Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier: ifVFbjcGOLtM/RzCCwoeFk14FaxAjSUlkbjrjVQ3TzM=
Subject key identifier: C4:77:A0:E5:73:56:4D:34:63:10:7C:1F:07:D5:23:21:4B:8A:A7:68
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial: 01969F082E5E2FA6CCD3D75980322F0650FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number: 0A69
Signing time: Mon 05 May 2025 06:00:35 +0000
Manifest this update: Mon 05 May 2025 06:00:35 +0000
Manifest next update: Tue 06 May 2025 06:00:35 +0000
Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: No25eapBzFRl9W6NZcBhEx3veul+hfmuqsCoXbiytmU=)
2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:2e:5e:2f:a6:cc:d3:d7:59:80:32:2f:06:50:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Validity
Not Before: May 5 06:00:35 2025 GMT
Not After : May 6 06:00:35 2025 GMT
Subject: CN=c477a0e573564d3463107c1f07d523214b8aa768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ef:7a:f9:b7:b0:9b:c6:cf:97:56:c6:f4:be:
87:8d:65:b8:fc:ba:03:d0:81:31:86:c4:d1:cf:ad:
d1:c3:ad:52:5c:3e:1f:6f:3d:a2:11:50:cb:a7:d8:
d1:01:56:91:fc:c8:07:85:ae:5a:11:c1:0c:fd:6a:
aa:59:52:49:d9:d3:88:8c:33:43:f7:62:90:fc:00:
21:ed:f2:52:ac:13:80:b9:70:f0:13:d0:eb:b2:c3:
45:78:49:e5:af:db:ed:16:10:66:b0:9c:b2:e5:a7:
c8:e0:4b:0a:ad:4a:e7:0f:53:5f:2e:e7:df:88:a2:
f3:5c:a2:ce:c0:39:8d:d9:62:03:ee:c0:1c:d9:d4:
09:fb:3a:db:09:ef:9b:2c:10:78:c1:54:48:d5:a1:
d6:53:dc:a0:07:26:14:d2:4d:50:68:b5:e5:40:81:
a2:5d:b4:9f:c6:fc:39:9a:11:d6:b1:68:6b:56:a8:
6b:53:fd:84:68:6e:88:58:31:da:cc:50:a2:29:60:
46:b7:55:c4:b9:eb:38:84:d8:dd:19:23:6b:40:06:
6d:59:eb:77:ea:97:9b:fa:2a:7a:f9:bd:4f:f7:75:
d9:ef:64:c7:b7:b4:23:3e:0e:91:3f:e9:4f:84:69:
7a:2c:85:a6:41:69:4c:e1:1e:63:19:e8:0d:7e:7a:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:A0:E5:73:56:4D:34:63:10:7C:1F:07:D5:23:21:4B:8A:A7:68
X509v3 Authority Key Identifier:
keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:61:d8:dd:66:2b:7b:b3:b1:0d:ec:89:df:50:0a:d0:e5:23:
c2:c1:b2:ac:f6:74:89:59:23:89:2f:09:78:f9:db:7e:7e:c4:
9f:c6:ab:97:b3:2b:46:60:d7:e8:ee:a0:ec:a5:4a:1f:e6:3d:
18:19:f2:26:ca:c1:00:55:24:b4:3a:f1:83:75:4f:48:f0:a3:
41:07:88:48:97:17:96:da:70:93:98:7d:22:2c:a9:88:4b:ad:
43:18:c6:fe:a4:82:0c:17:a0:12:aa:df:3a:36:b0:ef:66:d3:
90:5a:d6:21:3b:b6:a2:66:1d:44:33:cc:b1:81:fc:bc:67:b5:
b5:e4:a6:c5:df:a9:f0:dd:68:1d:fd:4b:4f:f1:1f:56:95:7e:
0b:67:74:fe:00:a8:41:91:de:f3:8c:75:c1:5d:63:32:f2:d7:
34:08:dc:1a:5b:d0:45:af:70:83:08:ba:78:13:f0:0c:98:7a:
1f:75:78:6b:79:eb:f9:c5:e8:75:41:48:46:c4:17:d9:88:57:
6a:b4:4b:b2:f2:da:45:6f:db:31:d3:59:51:01:88:1a:0a:81:
9d:e7:9e:20:9e:cd:0e:f0:b4:e8:59:a1:8f:4b:1f:5d:2d:09:
79:96:b2:bd:c6:f8:7a:d0:e1:58:8c:8b:19:23:3b:72:35:b1:
ed:5e:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:48:57 2025 by rpki-client