Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: HUMqb7P8ZVFpxRqj2lSmbST1ewUfnn8W3m6/H2+Qlr8=
Subject key identifier: 1A:C3:E4:B1:EA:48:FF:7E:DE:F5:E6:AC:00:B5:1E:35:5D:98:D6:D2
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 019674C290B38530F951CC573F70CF47818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 01:00:29 +0000
Manifest this update: Sun 27 Apr 2025 01:00:29 +0000
Manifest next update: Mon 28 Apr 2025 01:00:29 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: KvdWAp3GThVpS+96zjNOhZLetZXA4MAz5QO1xkMw1gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:90:b3:85:30:f9:51:cc:57:3f:70:cf:47:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Apr 27 01:00:29 2025 GMT
Not After : Apr 28 01:00:29 2025 GMT
Subject: CN=1ac3e4b1ea48ff7edef5e6ac00b51e355d98d6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:62:71:e7:02:0e:29:37:42:5e:1c:52:a5:
66:da:50:dd:90:41:bc:77:34:e3:9c:42:6a:8b:8e:
65:57:22:0d:0b:6e:de:3b:b2:ad:96:b0:a4:66:22:
d0:c3:d9:27:1c:c6:7a:cc:98:71:3b:b4:e2:f2:aa:
8e:30:70:bb:88:ae:fa:5d:73:b2:03:04:be:f4:c7:
2e:68:b4:16:72:34:b7:47:8a:38:2f:0e:15:ba:e0:
0e:88:60:d4:2d:96:ae:a8:28:1d:1a:82:85:62:3b:
2c:4f:ce:71:db:74:08:56:86:d3:a0:04:c3:f4:7f:
45:66:06:75:c7:83:a4:12:8e:0d:be:91:a6:27:c0:
4f:1e:bb:78:d9:07:f5:76:3d:84:c3:df:b2:c0:18:
d0:95:a5:13:dd:f8:c1:17:43:f0:0e:82:85:b3:f6:
ce:1a:b3:fe:5c:0d:a4:24:ef:0c:75:96:73:37:6d:
62:4c:ee:2c:bd:c9:b8:e4:cf:0d:6e:dc:47:5f:cb:
fd:ce:8c:9f:3f:fb:56:15:fa:9b:c3:39:cc:6d:2b:
a7:a5:fc:77:12:e6:4d:cd:29:6f:cb:5d:f9:3f:6a:
f8:d7:23:d0:41:4d:3e:47:18:ff:c3:a1:ee:0c:b9:
8b:1b:8d:5b:18:f2:84:b6:8e:6c:6e:58:17:43:61:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C3:E4:B1:EA:48:FF:7E:DE:F5:E6:AC:00:B5:1E:35:5D:98:D6:D2
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8c:74:28:f6:ac:86:7a:d6:d6:9d:4d:96:c5:8b:3d:85:5f:
60:57:5c:7f:77:52:0e:93:e8:d8:68:0a:61:3c:b1:4d:47:52:
0b:c2:02:2d:fe:8b:ed:75:86:2c:b3:75:56:52:bb:3d:1f:94:
45:fd:c1:54:f2:a2:89:6d:f9:59:3b:b6:4b:2a:c5:6e:77:9c:
88:08:be:4d:86:bc:a0:aa:1e:9a:44:eb:90:30:2d:96:cf:84:
ce:78:75:00:1e:53:92:cf:83:9b:cc:ea:02:97:3f:70:35:c5:
8f:c6:ba:1b:16:5e:e3:1b:48:0b:f5:69:4f:b3:cb:19:14:9c:
59:04:40:d4:48:a4:36:67:48:d5:7e:94:a4:2a:cf:fa:36:f0:
0f:eb:ac:58:7d:72:6c:2d:99:7d:6c:1f:ea:76:bc:87:d8:a2:
7f:47:33:19:d3:b9:78:f1:10:a6:aa:e1:17:34:b4:e2:dc:ce:
8e:d3:bf:ba:c9:f8:28:a7:69:fd:2b:5f:2f:ae:d5:6b:50:4f:
64:db:c1:6a:04:8f:78:b3:ac:5e:9c:2c:92:cf:ea:26:22:4b:
5e:8e:50:b7:d0:1b:37:dc:79:83:f1:0b:eb:6a:e1:07:fe:f8:
fd:eb:6b:83:03:7c:44:68:a9:de:6a:33:a1:76:80:fe:2d:e0:
59:38:d0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:34:05 2025 by rpki-client