Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: Sab4gmzLW8HpZ73HeO9+/+pAE0SpsqTzBbssn5Gnq2E=
Subject key identifier: 15:A7:36:49:B2:0D:B1:32:C5:64:EC:C8:16:3E:AA:B0:BD:24:A2:03
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 0196C013AB1A805F770F4AD1F1BDCB0F667A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 16:00:36 +0000
Manifest this update: Sun 11 May 2025 16:00:36 +0000
Manifest next update: Mon 12 May 2025 16:00:36 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: UbZvU+c/3BP1mzlby4ba14q234ixT/0ejF9UTk77uO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:ab:1a:80:5f:77:0f:4a:d1:f1:bd:cb:0f:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: May 11 16:00:36 2025 GMT
Not After : May 12 16:00:36 2025 GMT
Subject: CN=15a73649b20db132c564ecc8163eaab0bd24a203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:e8:3e:32:e6:49:17:a4:9f:4a:a4:da:c4:
21:c8:36:cc:33:ba:54:e7:0d:2a:68:94:f3:21:7f:
f3:57:21:d9:e2:da:4a:83:c8:71:3b:f0:c3:46:29:
94:3e:9d:c0:da:b2:82:71:7a:a5:8c:46:23:05:e1:
cd:4b:ec:83:fa:d3:15:cc:8c:12:67:f5:9b:5f:4d:
f5:06:81:d4:cb:f2:03:df:65:af:69:89:88:99:c9:
9e:b9:c2:69:bf:b5:bd:a2:8a:92:d5:47:b4:0c:cd:
7a:a1:03:2f:3a:01:7f:80:6f:0e:5b:9a:b3:79:17:
b8:89:72:84:e6:61:3f:33:af:82:b5:36:8c:09:bc:
22:76:d6:c1:ce:9e:a5:a7:86:ca:ad:d8:5e:b1:10:
2f:de:af:4a:c7:87:c8:ca:cb:57:8a:fb:a4:10:18:
62:b9:76:d3:42:75:dd:28:19:93:84:e7:cd:5a:33:
71:2d:05:01:14:34:2f:ee:7e:e5:db:f7:9b:7e:9e:
79:86:4a:b2:19:f2:8c:bb:0c:30:f7:85:8d:03:21:
d8:3d:66:01:22:c5:65:91:d9:eb:c8:ae:f0:a3:ae:
75:c2:5e:f7:29:c5:1f:f5:dc:76:fc:b5:19:b4:f5:
c4:87:56:1c:61:ea:c1:d1:41:ec:18:ba:62:f4:12:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:36:49:B2:0D:B1:32:C5:64:EC:C8:16:3E:AA:B0:BD:24:A2:03
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:2d:4e:ea:88:01:93:cc:ab:7c:85:29:69:ff:85:4d:64:
a8:ac:5d:0e:1d:da:c5:a4:f3:71:f6:1a:f2:79:71:7d:f5:08:
42:74:78:81:61:97:24:a0:1a:61:91:b1:c6:51:bc:05:e6:00:
22:d5:8c:fe:87:2f:f4:41:cf:36:d6:ec:bc:fb:f7:67:00:02:
50:97:57:1d:6d:0c:44:cf:7e:02:57:36:6a:5e:a6:07:e9:0e:
cc:01:84:b2:28:f3:93:97:11:07:8d:98:0a:75:85:9d:5b:6f:
cd:ab:db:ac:e9:ef:76:f3:0d:8a:9b:8a:c0:ab:f3:0c:17:cc:
ad:07:1c:c4:ae:ef:ab:2b:34:00:10:63:3a:4f:d4:87:42:78:
0e:6b:e0:cd:83:9d:bc:55:ee:14:e9:d8:43:67:16:88:5e:e9:
51:fc:ac:23:af:20:97:7f:5f:8f:60:1c:df:41:18:56:61:20:
3d:ab:0c:36:36:05:23:1d:20:ce:25:bf:15:6b:98:b1:45:b0:
77:00:e0:43:a7:dd:e0:d2:7c:7d:4f:13:5d:03:1f:8d:25:4e:
de:a9:d3:4a:c3:f4:11:4b:d4:84:d3:ab:0e:fd:b8:26:c9:72:
f6:27:d1:9a:ec:1a:2f:98:34:07:92:1e:37:9c:09:b3:e3:23:
37:c9:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:06:08 2025 by rpki-client