Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: xrZqAPBe7gw2lWMGqBMX/+H4LUY9mVcEZtyINFzRbB4=
Subject key identifier: E0:E8:0B:F2:78:E2:55:27:C7:5B:43:93:CF:00:5F:1A:B2:B7:54:36
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 01977F0CDC1F4CE036639A23A6D5F503FA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0D2A
Signing time: Tue 17 Jun 2025 18:00:38 +0000
Manifest this update: Tue 17 Jun 2025 18:00:38 +0000
Manifest next update: Wed 18 Jun 2025 18:00:38 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: 6FZ8OyMDkPikv8eXpX7GqZNM2XAC6Ef6d6TZ7eRwJ5k=)
2: IwEBndBJay-42UjStrqkUigiaxw.roa (hash: K30WoUV1lkACaXc+c2n1S5YA0J82XCcvxybes+V2uGY=)
3: U2aJyBd8P_eUVY58McQwjVpYLjA.roa (hash: LuVboNkBf5MvVMVqL/wxb5E/X4ZkELwqjAYKuZW9FEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:dc:1f:4c:e0:36:63:9a:23:a6:d5:f5:03:fa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Jun 17 18:00:38 2025 GMT
Not After : Jun 18 18:00:38 2025 GMT
Subject: CN=e0e80bf278e25527c75b4393cf005f1ab2b75436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:59:6b:aa:94:18:80:20:8b:2d:f0:a6:27:
1e:69:86:90:1a:6e:4d:08:16:bb:01:d7:85:63:3d:
9a:9e:fa:ca:0d:9a:b3:94:8b:5f:9f:18:90:41:52:
d3:f6:72:25:e6:86:48:ea:51:3c:0b:3a:66:ac:18:
08:5c:54:86:4b:37:14:b9:f1:8f:cb:ec:8b:72:45:
8d:26:61:b4:7c:8d:f6:81:95:5e:d1:cb:ec:9a:0e:
67:88:da:78:17:46:4f:a0:fe:3b:de:c4:ff:22:e7:
fd:28:33:be:e6:e0:73:c1:04:63:88:f1:86:6b:6e:
cb:d6:d8:6f:7d:96:8b:d9:79:60:b5:a1:86:f0:53:
9b:f1:ad:2e:43:c9:f1:26:dd:94:dc:d1:33:ad:41:
d7:c1:0e:78:39:a0:92:8d:e9:00:cc:76:c8:f3:8b:
57:a9:ca:25:30:ee:f3:ad:e8:ea:2f:f9:fa:f3:b3:
47:35:93:db:e9:7d:5e:ea:e2:93:31:76:52:72:5f:
a5:c4:1a:1e:28:c3:f8:56:ef:1a:9f:c9:a3:0f:a0:
38:12:b8:d1:90:53:4e:47:f6:33:30:b1:67:09:ff:
b4:6f:c2:2b:48:ab:5a:62:63:63:19:ff:c2:95:51:
bb:93:d5:4e:d8:9c:c7:c9:2d:36:f8:80:10:f8:1e:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:0B:F2:78:E2:55:27:C7:5B:43:93:CF:00:5F:1A:B2:B7:54:36
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:22:3b:c0:16:87:93:22:ea:46:5e:9e:79:bb:04:a8:c8:fb:
d4:a5:0e:43:6c:e9:35:0a:0d:2d:5d:be:98:f4:26:b9:a5:96:
ad:a2:ac:cc:20:39:d3:60:62:0b:67:91:17:67:a2:81:89:b0:
11:ab:0b:26:b3:13:e0:2d:f7:b4:b8:ee:d7:e7:af:00:a2:4e:
8d:eb:40:fc:2a:7d:fe:3b:85:eb:84:24:6b:8e:3f:47:aa:bc:
51:55:91:52:e6:8a:c1:3c:d8:03:b8:47:29:dc:a3:1d:0a:51:
4d:e4:42:28:75:26:a7:9e:ec:7a:d7:5e:bf:72:5b:cf:9a:bf:
2a:77:6b:e8:80:cd:df:02:b5:3c:5c:b2:d5:f1:82:06:42:83:
4c:94:bd:0c:7e:0c:fa:fe:e5:cd:2b:60:39:ce:4b:78:e8:0b:
22:44:0b:da:c9:f6:ba:57:9a:64:c3:43:75:60:58:f2:33:61:
73:d0:98:56:5c:af:4c:94:72:3a:81:ac:86:9b:17:1d:3e:e6:
04:77:ad:a9:b4:df:8d:cd:6b:56:b5:2e:da:d2:19:bc:cf:e6:
d0:72:86:38:e9:cd:09:7b:bd:bc:73:d2:65:7d:0b:3d:2e:31:
3c:58:d2:49:53:05:7b:8d:64:45:b9:60:41:53:ff:ab:c4:17:
6a:80:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:46:25 2025 by rpki-client