Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: p4BIEiy3nHqAX1TByLasySleiPE7BLp8/mbb9eajqCs=
Subject key identifier: 0F:CB:27:9B:E9:20:19:8B:3E:F8:3C:82:2B:9B:6F:F0:FA:E0:7A:99
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 01969F0827EF18630CA886D6254EB653DE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 01E9
Signing time: Mon 05 May 2025 06:00:33 +0000
Manifest this update: Mon 05 May 2025 06:00:33 +0000
Manifest next update: Tue 06 May 2025 06:00:33 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: w2496Mhj4q7u5K7NP+7BRyzOb+qWRR/GhJRmbb0HF9o=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:27:ef:18:63:0c:a8:86:d6:25:4e:b6:53:de:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: May 5 06:00:33 2025 GMT
Not After : May 6 06:00:33 2025 GMT
Subject: CN=0fcb279be920198b3ef83c822b9b6ff0fae07a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:2f:b0:4d:1b:eb:a4:09:aa:89:9d:13:2c:
62:f5:8a:db:d9:43:0a:e2:72:c9:02:b1:d1:9c:f0:
5d:41:3b:c4:ea:86:ab:93:0e:0c:2e:d1:bc:66:86:
df:11:55:9f:bd:ef:08:94:9d:60:c2:e8:ee:24:f5:
b3:56:22:45:81:d9:94:30:56:3d:95:2d:72:79:0d:
b7:24:61:7b:f5:d2:5f:35:4a:8e:e1:66:0a:08:8d:
6f:57:b5:fc:f2:7a:de:e8:54:37:b3:a2:96:dd:d2:
16:97:ac:02:13:46:83:cb:c2:28:9a:7d:9c:10:f2:
0a:af:55:d1:22:53:85:23:54:4d:27:50:5c:c4:1a:
b2:46:20:1a:07:6d:e1:5f:3a:04:4e:39:78:99:6b:
91:f8:a7:08:1c:04:fa:db:09:32:4f:5d:e9:6c:39:
12:86:1a:4b:d4:21:e4:51:41:a1:69:79:56:e6:48:
a8:0c:ae:9a:6c:70:d8:ca:35:fb:09:8b:2a:58:0c:
60:4a:ba:c9:75:3e:e1:f6:16:f7:4a:40:85:94:f6:
26:ca:3c:c2:19:f7:6c:b8:08:a2:dc:f4:72:37:8f:
30:a6:79:28:66:13:0a:ce:46:f5:fb:30:e5:40:21:
cf:4e:0d:6c:11:5a:2f:c7:03:85:1b:db:30:e0:01:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:27:9B:E9:20:19:8B:3E:F8:3C:82:2B:9B:6F:F0:FA:E0:7A:99
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9b:70:37:d8:68:c2:7f:9c:ae:b1:a2:55:94:cc:ca:68:e1:
c8:c5:19:10:ff:8b:3d:c8:91:32:e8:3d:51:a0:da:68:48:79:
78:50:f6:4e:3a:74:f7:11:f6:a7:e2:a9:0d:ce:30:91:5b:ce:
b3:4f:cf:2e:99:fc:71:80:85:49:55:21:be:cb:d6:17:49:59:
21:5c:33:a4:56:c4:58:4b:17:3e:34:bf:1e:bc:96:85:aa:7f:
9a:89:7c:ff:4b:7a:0e:ce:4c:be:c5:a2:70:cd:5d:57:bc:ed:
17:4c:9e:09:79:49:48:06:ab:82:03:06:f4:89:e7:85:5f:49:
df:50:12:d9:96:65:fb:16:e5:b6:09:c5:55:cf:75:4b:bd:ec:
0b:5b:2e:a0:b8:53:33:65:05:13:48:52:c9:d0:1f:2f:f1:4f:
dc:4c:2f:f0:84:cd:bd:03:58:e5:99:78:a7:d2:a8:f8:d6:35:
5c:7d:cf:f8:65:2f:1e:33:f0:be:a7:3a:39:20:da:1e:64:3d:
81:86:c5:f5:e3:7a:63:fa:47:c4:00:dd:63:73:0b:d6:36:6b:
3e:c9:60:67:e3:c9:ed:58:c0:9b:ea:a9:8d:0d:0e:16:bc:de:
fc:8b:9d:03:61:89:6f:ea:2d:b8:11:2b:db:19:62:fe:a5:98:
2b:0a:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:45:07 2025 by rpki-client