Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: vbd7t+zPORFI0oLZY5i34Cd/WBa5x/KcD+4L3RN3PPk=
Subject key identifier: 42:76:2D:A8:B1:61:36:EA:0E:B4:5F:B7:BC:65:4B:5C:7E:63:49:B7
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 0197B70F5715EE91A480F5248B1FC1081044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0C98
Signing time: Sat 28 Jun 2025 15:02:05 +0000
Manifest this update: Sat 28 Jun 2025 15:02:05 +0000
Manifest next update: Sun 29 Jun 2025 15:02:05 +0000
Files and hashes: 1: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: umRVrZ0xfzf02UvHwQXzDjeuCgtfGxLRIHMS7kCxSmE=)
2: uhWjc5L6HF8CL85GmROwozUvuSg.roa (hash: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:57:15:ee:91:a4:80:f5:24:8b:1f:c1:08:10:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Jun 28 15:02:05 2025 GMT
Not After : Jun 29 15:02:05 2025 GMT
Subject: CN=42762da8b16136ea0eb45fb7bc654b5c7e6349b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:32:4f:29:b4:92:31:02:5f:66:50:eb:c2:
40:b4:a8:a2:7d:2b:7d:bd:59:04:cf:7a:98:bc:1f:
35:88:fd:30:d4:76:f9:74:1a:3e:6d:3a:1d:e8:cb:
be:b1:b2:a8:1c:dc:7b:c4:9f:c9:dc:67:14:17:8d:
4b:01:ff:c1:f1:4c:8c:8c:2b:d4:77:33:25:1f:86:
85:1f:4f:5d:57:74:71:e6:8c:25:bd:11:62:66:be:
1f:68:2b:e7:a0:58:7f:61:74:a3:3d:7a:9f:ce:03:
60:83:67:3a:e4:a3:4c:6c:c0:b0:54:93:70:7e:e8:
6d:5f:b7:a1:1b:98:e9:a3:b7:4b:ff:71:b5:b6:10:
3b:f2:06:53:38:fa:f8:6e:b9:99:8d:5c:12:f4:3a:
ea:55:e3:87:1d:f7:34:1f:87:32:72:da:8a:8e:49:
f3:b0:4f:75:02:80:5e:13:b6:f1:c0:cf:82:96:11:
67:6f:27:89:20:4f:70:2f:a6:04:6b:3d:79:40:f4:
04:10:24:79:00:17:ca:c3:b5:fd:7b:19:41:74:0a:
55:d4:98:66:07:e2:d2:b0:3d:44:1a:61:58:1e:c2:
e7:d1:26:11:37:2d:36:ab:7c:48:1e:2f:f0:76:9b:
35:d2:2c:5e:67:a7:65:80:b7:04:93:28:36:b0:08:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:76:2D:A8:B1:61:36:EA:0E:B4:5F:B7:BC:65:4B:5C:7E:63:49:B7
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0d:0c:1a:1e:a1:f6:49:07:8b:b8:8a:bf:26:c5:dd:37:7f:
f3:6d:e4:a2:95:4b:f2:0b:e1:99:19:a4:ff:f4:92:69:47:7b:
4a:c2:58:f8:2f:46:13:1c:b0:9c:ed:26:9b:64:33:c4:e0:b7:
f3:85:0f:4c:fd:e6:26:67:b4:1e:04:a1:eb:94:dd:da:47:f4:
71:a0:49:18:34:f1:fa:74:48:b2:93:d3:8e:25:a5:07:0c:a0:
4d:f2:cd:3f:62:62:a5:e7:2c:eb:94:a5:2c:60:3e:8f:55:c7:
d5:c1:ee:d7:36:4d:a8:4d:ba:c7:58:13:2c:bf:0c:9b:3c:37:
9d:94:26:d4:63:dd:d0:01:87:44:05:60:4f:d7:cd:c1:bf:0c:
d1:38:87:c1:ea:38:3b:d3:17:c2:61:8b:d0:59:85:4e:a6:d6:
2e:b7:18:1e:fb:e7:62:20:ae:a3:43:bf:f4:76:4b:b3:69:0b:
97:14:39:f7:de:71:34:c9:f0:0a:19:e1:ac:67:10:f4:f5:0e:
6e:39:43:5b:03:bb:25:f5:69:74:32:07:49:22:ca:9f:23:44:
25:e3:9d:f8:b1:18:97:e5:d4:de:fc:25:4c:e0:55:c9:26:6b:
4c:55:42:8b:50:50:fd:44:60:25:f5:2d:a7:64:16:51:b1:d1:
5c:23:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:34 2025 by rpki-client