Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: 6cKj+T7JrbGRChqcYRHKvRlK6nfs8/lqt6u5U+gdAvc=
Subject key identifier: 18:D3:C5:0B:AD:48:15:84:09:72:88:0F:87:2A:07:DB:8A:50:4E:9D
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 019674FA3605A028950EA727C3295932ED00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 0C63
Signing time: Sun 27 Apr 2025 02:01:16 +0000
Manifest this update: Sun 27 Apr 2025 02:01:16 +0000
Manifest next update: Mon 28 Apr 2025 02:01:16 +0000
Files and hashes: 1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=)
2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: zZmuvrOGTHh6/0un4rmXC9IK6MluY629hTNuWCR3jM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:36:05:a0:28:95:0e:a7:27:c3:29:59:32:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Apr 27 02:01:16 2025 GMT
Not After : Apr 28 02:01:16 2025 GMT
Subject: CN=18d3c50bad4815840972880f872a07db8a504e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:ff:8b:d4:c2:a8:ca:14:1b:ca:50:84:53:
a4:66:7b:4c:ff:71:48:47:fa:3b:0b:c2:18:29:3a:
43:fb:b7:cf:7e:a1:4e:41:98:f5:7b:fc:66:be:fd:
a9:7d:9e:d9:96:50:81:f8:50:08:cd:ca:bb:0a:b5:
d1:a4:e1:e3:77:e1:a2:77:0d:52:b8:a2:f0:33:eb:
05:c6:80:9a:be:1c:0e:08:d3:1d:67:00:30:93:b0:
5a:71:8c:9b:cb:a4:df:e8:bc:96:f4:c3:7d:21:46:
0b:66:f8:2a:3a:e0:f9:32:09:b3:ed:d9:42:3d:53:
db:a6:fb:4c:83:54:72:65:57:d6:cb:f0:43:30:40:
fa:ab:43:5d:81:02:31:08:ce:05:4c:19:f1:ad:a9:
58:d7:96:e7:08:11:23:b4:ed:49:d3:4c:04:f7:6e:
25:46:4f:aa:be:62:c6:20:88:c7:07:17:b3:5f:38:
56:8c:05:8f:10:4c:86:c5:76:ee:ed:b8:62:5d:dd:
3a:2a:de:e6:cd:7a:83:db:e9:d8:a9:ea:b6:6a:5e:
7c:20:33:5f:3f:01:10:bc:a1:f7:04:df:0e:bd:02:
d8:ed:e1:7b:84:41:e3:49:1f:ae:a0:36:bc:a8:42:
1a:73:f4:92:ec:73:4d:45:2f:a2:94:19:f2:55:ca:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:C5:0B:AD:48:15:84:09:72:88:0F:87:2A:07:DB:8A:50:4E:9D
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f3:fc:d8:79:52:59:5f:26:8c:b7:b0:4e:a4:c7:e6:79:37:
69:ff:3f:6f:2f:1c:6e:88:d5:69:29:71:d9:4e:cc:d8:07:62:
db:4a:87:9e:f0:65:d4:ab:68:a2:bf:6d:3f:66:c4:91:65:ce:
1d:5d:2e:01:1e:97:e4:4e:e9:fc:31:bb:42:ef:ed:41:65:45:
e3:c6:27:64:37:26:37:97:25:25:7b:40:1a:13:d5:3a:83:1e:
c9:64:2d:91:96:d9:bb:9c:78:13:ad:a6:a8:c8:42:95:71:95:
73:e3:1a:6f:65:c7:46:b6:8b:fc:73:27:e2:68:7d:7c:12:a5:
1f:ee:cb:cc:4b:7e:cd:89:42:fa:cc:a6:8e:9a:14:4c:6c:22:
8a:7c:d1:b9:b0:f2:af:fa:6d:1d:3c:60:31:c4:b2:87:5f:8b:
9a:36:aa:ba:19:ea:45:a6:b3:a2:65:37:01:5f:d8:ff:4a:3d:
5c:b8:24:7a:63:35:f9:1e:83:64:7d:da:84:bf:76:b1:d6:ca:
99:17:82:d9:91:3c:45:cb:53:73:92:8a:2f:e3:c9:2b:f9:a3:
f0:7d:b7:21:17:9c:77:f0:ff:ac:81:e8:42:37:ea:82:01:84:
d8:a4:e9:0b:ea:58:5d:72:a4:66:67:7c:18:bf:e9:55:e8:71:
cb:83:bf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:01 2025 by rpki-client