Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json)
Hash identifier: P9aUMuomKZCbllwlTPnrJRS1OKnp+Miqt+ybW4lfUGM=
Subject key identifier: D6:1D:09:82:E5:2A:A8:56:22:9E:1C:47:C4:F5:6B:B4:93:51:32:9D
Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Certificate serial: 0196C45E3D863BCA12A75B1472544B98B3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
Manifest number: 84
Signing time: Mon 12 May 2025 12:00:32 +0000
Manifest this update: Mon 12 May 2025 12:00:32 +0000
Manifest next update: Tue 13 May 2025 12:00:32 +0000
Files and hashes: 1: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: X2dcN32B5GfWNQyXbH7aVsRIQBOr7gKTVbpkp24fXWE=)
2: JUZrH7esHXuIUR8S80TNsOfBgq4.roa (hash: U7uEaoA1okVxydwdN7xgsZxq5XRAaznjumXB+lt8BF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:3d:86:3b:ca:12:a7:5b:14:72:54:4b:98:b3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3
Validity
Not Before: May 12 12:00:32 2025 GMT
Not After : May 13 12:00:32 2025 GMT
Subject: CN=d61d0982e52aa856229e1c47c4f56bb49351329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:18:55:bf:de:b6:22:09:56:db:f9:06:27:
63:14:ee:1b:64:6b:0b:71:c4:de:2b:9e:49:4e:a6:
f2:91:9a:b5:11:56:6f:a8:9c:06:d0:23:20:7d:0a:
78:7c:89:4d:3b:32:eb:2b:ce:49:4d:36:55:1f:1e:
4f:cd:b5:d0:de:0a:d0:e4:17:f9:e8:b0:f5:f8:b9:
d6:b6:f7:9f:f0:50:8e:a3:8d:fa:64:bf:e5:88:21:
4f:c6:6c:3b:af:d0:1d:e5:74:ab:4f:fe:73:52:1e:
87:0c:3f:4b:91:1b:c6:23:da:d1:d3:74:bb:62:5d:
66:a9:eb:5a:7b:59:d4:02:12:88:f3:39:41:14:ca:
66:14:04:8b:01:dc:de:13:40:21:2d:d5:64:b4:c8:
5d:2f:f3:80:5f:a6:f6:64:a3:b4:da:03:e1:d3:05:
27:15:0f:8a:a1:b9:b6:23:9d:fb:0c:d3:25:1c:09:
4e:27:1a:29:28:80:2d:e0:5d:51:77:cc:12:64:ab:
e4:aa:9f:35:b7:cc:4c:dd:5f:19:6e:b1:c2:b8:48:
91:39:81:fa:75:f3:55:7b:a9:c4:61:0d:e3:92:8e:
28:c5:aa:48:13:1b:a8:c9:9a:50:01:1f:2e:3d:ed:
29:c7:ea:e2:3e:87:3b:cb:54:2c:f9:99:bd:d4:e2:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:09:82:E5:2A:A8:56:22:9E:1C:47:C4:F5:6B:B4:93:51:32:9D
X509v3 Authority Key Identifier:
keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:47:97:4c:20:c0:a9:2e:af:74:8a:02:95:db:35:43:9e:57:
f6:7d:f5:9b:2d:99:6d:78:fe:c4:55:59:c4:60:2d:0c:43:c6:
4b:d7:8a:f7:83:22:b8:82:40:25:5a:90:2d:a9:20:1a:0b:88:
87:18:e3:5d:b2:2a:4c:71:9f:bd:88:7e:4d:51:10:fb:24:79:
eb:aa:71:08:88:eb:f2:94:72:e5:48:7b:91:84:24:ba:3b:ee:
2c:e6:63:75:77:23:2c:a6:7f:91:f2:fc:76:6a:84:20:6b:5e:
67:db:f1:d4:74:1b:48:c3:f5:eb:cb:9d:69:d6:60:d3:fd:93:
99:fa:14:88:23:7c:5c:bb:62:3c:9b:20:58:c3:90:4c:b0:26:
7e:39:b0:4e:98:b6:a1:1d:fb:59:db:c0:0e:e3:3f:a4:b4:e5:
78:43:45:19:1d:62:73:13:09:92:87:ec:a5:ec:c7:f4:d2:d7:
d1:d8:22:54:8c:10:4f:26:64:57:1e:17:49:52:e6:5f:2c:92:
c2:0a:f6:ac:a5:03:4c:2a:a2:bc:c9:01:b0:2d:31:3d:22:21:
82:f5:ef:09:0c:ea:fc:14:20:f3:59:6e:65:56:49:e4:69:2e:
c3:c9:37:5c:19:09:23:76:72:88:9c:11:f9:05:36:57:65:a2:
61:0a:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:04:38 2025 by rpki-client