Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: 3dHYvqQ4xNIjcDrKfvvzG1eji1wQ5T/xy7jCcCVpXeg=
Subject key identifier: 64:9C:C8:09:73:4E:6C:8B:9E:2B:05:3F:F7:A6:FA:9C:7D:46:8A:E2
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 0198745074B178EDACC40F78735BEFE99376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: 02DC
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: PjeW0oO1sD9CsOjIqfHisuwrFJC4w1I1Nu8mlXohDhY=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:74:b1:78:ed:ac:c4:0f:78:73:5b:ef:e9:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=649cc809734e6c8b9e2b053ff7a6fa9c7d468ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:5d:73:8a:44:90:46:99:57:c6:23:96:7b:
ba:e0:4c:ae:31:b3:b4:5e:d8:d1:e7:e2:8e:1f:58:
6d:cc:ec:94:49:0e:64:a6:a8:ea:d5:d4:e0:43:7e:
3d:28:30:f8:82:35:ac:32:11:47:a5:93:4f:06:6d:
42:5e:0c:5f:be:86:e3:21:94:26:a7:4f:f3:dc:99:
3a:68:36:11:67:98:ee:93:0c:0a:f0:c1:c7:97:e9:
bb:9e:0c:f6:1d:ee:6b:d0:2c:8b:5e:6e:fa:9c:a0:
65:ab:41:48:80:90:89:93:1f:b7:29:9c:23:19:21:
1e:c8:4c:90:af:24:b8:e3:af:ce:19:5d:8d:3a:f1:
ed:66:7b:9a:81:8c:d8:99:52:4b:58:26:08:e7:f3:
89:c2:df:b7:bc:06:e3:ad:46:fc:64:2a:8c:97:24:
74:37:44:82:44:31:f6:67:62:e6:fc:44:27:0b:2d:
2a:30:5e:c0:84:73:80:2e:82:64:e9:95:2a:ac:45:
99:0b:6b:25:af:4c:d9:c9:9e:76:d8:29:13:af:66:
a9:49:fe:25:95:31:81:20:5e:20:c2:8a:a7:f3:61:
39:e4:1a:5f:c7:22:fb:c5:4c:c8:ff:08:6e:82:58:
81:2f:35:b3:d2:94:22:33:60:5a:a1:b2:b5:31:e4:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:C8:09:73:4E:6C:8B:9E:2B:05:3F:F7:A6:FA:9C:7D:46:8A:E2
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:bb:0c:fe:15:9f:74:bc:a2:e6:fa:b1:c7:46:be:d6:24:
25:2f:ca:15:42:50:32:6a:ae:ef:38:93:f4:00:e2:56:08:79:
04:97:fd:3c:79:41:b2:40:54:56:83:ba:32:fb:70:db:00:6e:
90:d1:e1:d7:3f:5a:ef:fa:85:fe:14:de:36:7d:1a:2d:b8:36:
9b:20:38:66:68:33:b5:23:09:75:aa:3f:30:9f:9c:5b:65:f2:
5d:cf:65:82:69:bc:a9:42:5f:f3:3d:de:99:24:08:79:e1:4b:
bb:76:ce:2c:51:e0:f7:4d:1b:2d:74:ac:23:41:1e:30:fa:26:
8e:a5:44:ea:87:27:88:c1:55:01:29:93:d2:40:d7:41:8e:73:
c3:f6:c8:b7:a7:cc:63:42:b6:58:ab:01:f6:34:08:1a:05:77:
38:3c:e8:21:e6:0e:f6:ae:6b:e4:f8:3c:c3:55:5b:0a:d8:e4:
f9:0f:23:db:c6:58:a8:1e:1e:8c:4c:ae:6b:8e:bc:65:e0:62:
a1:c8:e8:f2:39:20:74:68:95:71:bc:aa:3a:b1:8c:24:6f:df:
58:77:09:9e:71:03:a9:ff:bc:f7:05:31:e1:2c:a0:45:20:c9:
a8:8c:6c:6d:04:91:b7:80:7d:a5:18:4d:e2:43:37:de:61:04:
07:d2:88:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:45 2025 by rpki-client