Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: B+PRIw9ydF+DWkfXaVBZ20o8zyVvtF7K5yfHQVWt8bU=
Subject key identifier: 7C:C9:B7:06:29:58:5F:38:E3:56:0E:8C:A3:6C:5E:D9:CF:70:A6:B7
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0197B88FE9175EBA5A39E6DE2B5E3CBC3E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 15FA
Signing time: Sat 28 Jun 2025 22:02:08 +0000
Manifest this update: Sat 28 Jun 2025 22:02:08 +0000
Manifest next update: Sun 29 Jun 2025 22:02:08 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
4: GybFbQZPW3_7i-RQuCEFHffGer0.roa (hash: tj1qN/jD8BZvRM4L8M8Yu1BpEYn8wNg9Af4c40NWF28=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: 18q48ShHAp5QQmnN3rWHZnk287Ld++3+b97Xi+3Srv8=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e9:17:5e:ba:5a:39:e6:de:2b:5e:3c:bc:3e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jun 28 22:02:08 2025 GMT
Not After : Jun 29 22:02:08 2025 GMT
Subject: CN=7cc9b70629585f38e3560e8ca36c5ed9cf70a6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:20:fa:dc:7d:e6:08:4c:86:8d:a5:03:45:
c1:15:c7:ff:ff:23:3a:b6:ec:d4:73:e2:3d:0c:ad:
3b:b9:17:33:db:4b:fe:d3:ca:8d:92:a3:15:e6:7a:
09:27:92:81:b3:4e:83:0b:72:d3:73:fe:f2:e6:0b:
10:1f:bf:08:73:c7:fa:5a:b7:47:cd:f3:13:2f:ed:
a2:86:4e:7e:40:86:b4:f6:a3:9b:7a:9e:ad:9b:c6:
36:65:d5:a0:81:e0:e8:e1:6f:4b:c5:25:ad:d8:22:
47:ed:82:68:c9:3e:e9:14:de:44:ec:46:69:86:1a:
a5:4e:b3:ad:11:bd:8f:fb:e4:87:66:05:ec:93:7f:
f6:31:72:40:50:50:d4:59:a8:fd:f4:eb:48:bb:c3:
28:5c:40:ae:c1:c2:50:5d:a5:5c:02:59:e5:14:f0:
81:55:3d:e3:cc:03:6d:68:4a:4e:40:e2:f9:e4:33:
ff:cf:c7:f2:c7:fc:af:ec:07:5c:63:84:8f:bd:85:
08:c0:e6:e2:b3:d7:3e:c3:4b:01:60:ef:c0:32:82:
3a:dd:d9:36:28:49:d5:1a:a3:7f:99:58:e5:6a:bb:
58:9c:2d:87:6b:51:5d:d6:e3:4b:7b:db:7b:6d:81:
b3:42:e9:27:1b:dd:d7:f1:17:bf:6d:28:bd:47:8d:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C9:B7:06:29:58:5F:38:E3:56:0E:8C:A3:6C:5E:D9:CF:70:A6:B7
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e6:2e:df:7d:dd:af:f6:16:8b:c5:d9:47:94:da:fe:74:45:
3f:81:85:22:47:ce:91:da:22:f5:26:50:3f:b5:56:36:9a:05:
7f:bb:5d:6a:2e:3d:15:fa:b5:c8:a6:e9:49:8d:b4:26:7e:df:
45:f4:ec:4a:7f:65:65:d3:bd:dd:9e:e9:c8:5e:a8:2e:b7:06:
f2:e4:7d:90:47:7f:c8:ee:e3:47:8f:15:bd:60:07:dc:3b:2a:
95:2f:23:fb:85:47:68:fb:16:e4:56:5b:6b:c2:b3:7e:a7:63:
8c:83:5a:32:ef:12:24:6d:03:20:fe:95:3a:b0:2d:31:07:21:
de:c5:05:6c:ff:37:6e:a7:22:b6:37:2f:cb:dd:ae:e4:22:a6:
cb:ad:5b:bc:a2:ef:c0:d6:eb:ea:24:f3:3a:37:a3:5c:61:b3:
81:dd:79:54:42:0b:7e:0f:74:8a:d3:71:0f:27:6c:2e:42:ae:
55:98:5c:00:62:6f:cc:fb:5d:6e:97:fb:dd:e8:d4:17:b8:a8:
78:04:82:be:1c:d6:44:9c:fc:d8:63:f0:cf:11:96:ad:1e:b5:
53:cc:5b:18:94:a6:a5:ef:c8:c0:9f:52:18:a3:61:f8:fd:60:
60:c3:c4:39:77:6b:ff:18:2b:9a:2a:26:74:9c:95:d6:6c:e3:
07:fe:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:52 2025 by rpki-client