Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: UnBhCVSb/e65aNJoCH+9k8B3iWUb0rn/I0Id13WOEgY=
Subject key identifier: 03:94:04:0D:BE:2B:84:55:54:49:12:D4:84:19:29:C7:D5:78:E4:F9
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 01967567B723E5819CBE2AE053069C05F777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 0AD2
Signing time: Sun 27 Apr 2025 04:00:53 +0000
Manifest this update: Sun 27 Apr 2025 04:00:53 +0000
Manifest next update: Mon 28 Apr 2025 04:00:53 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: jMcoF30DVmtQvMbKALWcntq+/dziCjbCZmkhx61Nt2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b7:23:e5:81:9c:be:2a:e0:53:06:9c:05:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Apr 27 04:00:53 2025 GMT
Not After : Apr 28 04:00:53 2025 GMT
Subject: CN=0394040dbe2b8455544912d4841929c7d578e4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:6a:a4:bb:09:e9:82:d5:8a:89:9d:16:f5:
b2:1a:3f:d7:49:84:a3:62:90:de:82:05:da:d4:e0:
5c:f5:10:43:dd:9a:4d:4a:7a:f2:8e:96:a2:71:84:
c1:8b:3d:70:a0:9e:3e:b6:e5:29:b6:d4:fe:63:8c:
dd:f5:10:34:e3:b5:96:cd:cc:15:70:57:64:8a:1b:
80:ff:fd:7c:1a:d2:7d:ec:43:b5:e4:ce:92:09:1a:
99:a8:53:6b:12:97:5d:ad:fa:1a:0c:cf:07:f2:86:
26:56:2d:6a:1e:b5:d3:11:87:b6:7a:90:2d:8a:f7:
54:93:c8:71:c1:e7:16:ba:9e:8d:9a:df:d6:ac:65:
a8:d9:ba:38:fe:53:c1:62:3c:31:3e:64:15:07:4e:
32:d8:00:23:29:0f:a9:53:80:59:03:db:d5:a0:b9:
4b:d5:81:49:f3:02:80:fd:42:ed:6f:22:96:1c:bd:
d1:99:76:6a:c7:12:03:62:d0:62:53:9f:70:6f:16:
4d:5d:7d:bf:b0:ee:21:20:e3:02:8a:dc:2a:30:5c:
82:f5:b2:d6:2c:54:47:c4:6d:a3:80:35:d6:5d:f2:
b5:52:69:09:3f:42:7b:8b:ac:18:6c:4b:c1:68:00:
f4:6c:3f:3a:bb:6d:de:ce:7f:5a:76:c1:55:1e:d2:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:04:0D:BE:2B:84:55:54:49:12:D4:84:19:29:C7:D5:78:E4:F9
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:37:f0:72:b7:c6:96:90:6e:36:de:d0:50:3b:4d:19:8a:7c:
f8:d5:42:be:85:73:ec:cd:eb:18:f4:15:ee:8b:29:cf:0a:d1:
a1:6a:24:44:f1:02:1d:b9:06:e7:13:9f:02:4a:6c:b8:9c:bc:
f9:4e:ec:03:dc:4b:55:e7:db:7a:58:14:4d:24:84:0d:ab:b4:
7b:17:96:87:cf:d4:99:96:80:f2:75:1b:4a:2c:45:16:d9:c7:
7a:47:bc:3a:1a:7c:f1:a8:c0:c8:16:e7:94:e0:d8:3c:5c:9c:
42:42:de:0e:c2:b0:d0:ea:7b:11:dd:f6:d7:6d:4a:1d:37:c0:
7e:b9:0d:0a:e2:be:eb:24:bb:66:80:70:25:75:62:38:5c:a3:
74:21:ea:8c:e1:97:f6:f1:ec:f8:14:ae:0c:df:35:53:c1:00:
4c:a3:e1:54:0e:3c:88:03:4d:41:e1:6d:40:4d:24:a1:bc:3e:
01:94:8e:93:f8:98:e3:83:1e:31:50:c0:7b:49:aa:ff:09:5c:
57:87:ea:1f:5a:32:48:c8:a4:94:e6:f1:69:c6:97:de:4b:24:
53:bd:d9:a1:a8:c8:ba:bc:e6:97:cf:c4:3f:1a:9a:4e:96:6e:
61:92:0b:1a:7c:4a:a0:e7:cd:22:c4:31:fa:7a:51:01:33:02:
07:5c:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:07 2025 by rpki-client