Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier: m4EcBUwJOsIijoI4CGvVpdQEd3fdfUW1+97aHcHpdWE=
Subject key identifier: 9E:D2:7C:92:A3:34:18:F8:34:7D:77:4F:81:41:1B:26:D2:F1:E1:E0
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 0197B7B33440C036E173F3B29E786B1D70D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number: 022F
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: ZIhJWxnDy61SWAHkxvCPVleVxfZTh8nZGPn+IO5+hO4=)
2: bf-KUAB6aLpkHJGbHNwPz-TdsjU.roa (hash: HN5lyJEQT7Bh/OQNiW1klOAzdGY3jUKHNz1khIQidQk=)
3: zg1Lpd5dXDDrXWEs29Dqtm1PLWo.roa (hash: c0hWZybUPDWWpEetuD+QWOEePUUQ5c0jYzDlZOTBQ5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:34:40:c0:36:e1:73:f3:b2:9e:78:6b:1d:70:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=9ed27c92a33418f8347d774f81411b26d2f1e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:20:cc:92:8b:0f:ef:04:74:c6:d3:d2:5d:
34:e5:92:5b:1c:88:63:c8:c6:0b:57:69:50:32:14:
1d:fe:e8:de:6f:20:fa:85:d9:df:13:74:5a:20:4e:
3b:4e:77:11:ec:cd:22:09:73:93:0d:0a:98:21:17:
40:c7:34:f0:98:df:ca:3b:ea:ab:8b:ff:de:f2:52:
60:75:e7:9c:aa:1f:44:2e:c6:02:3b:58:b1:86:64:
c8:99:43:34:13:78:ff:9f:7e:2f:a4:c6:4f:fa:b7:
52:af:47:a7:db:88:51:8b:86:3a:ef:c3:3a:cc:fa:
2a:d0:84:01:ea:9d:60:81:8e:ad:17:52:84:e4:83:
2e:9c:98:94:2c:ea:ba:db:ed:f1:d0:8d:16:b7:dd:
c8:15:3f:86:4d:26:9e:ae:ab:d6:95:44:6b:d3:3b:
56:75:2f:6b:5d:d8:54:bd:5f:c9:ab:37:c7:6c:19:
5d:c1:5d:32:21:dd:fd:fc:80:9c:88:e7:f9:39:3f:
4c:13:a2:c7:7b:cc:d2:de:b4:0a:23:0e:fb:23:ef:
ed:26:d8:b8:c4:15:f1:d7:b2:a9:aa:e6:a3:fb:d3:
d9:d8:88:6e:25:b3:67:45:b2:67:33:2d:c2:77:a2:
4f:d5:4b:d0:5e:b4:11:72:fc:33:ba:21:31:42:19:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:7C:92:A3:34:18:F8:34:7D:77:4F:81:41:1B:26:D2:F1:E1:E0
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f0:60:c1:08:c4:9a:33:e9:96:8d:16:cb:c1:38:a1:c4:ef:
f1:b1:a6:b0:76:86:05:d0:23:be:5c:a2:ed:57:47:35:2c:4d:
74:a8:3a:3b:f6:a9:00:dc:59:fb:f7:30:15:3f:1a:db:36:8d:
dc:cd:53:f1:21:2a:79:01:19:1e:01:83:e2:9b:9b:13:f8:e3:
2b:70:de:01:d3:de:4c:8c:4d:03:cd:97:20:a6:a7:34:f7:ba:
6d:9b:e6:b2:ae:8d:01:3f:55:21:76:90:51:15:8b:13:9f:d5:
4c:26:e9:0a:99:5d:22:bf:3c:1b:84:d0:b1:94:f3:ac:31:3a:
f3:73:1f:ce:1a:11:29:39:44:d0:d9:2b:39:cb:b1:b7:0b:5a:
ed:e2:a5:e9:4d:56:5b:66:1a:9f:eb:85:57:8c:08:f1:6c:46:
82:a6:4a:94:a8:bf:d2:44:70:3e:d2:20:72:4e:03:82:b2:57:
4b:eb:49:02:08:73:0a:c2:56:b1:4e:a3:2d:97:c3:63:f4:79:
0e:c2:72:ff:eb:3e:58:88:10:28:37:9f:77:f6:42:73:4e:24:
f8:94:ea:23:77:6d:e6:cb:92:c6:50:cf:71:a0:18:15:eb:ae:
1f:4d:a2:c4:4b:3b:8b:66:f4:0a:29:cb:dd:0c:ff:b7:cf:47:
fb:91:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:38 2025 by rpki-client