Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: OvM0l+XQ2ZK6qcun1vSWHhSR0WR90lo9HqzRck2p42Q=
Subject key identifier: 3E:E2:7B:96:D8:DC:E5:40:43:99:63:E0:EC:AF:50:3E:9B:06:62:3A
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 0196C34BF3898EFFB2E5252D56D976910C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 14CC
Signing time: Mon 12 May 2025 07:00:56 +0000
Manifest this update: Mon 12 May 2025 07:00:56 +0000
Manifest next update: Tue 13 May 2025 07:00:56 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: 1I4jIBx6DuIhXXfimwCWuDnnrXua45Muxgbi10vQL/o=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:f3:89:8e:ff:b2:e5:25:2d:56:d9:76:91:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: May 12 07:00:56 2025 GMT
Not After : May 13 07:00:56 2025 GMT
Subject: CN=3ee27b96d8dce540439963e0ecaf503e9b06623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:c7:36:41:66:49:ab:1b:24:f3:40:d5:d1:
b1:74:19:28:c4:18:b2:ee:89:59:60:cf:22:2c:6c:
8f:fa:19:c3:a3:7f:98:ac:8a:ba:7c:69:1d:06:53:
7d:4e:7f:a2:7d:3a:e4:5a:51:12:30:4d:7f:f5:62:
0f:8c:55:34:5e:87:2a:a7:90:79:e1:50:c0:8c:76:
cd:d9:9f:0d:95:bb:e1:a7:ca:84:b4:cd:5e:9c:da:
c3:f3:33:5b:9c:95:f3:9a:72:a4:9d:28:7f:e3:ad:
18:e1:a7:f0:a9:5d:ad:20:b5:f5:0c:8e:c8:70:64:
fb:b4:e8:f1:5a:df:af:54:75:95:ab:30:f0:1d:04:
2c:b3:bc:69:05:8e:85:0d:06:4b:1e:50:6a:c0:98:
b1:e7:be:ee:22:97:44:f1:77:6f:c1:ed:05:64:37:
52:51:0c:59:20:d2:66:96:4a:fc:45:b9:85:0c:77:
0e:16:d0:c5:68:78:64:6b:80:8a:29:7b:95:c9:9d:
e0:b4:99:e0:0b:1f:df:82:08:99:55:91:a0:aa:d0:
91:99:5a:85:d9:75:3e:77:98:40:8c:6d:e9:b8:48:
c5:99:41:28:0c:36:24:13:a6:65:64:13:c5:e0:f3:
56:b2:ca:0d:38:e3:99:e7:a3:53:a8:6d:15:69:e0:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E2:7B:96:D8:DC:E5:40:43:99:63:E0:EC:AF:50:3E:9B:06:62:3A
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b9:1c:e8:c9:ed:a9:82:8d:ed:1f:15:99:c2:f3:78:5d:cb:
7d:29:13:bd:28:57:fd:e8:17:00:d1:a3:ad:00:dd:f6:8b:da:
a8:36:d8:da:95:10:fa:94:63:f2:60:d8:7e:38:f8:40:06:93:
d5:89:9b:0e:50:d0:9a:d3:ee:66:e2:5a:7e:18:96:c9:1f:ad:
41:ca:55:42:1b:dd:64:c8:36:51:88:10:b1:b2:85:75:b1:a0:
59:51:04:b7:46:e5:46:be:70:00:ec:89:64:17:f3:f6:46:e3:
15:17:28:4d:6c:c5:34:5d:6f:de:af:da:42:f8:a9:4e:c0:47:
cb:ae:aa:17:a1:8a:eb:e5:b7:0e:0b:73:b3:72:db:89:19:ef:
40:71:7b:ae:63:85:47:4b:94:ce:69:10:e3:35:9e:ea:26:0a:
ea:1f:27:39:b5:4a:23:b7:12:08:cc:16:37:2a:02:3b:1d:19:
45:a3:16:4a:3f:f7:7f:cf:72:09:64:98:94:73:91:50:c9:52:
13:f5:bc:3a:eb:4f:3c:8c:c1:66:4d:d6:a0:be:51:47:a2:f1:
84:70:95:63:6e:aa:88:b4:23:20:10:50:ad:3f:89:84:0c:2f:
df:07:b0:d7:9a:d2:86:21:84:17:60:51:4f:ce:ab:d3:82:f8:
33:db:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:48:03 2025 by rpki-client