Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: ThK9fmEsccjCtKPkK24EFSrFXkAXBOO0WtnUyaL3gCg=
Subject key identifier: FE:7D:D6:AC:21:67:22:BD:04:15:95:30:D2:21:0B:06:6E:44:BE:F0
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0196C75F340F1F7DAC53CB68CB46E64FCA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 157D
Signing time: Tue 13 May 2025 02:00:27 +0000
Manifest this update: Tue 13 May 2025 02:00:27 +0000
Manifest next update: Wed 14 May 2025 02:00:27 +0000
Files and hashes: 1: 6lZmng0xHa3v1kTd1z_jq-ERGOM.roa (hash: UTqY+wA/uciwVEvUAPtFraoFsMSyPYX4ydyMxQUmWbE=)
2: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
3: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
4: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: 6Un4Ik7i1vnWO5KkBt5LvEcZeaZ/f6TFuadCcGCufYo=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:34:0f:1f:7d:ac:53:cb:68:cb:46:e6:4f:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: May 13 02:00:27 2025 GMT
Not After : May 14 02:00:27 2025 GMT
Subject: CN=fe7dd6ac216722bd04159530d2210b066e44bef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:91:08:5f:08:de:47:4d:a7:32:e5:33:d0:
f2:52:91:5e:e8:35:f9:f0:64:95:77:0f:2f:9c:69:
40:80:04:ad:07:49:9c:5c:2a:8a:28:08:68:51:0f:
b3:d1:1b:a3:a4:82:57:42:fc:29:54:88:cf:2c:1c:
c5:d1:66:8c:24:6c:8e:91:16:65:b0:9b:c5:01:11:
01:54:62:e3:cf:42:5c:61:d1:bc:0b:3e:81:b0:8a:
68:12:9d:da:c7:d9:02:f3:9d:2a:7c:c2:74:07:dc:
b8:6d:be:ff:46:78:76:c4:5e:57:2f:59:56:ad:df:
90:a9:2c:c8:14:e4:57:f4:2d:ab:0a:ac:86:37:35:
fd:e3:51:d2:1b:e8:45:a0:bb:48:d7:6d:96:85:de:
aa:00:4b:81:80:cd:57:f3:26:b4:86:07:36:86:b1:
56:e8:92:90:01:52:02:5e:e1:8a:f9:7d:f8:75:0a:
a2:a7:a6:ed:12:0c:af:e3:22:07:43:c6:81:4d:c2:
c5:04:78:76:9a:d9:5e:5d:94:3d:d5:03:c7:70:1a:
94:33:bf:94:6b:83:b6:2a:84:77:96:e5:d1:f9:59:
e7:0d:c7:c2:d8:c1:d6:44:29:74:3f:fc:ee:1d:8b:
b3:67:b0:00:8b:65:6d:67:24:56:d7:38:94:02:ce:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:D6:AC:21:67:22:BD:04:15:95:30:D2:21:0B:06:6E:44:BE:F0
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:58:62:fb:bb:ef:0a:1c:eb:e2:94:c1:a6:92:10:7a:c7:71:
ce:f6:a0:1e:a3:86:d8:c5:e4:ab:f0:b9:2e:bb:9f:f5:52:d5:
d4:0d:60:ff:d5:45:91:bd:b7:1d:b2:12:a0:63:7f:d0:b6:5d:
95:ae:63:a1:a2:d1:91:2f:1b:4f:30:bb:d4:b2:18:8f:35:f1:
c6:7f:96:61:54:8e:cc:c5:c5:f3:b5:d2:99:5b:69:37:61:d7:
08:e6:91:39:c0:9a:fc:08:95:1e:97:f8:f0:c3:31:95:b4:19:
6d:18:24:79:5f:d2:c7:88:ca:82:4f:3b:e0:45:54:44:79:76:
fb:8e:a5:3d:1b:37:26:bb:a8:b8:41:dd:20:71:a3:72:ff:6f:
7a:ae:ac:4d:90:30:cf:34:c5:51:38:60:eb:e5:67:b3:4a:05:
4f:15:c1:23:e9:0c:bc:dd:b3:56:a8:a9:27:05:19:d2:67:6b:
3a:40:c3:ea:99:9d:3c:1d:0f:2a:ea:ad:57:a6:ad:13:64:d3:
89:22:2e:26:8d:2d:4e:a1:01:41:7c:3f:50:7e:c8:91:f4:e8:
45:04:9d:91:c1:a7:d7:52:36:ad:da:0c:36:26:cd:e9:a9:50:
7d:c6:89:3c:dd:9b:47:b6:c3:8d:f3:c8:4f:d1:dc:6c:34:1c:
14:3f:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:44:40 2025 by rpki-client