Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: JwDPUEdLbTXG1etPqbm2tWIQszEK7vjw6UXCW7EcBPM=
Subject key identifier: 96:8C:AE:11:69:E8:CA:52:C6:59:9C:A4:BB:3F:F3:FD:3C:F7:33:F0
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 0196B85A8A702FE6B8B79FF4068A6073E427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 04:01:03 +0000
Manifest this update: Sat 10 May 2025 04:01:03 +0000
Manifest next update: Sun 11 May 2025 04:01:03 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: ai3+jdQCJwqnVZIOgbdpAJvtQOjJ6tHLBmnvnJ5l58I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:8a:70:2f:e6:b8:b7:9f:f4:06:8a:60:73:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: May 10 04:01:03 2025 GMT
Not After : May 11 04:01:03 2025 GMT
Subject: CN=968cae1169e8ca52c6599ca4bb3ff3fd3cf733f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:13:82:86:9e:95:dd:f3:15:64:59:19:3a:
b0:bf:1f:04:c7:35:6e:6b:2b:45:b4:a3:39:9e:7f:
03:1b:0e:fc:4f:a5:a4:5e:0e:e3:9f:ae:7e:77:ec:
e3:3f:6e:db:fd:6c:c6:be:c8:53:58:d1:b6:22:44:
a5:5e:31:94:b4:5b:72:66:d1:7a:67:e0:f1:e1:8a:
37:bd:9d:08:a8:19:26:ff:10:13:72:c8:d5:c5:67:
69:bc:ab:81:21:50:81:9b:6b:76:f6:25:fe:46:c6:
ba:ae:59:85:8f:fc:34:59:e4:33:d7:21:6e:c5:27:
5f:fa:10:49:78:fe:c4:d2:22:bf:79:49:ac:ba:e0:
34:49:97:6b:38:b6:b1:77:89:73:4a:52:b6:28:de:
2e:33:56:e2:7d:66:5b:53:88:1c:9b:e8:a7:7b:60:
37:f0:b8:24:a6:51:57:73:25:48:8d:bf:84:08:f2:
3e:d9:bd:30:dc:f8:45:07:b7:78:a0:8e:e5:c5:40:
3a:bd:f5:e1:4c:4c:9c:d7:7c:e9:04:a1:6e:ab:c6:
77:7a:7e:b5:f6:23:30:9e:75:18:63:2f:1f:d7:84:
8f:fc:1b:a2:8d:c9:4c:64:91:a2:02:4e:ee:86:46:
76:c0:1a:54:c5:73:f4:bc:dc:2b:b8:15:d6:3b:11:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:AE:11:69:E8:CA:52:C6:59:9C:A4:BB:3F:F3:FD:3C:F7:33:F0
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:03:5a:91:60:a4:af:20:db:ec:44:ea:d0:d4:22:bc:c4:
b3:d2:99:b0:98:46:75:f6:b5:c3:14:80:0d:14:0c:cf:0f:0c:
59:d4:90:c5:eb:71:21:4e:d6:ba:cc:cb:af:c8:d1:1a:c4:d2:
be:65:9a:85:0d:2b:4b:f4:34:6c:93:73:2d:17:b4:4e:8b:82:
69:98:0f:e4:93:0d:e9:04:4f:93:b9:f8:3b:eb:1e:c3:70:c9:
4e:38:91:4e:0a:a6:eb:e4:2d:93:3b:c9:1f:bb:fc:e4:1f:00:
58:ee:62:7c:a0:67:a7:63:31:83:41:07:23:ef:04:51:8b:f7:
aa:86:b2:16:01:fc:4c:51:b4:d4:10:62:c3:51:f6:90:a0:dc:
a4:cb:c6:a3:a3:76:28:86:38:53:cb:ac:b8:76:62:b7:1b:8f:
5f:cd:35:62:5f:b4:b4:e6:0c:ed:72:c9:77:a6:be:ce:9e:e5:
fe:ea:2c:73:32:4f:ce:05:0c:47:2a:45:df:2c:fd:e1:f6:76:
0e:96:62:83:fd:f8:c5:f0:4e:74:7f:46:87:7f:d4:5e:85:0b:
c8:12:f9:0d:16:4e:6a:a8:11:c6:64:56:18:b5:53:e9:c4:90:
d2:58:79:90:12:4e:5c:5e:a6:29:e1:e6:0c:9d:dc:e0:72:30:
b2:f3:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:31:27 2025 by rpki-client