:DE:C3:68:7F:B8:AC:08:42:F4:AE:F9:46:37
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0c:49:ed:4a:b8:c8:27:77:91:cb:e9:84:4b:3a:9b:cf:b9:
c3:7a:6c:df:8b:5e:98:c7:7d:24:94:70:3e:e2:ba:a7:71:be:
b2:87:27:e3:f1:32:7d:6b:3b:bc:cd:27:9b:91:7c:fc:1f:84:
e6:69:58:dd:4d:c8:21:fc:15:a9:cd:e9:2f:6c:5d:66:62:7b:
0c:f8:50:2b:78:af:4e:db:7a:94:4a:e8:f6:e6:a1:f8:16:45:
34:63:e4:84:fe:70:ef:b3:ba:c8:69:74:f0:09:84:76:73:6f:
2f:60:93:5d:5a:45:9b:c8:c3:7f:14:24:36:ba:22:0f:fa:9c:
aa:b9:48:63:a2:58:a6:c8:9b:c5:29:0c:04:3e:42:5a:90:54:
b8:46:df:15:cc:f7:58:86:e9:24:07:1e:9e:fa:ed:aa:8f:17:
d3:4e:60:c3:03:32:2f:86:46:99:0e:4e:74:83:ab:3f:b8:15:
92:37:5a:96:ba:0c:d6:5f:25:04:c2:63:d8:8b:8b:b9:2f:2d:
3a:19:6e:4d:12:cb:af:70:86:a1:ce:57:4d:9b:2c:af:a5:75:
77:bf:d2:e1:9c:da:4a:76:b4:27:81:fc:54:5a:92:d2:86:cb:
27:94:ad:ba:49:2d:c8:24:0d:6e:ac:81:8d:a5:53:9a:00:a9:
96:11:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:02 2025 by rpki-client