Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json)
Hash identifier: qgHkhrFyguZA+PeRZ9NZMEKWOgwxByKadjiRPQTgYIo=
Subject key identifier: 40:3D:E0:A4:42:A1:70:B6:02:6B:22:DF:9E:BF:48:A0:F4:91:C9:24
Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Certificate serial: 0196865AC952669052EF8854CFB7A5626999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
Manifest number: 2A
Signing time: Wed 30 Apr 2025 11:00:18 +0000
Manifest this update: Wed 30 Apr 2025 11:00:18 +0000
Manifest next update: Thu 01 May 2025 11:00:18 +0000
Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=)
2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: pKqFDkt9QeHYddia5v22L8m3LrGLX/mt/L6Y86oOCNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:c9:52:66:90:52:ef:88:54:cf:b7:a5:62:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94
Validity
Not Before: Apr 30 11:00:18 2025 GMT
Not After : May 1 11:00:18 2025 GMT
Subject: CN=403de0a442a170b6026b22df9ebf48a0f491c924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:96:46:65:70:ae:cf:2c:18:fd:3f:59:86:29:
e2:b2:08:a1:53:ae:ca:67:09:26:1e:ca:e5:48:70:
f8:1e:11:20:80:40:af:23:90:e9:dc:be:ed:96:a1:
33:6b:2c:ca:d7:61:50:c7:ad:d8:9c:fa:58:a0:21:
67:d1:50:6b:f2:80:db:11:17:47:78:75:02:4b:77:
1f:83:e9:b0:b8:7e:7a:35:8e:fd:53:b6:70:90:4e:
2b:37:22:8b:5e:5e:1d:6b:4b:1f:a9:55:8b:ed:52:
b8:cd:27:a5:c6:19:62:db:73:b1:de:ad:98:db:c0:
a7:2f:7b:99:65:d5:83:db:73:29:63:a7:18:32:80:
55:88:66:2f:71:b1:13:3c:f0:65:7e:b2:68:3e:0d:
bf:2b:27:a5:22:3e:0c:13:1a:84:5a:1b:6f:0f:ae:
3d:a3:07:4d:cd:92:66:19:0b:cb:dc:61:ca:04:e1:
44:9d:9d:56:c0:c1:ab:8b:e4:75:61:e5:a5:53:34:
48:97:ed:42:c2:3a:1a:63:7b:40:02:f6:69:3a:53:
d3:bb:4c:77:df:27:16:71:b0:ce:64:1b:56:4d:34:
17:34:7f:cf:eb:4e:cd:8c:e6:39:34:f4:3a:db:15:
42:23:46:89:9b:4c:72:ce:c0:cc:e0:22:f5:c0:67:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:E0:A4:42:A1:70:B6:02:6B:22:DF:9E:BF:48:A0:F4:91:C9:24
X509v3 Authority Key Identifier:
keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:fb:c6:18:f0:16:f6:63:a3:c2:80:b7:31:ea:37:45:0f:e1:
51:ed:7e:12:8b:d7:f5:0f:2e:94:ef:85:61:5d:cd:32:d1:d8:
d7:c9:db:76:f8:4f:66:d9:14:75:12:f0:33:e0:4f:61:27:69:
f5:f5:b9:33:94:ce:48:ec:de:d3:2a:22:eb:f0:d9:8c:9f:de:
27:f3:59:39:af:94:99:bf:08:b7:30:6a:21:4f:06:5a:21:7d:
45:f5:b7:81:e7:c6:ed:74:5d:8f:71:7f:25:1b:7b:2c:5d:9b:
db:f5:34:de:b4:d2:38:95:3f:c1:a2:e9:ac:94:53:db:a4:fd:
31:41:7f:dd:1f:8c:79:94:18:45:ce:3c:42:18:97:4c:b1:89:
87:38:28:ce:ae:f0:66:14:09:e3:d4:6f:76:3f:6c:ae:3e:5e:
ea:70:12:a6:ce:31:80:29:66:de:ff:4f:e7:62:78:d7:24:54:
4d:c5:0c:3f:dc:c7:18:6b:49:87:96:88:74:77:ca:8f:68:6e:
5a:8e:a2:8f:f5:7e:d0:54:dc:3f:3c:7f:f4:4d:85:2e:67:29:
41:d5:e1:87:a4:07:e3:60:60:0f:63:14:9d:c5:7a:83:29:3a:
f0:a3:2b:5f:3d:bb:78:fe:bc:a3:dd:11:af:4c:cb:d2:43:fe:
cb:85:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:10 2025 by rpki-client