Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: aYSi5bc+aMHIZhE7PehIZR65Sd9Uch/73N9l9D4ukOw=
Subject key identifier: 15:FC:F2:AA:90:48:77:68:8A:9C:0B:2D:5C:86:10:4E:F5:3E:F3:C5
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 01976F99ABA258DAA36C77F9A59B3EF24B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 0255
Signing time: Sat 14 Jun 2025 18:00:31 +0000
Manifest this update: Sat 14 Jun 2025 18:00:31 +0000
Manifest next update: Sun 15 Jun 2025 18:00:31 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: P7bg5NOkw0jKfgVwa13sksg7JQZ8dzPR+eYcnsFUTlk=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:ab:a2:58:da:a3:6c:77:f9:a5:9b:3e:f2:4b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Jun 14 18:00:31 2025 GMT
Not After : Jun 15 18:00:31 2025 GMT
Subject: CN=15fcf2aa904877688a9c0b2d5c86104ef53ef3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:2a:b6:e6:eb:7a:45:d8:76:5d:10:8a:6d:
c0:1e:0e:fd:6b:44:5e:ee:d4:4e:e7:25:66:31:e5:
65:b2:89:15:52:ae:1f:45:fb:f8:bf:a4:06:1b:94:
b3:92:de:19:db:1d:59:3c:17:b0:7c:d6:7e:72:df:
c3:14:52:c1:7a:93:69:84:74:66:d8:43:eb:3f:cf:
84:a6:f0:f8:e6:37:65:72:b1:ba:51:1b:6a:55:a2:
c1:12:55:b3:cb:d1:71:97:f4:64:67:42:29:74:24:
c8:72:94:d6:b8:d1:19:0a:b2:d3:19:b5:c1:44:1c:
72:54:af:01:e3:6e:27:59:e2:00:9f:04:65:0c:08:
5b:6b:0b:b5:a2:22:e9:d6:24:0e:c5:1b:34:d9:bc:
43:41:87:e9:fa:bc:80:d6:9c:26:6a:38:ad:97:b0:
e6:66:a6:24:47:79:b9:bd:35:85:04:77:ba:05:e5:
2a:f3:9f:1d:aa:46:85:a0:8f:90:ee:39:8f:eb:e7:
82:a7:ff:fb:46:72:75:01:9d:75:8e:6f:68:ac:12:
92:ac:43:b9:29:1a:ad:d4:d2:be:9b:e4:23:bc:b0:
92:b4:89:b4:14:0a:fd:ff:fb:2e:07:9d:db:57:7e:
51:af:37:a6:50:b2:85:23:8b:2b:73:6a:82:47:e1:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:F2:AA:90:48:77:68:8A:9C:0B:2D:5C:86:10:4E:F5:3E:F3:C5
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d9:b0:d6:ac:92:d0:0c:e1:43:d0:ba:16:a2:3c:dc:c8:18:
05:59:71:58:73:9b:69:6b:ae:82:0a:88:98:75:da:d9:12:97:
fc:8a:fa:c9:b8:58:b5:bf:57:fd:09:4b:32:78:29:38:40:99:
56:79:48:89:6e:7c:96:30:ce:49:c8:f8:df:7f:f7:77:87:d6:
f9:ae:1b:88:55:cf:b3:cb:8c:48:2c:61:61:6d:70:f9:c7:0c:
bf:28:a6:01:54:b3:c6:b1:31:9e:6f:9a:b8:77:2b:47:a7:9e:
fe:c9:81:55:49:08:23:18:93:db:69:aa:9c:38:6e:1e:71:63:
94:6a:cf:95:01:f2:d3:cc:b6:93:b7:c6:53:32:d7:13:81:9e:
c5:07:f7:00:b7:be:a6:d3:a6:40:70:b6:c9:bf:cf:d4:30:35:
1b:a2:91:c8:5c:49:3e:3c:a8:c5:29:fe:0d:2b:2c:e5:96:ba:
9d:94:a3:dc:31:0a:e9:09:d1:17:8c:15:4b:26:38:87:ca:1d:
d4:fe:06:f0:e9:e2:54:d6:f1:cc:1b:0c:8a:be:89:66:2e:3a:
40:b2:b6:cd:b7:77:4f:4a:f9:5f:68:15:76:af:46:9d:7a:aa:
b1:ad:84:e9:48:f5:18:38:ec:5d:40:57:e4:93:02:a4:0f:1c:
73:fd:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:46:27 2025 by rpki-client