Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: 4E/Z1R5qHQmHVS8Mbjk0PghrGfKsxGAHm5aq0P4K1gg=
Subject key identifier: FA:A5:45:D2:CF:D0:B9:D8:03:02:1F:4F:9E:56:68:DA:99:B7:21:38
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 0196C1CAEE4C9CD877C14709A7D73658AF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0CC8
Signing time: Mon 12 May 2025 00:00:24 +0000
Manifest this update: Mon 12 May 2025 00:00:24 +0000
Manifest next update: Tue 13 May 2025 00:00:24 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: jqqKwoyPKTQuba9c472Gdan1UTAqSz1gvgI7dScTTNE=)
2: IwEBndBJay-42UjStrqkUigiaxw.roa (hash: K30WoUV1lkACaXc+c2n1S5YA0J82XCcvxybes+V2uGY=)
3: U2aJyBd8P_eUVY58McQwjVpYLjA.roa (hash: LuVboNkBf5MvVMVqL/wxb5E/X4ZkELwqjAYKuZW9FEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:ee:4c:9c:d8:77:c1:47:09:a7:d7:36:58:af:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: May 12 00:00:24 2025 GMT
Not After : May 13 00:00:24 2025 GMT
Subject: CN=faa545d2cfd0b9d803021f4f9e5668da99b72138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6a:5c:0a:58:04:e1:13:95:9b:b1:13:65:0d:
79:dc:31:70:bd:a7:91:37:83:bd:bb:d4:ee:ec:96:
94:d3:ba:2b:bb:17:65:f2:68:02:d7:cd:83:d5:4e:
26:55:26:45:73:bd:21:60:31:d1:45:3d:bb:d9:16:
cc:09:42:73:2d:01:fe:6c:7e:b1:1b:f3:7f:08:6c:
f4:8b:b5:04:50:b3:68:3b:1c:86:8b:b2:eb:0a:33:
d9:ce:9d:49:c1:07:ae:dc:73:7f:35:c0:1b:af:6b:
66:4b:af:20:d8:c7:8a:e8:d9:a1:f5:04:71:7e:9c:
c4:f7:b7:c4:48:48:5b:74:c5:8e:52:5b:98:41:4f:
ef:9b:81:cf:7e:b6:7b:c0:bc:ae:4e:02:b9:3e:a1:
a4:27:cc:d2:d0:74:23:10:09:be:34:99:ad:9a:60:
45:71:c7:91:14:af:55:47:75:14:e4:54:20:6d:67:
00:8d:a9:68:77:6e:a5:57:12:4b:fa:bb:69:6d:86:
20:d6:cc:8b:3d:77:72:fa:69:e4:de:b3:0e:af:cf:
be:ba:5b:3f:3a:82:13:d3:dd:7f:b5:f1:a1:fc:8e:
f6:f8:31:8f:03:72:48:d8:7b:bc:9c:17:2f:55:35:
b2:b1:19:35:6e:de:23:56:03:65:27:04:1c:9a:a6:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:45:D2:CF:D0:B9:D8:03:02:1F:4F:9E:56:68:DA:99:B7:21:38
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5a:16:ef:88:b0:e5:bc:38:02:0a:69:89:bf:b6:6b:f6:d9:
85:8b:ca:ff:94:ca:00:6f:28:c9:a7:c3:b6:79:c6:61:7f:e3:
15:38:71:b1:86:18:03:95:6b:25:1d:f2:ab:ee:88:1f:76:83:
d9:15:09:ac:d9:21:82:fc:8a:ab:7a:e1:e9:33:14:ce:23:78:
fb:4c:b0:98:f7:ed:26:9b:d0:d8:55:8b:01:b4:b0:16:dd:58:
e3:eb:64:15:bc:e3:d8:d3:21:44:4f:17:57:ae:3b:94:bf:5a:
68:76:e8:1a:8a:8c:fa:65:dd:53:12:1e:34:e9:48:1f:34:af:
51:c2:83:ec:d5:b0:6c:cc:0a:52:3b:53:27:8f:09:ae:48:59:
93:c0:a1:c9:b8:4c:ae:49:7b:46:d5:ee:83:dc:fc:ec:66:d2:
06:2a:a3:a6:c4:6f:de:c3:ad:f6:8f:c3:a1:f3:7b:d6:d2:f6:
c1:b9:a8:68:8b:26:3f:a1:4c:9c:9f:c9:0f:ee:ba:03:08:ab:
b3:30:ab:c4:0c:f9:a5:c9:96:d7:fb:27:0d:4f:69:b6:11:2c:
b5:87:b4:fb:58:ad:b3:ae:e9:9c:e2:81:1f:c8:dd:cc:b7:fc:
b3:ca:86:01:7a:91:c0:30:5e:44:e0:fd:07:e7:dc:7a:b0:b3:
65:89:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:44:37 2025 by rpki-client