Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: MUTA/x2r0WYMaY0+AoKutt1BYNrY2o+LdYYco9ak/qI=
Subject key identifier: B7:CF:C5:45:F8:F5:11:1B:DE:3E:EA:02:AA:D6:2F:F9:F2:FB:A6:B9
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 0197B70ECF8FA6109CB89206AB305185B004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 027A
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: U6V1385ayAM327s2PA7d0Hc4/fGxsBY+HLOLsz+2NyQ=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cf:8f:a6:10:9c:b8:92:06:ab:30:51:85:b0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=b7cfc545f8f5111bde3eea02aad62ff9f2fba6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:7a:70:42:2d:4a:63:ad:c6:7c:cb:4a:75:
5b:e9:99:d4:2a:d0:bd:bc:0d:b8:e8:7d:cf:46:f7:
41:e5:82:a6:f7:c9:39:bd:38:5f:25:0f:e2:7f:5f:
b9:6a:59:5b:49:4e:05:bc:25:93:aa:fc:ba:1d:a9:
40:c4:35:b2:b1:17:03:63:b9:5b:62:de:5e:d5:60:
c9:21:16:76:8d:1f:12:13:07:d1:cf:9e:cf:7b:ce:
6d:59:0a:c6:c2:7e:c4:1f:da:8d:a0:aa:ad:e6:b7:
75:70:40:56:7d:33:9e:0c:8b:81:9e:0f:75:ba:f5:
69:51:e7:51:63:7f:c2:bf:90:8a:75:dc:e9:2a:cf:
86:6b:02:d5:a7:3f:98:98:e2:fa:f1:c1:5f:5b:71:
3e:32:bf:17:cf:3a:aa:ef:e6:d2:bb:78:8f:26:c7:
df:45:88:1f:35:94:88:50:e8:72:5d:a6:d6:9f:a4:
dd:f3:98:9b:49:4c:1f:7f:1d:59:ca:95:31:1a:33:
86:c0:69:5e:ef:80:0f:85:6e:b9:3a:1a:b0:f8:4f:
64:b3:4a:05:63:44:34:c3:91:c4:27:55:18:fb:20:
93:93:97:a0:28:ea:88:0c:fa:f1:de:ce:f7:3e:6d:
b8:74:29:18:10:3d:29:c1:48:9c:d5:0a:e9:c3:97:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:C5:45:F8:F5:11:1B:DE:3E:EA:02:AA:D6:2F:F9:F2:FB:A6:B9
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:10:b0:a5:e1:dd:65:f1:05:b1:57:92:ed:14:88:c2:69:
a5:6b:8c:8b:a2:f7:aa:d9:bb:24:ac:24:a4:94:ff:28:aa:a2:
e4:cc:e0:54:5a:ab:66:2e:df:97:7e:35:1c:03:e6:f4:22:be:
83:6b:18:09:45:c4:60:a7:e9:e3:ff:7a:5c:94:e0:e1:a5:0c:
96:f1:08:f7:c2:6f:20:04:97:bb:39:e6:47:0e:ac:57:3c:d9:
5a:82:71:0d:0a:f8:2a:98:e2:82:b6:3c:3f:ed:62:40:3f:98:
6c:2c:89:de:40:36:c0:ec:2b:ce:f8:90:5a:c7:c6:55:c0:be:
39:98:d6:49:f0:3d:e6:07:50:be:47:b7:51:7e:32:8d:0c:58:
0e:ad:01:ba:65:16:d4:e3:19:c6:16:03:ae:45:d1:ae:61:a1:
0a:be:70:4c:47:99:d0:b0:60:c0:ee:8c:c3:66:f8:66:94:94:
9c:93:6a:f7:d7:b9:78:92:f4:e3:c5:dd:d7:ba:45:21:5d:cd:
6a:44:bb:9d:5a:4e:8d:1a:69:65:e7:6c:f4:58:2f:1a:02:6e:
92:59:0c:95:f5:51:61:81:93:8b:f6:d6:9d:b4:44:b7:7e:e3:
42:d7:9e:98:9c:5c:e5:6c:2f:37:33:05:6a:97:1e:36:e5:00:
38:24:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:25 2025 by rpki-client