Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: kMFgQUVIkFpAMlEZRpLWUgmeYzKhsAQXlQe4hg6jKoI=
Subject key identifier: 5E:DC:E1:54:A1:7E:0C:D7:A5:69:4D:E0:08:BF:70:28:67:E1:4D:48
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 0198D6CDB850C612F274E40C604CAB106DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 030F
Signing time: Sat 23 Aug 2025 12:01:02 +0000
Manifest this update: Sat 23 Aug 2025 12:01:02 +0000
Manifest next update: Sun 24 Aug 2025 12:01:02 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: DBgV142mubQS2XgH01+mz87gDMmKpoRxze0hNGeK/eY=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b8:50:c6:12:f2:74:e4:0c:60:4c:ab:10:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Aug 23 12:01:02 2025 GMT
Not After : Aug 24 12:01:02 2025 GMT
Subject: CN=5edce154a17e0cd7a5694de008bf702867e14d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:85:c6:56:be:1c:6d:6a:bc:ce:a3:82:ae:
49:33:44:f0:44:4c:a0:40:75:44:70:de:1a:6e:2c:
8c:80:fe:bb:d6:8f:f1:b5:85:49:cd:0c:a2:b3:a7:
f2:f3:75:d9:09:dd:b0:26:ab:79:16:05:fe:62:c1:
83:e0:f0:28:36:2f:c1:ec:d4:b0:39:66:78:7a:ba:
60:03:01:68:37:d2:86:db:bd:fd:83:3e:23:56:8b:
c0:6b:2d:fa:25:d2:dd:5a:92:85:a9:37:ea:e1:6c:
d1:15:2f:32:ec:d5:19:5a:30:0f:33:e8:15:e8:a1:
c0:9e:48:54:0f:fa:87:c6:94:c8:9a:b6:b7:f3:9a:
5b:a7:38:38:bf:ad:ac:59:46:1b:00:ca:57:e5:78:
35:a1:dc:66:e5:fd:92:ed:fc:88:58:23:40:e3:21:
cb:2d:81:74:cc:65:fa:82:f7:37:11:90:d7:05:f7:
30:f9:1a:95:21:f7:a0:fd:f2:69:24:c7:d4:67:60:
7f:a2:e1:d3:73:87:52:f9:ca:aa:a9:6f:ca:05:2d:
19:96:01:68:d1:ca:0a:d5:f0:5b:17:3a:92:7f:bd:
0c:6d:ed:88:aa:d8:9a:15:c4:59:ed:04:d9:4c:96:
4f:15:fc:e2:b0:67:94:2c:d2:4c:76:5d:96:a6:16:
5d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:E1:54:A1:7E:0C:D7:A5:69:4D:E0:08:BF:70:28:67:E1:4D:48
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:db:88:47:14:be:14:9a:49:6d:f7:ac:58:3f:cb:ff:ce:62:
ab:76:cb:38:61:62:c8:58:2d:e1:e4:00:25:5b:6a:7d:e0:82:
48:a6:5f:e5:24:a0:a8:21:eb:7b:b4:35:fa:d3:c1:9e:11:16:
96:e5:11:be:3d:b2:2a:d7:b0:8f:7c:cf:03:3f:e8:db:7b:a4:
49:99:d5:33:70:bd:bc:02:5a:03:19:2d:81:11:69:01:99:34:
92:d4:55:a6:a8:2a:79:df:8e:ec:42:45:3d:e8:13:4d:9d:e6:
4f:6f:b8:29:37:b9:08:4c:48:a2:12:c2:d0:36:1f:a7:84:8a:
ca:a5:5b:9f:67:58:fe:4c:19:32:5c:78:ca:24:8a:63:06:20:
d5:f5:20:0c:ab:22:f6:90:ea:2d:0b:27:d8:9e:de:ed:ed:83:
81:0d:c4:72:a8:62:c2:04:8a:32:6c:30:a6:ed:66:11:a0:fe:
1b:66:5e:a4:46:74:e4:1e:d8:8c:76:06:9f:e6:95:80:02:2a:
ab:10:56:b8:eb:f8:72:a6:e4:1e:07:f9:97:d5:ae:87:28:39:
74:9c:0d:e6:45:78:80:17:62:73:d5:9e:c0:99:8a:eb:1e:90:
26:03:97:19:d3:7d:7e:37:8a:06:06:59:93:66:04:27:ed:b6:
a1:4b:d6:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzbhQxhLydOQMYEyrEG3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx
YzgwMTMwHhcNMjUwODIzMTIwMTAyWhcNMjUwODI0MTIwMTAyWjAzMTEwLwYDVQQD
Eyg1ZWRjZTE1NGExN2UwY2Q3YTU2OTRkZTAwOGJmNzAyODY3ZTE0ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJSFxla+HG1qvM6jgq5JM0TwREyg
QHVEcN4abiyMgP671o/xtYVJzQyis6fy83XZCd2wJqt5FgX+YsGD4PAoNi/B7NSw
OWZ4erpgAwFoN9KG2739gz4jVovAay36JdLdWpKFqTfq4WzRFS8y7NUZWjAPM+gV
6KHAnkhUD/qHxpTImra385pbpzg4v62sWUYbAMpX5Xg1odxm5f2S7fyIWCNA4yHL
LYF0zGX6gvc3EZDXBfcw+RqVIfeg/fJpJMfUZ2B/ouHTc4dS+cqqqW/KBS0ZlgFo
0coK1fBbFzqSf70Mbe2IqtiaFcRZ7QTZTJZPFfzisGeULNJMdl2WphZdewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7c4VShfgzXpWlN4Ai/cChn4U1IMB8GA1UdIwQY
MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct
NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw
LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9uIRxS+
FJpJbfesWD/L/85iq3bLOGFiyFgt4eQAJVtqfeCCSKZf5SSgqCHre7Q1+tPBnhEW
luURvj2yKtewj3zPAz/o23ukSZnVM3C9vAJaAxktgRFpAZk0ktRVpqgqed+O7EJF
PegTTZ3mT2+4KTe5CExIohLC0DYfp4SKyqVbn2dY/kwZMlx4yiSKYwYg1fUgDKsi
9pDqLQsn2J7e7e2DgQ3EcqhiwgSKMmwwpu1mEaD+G2ZepEZ05B7YjHYGn+aVgAIq
qxBWuOv4cqbkHgf5l9Wuhyg5dJwN5kV4gBdic9WewJmK6x6QJgOXGdN9fjeKBgZZ
k2YEJ+22oUvWZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:27 2025 by rpki-client