Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: zsaWqxFZTMz7+g/Vft5Pb+hfadOf+lMn5n7wXFeK0Zs=
Subject key identifier: 8F:9D:16:1A:19:51:E0:50:7D:9E:3A:A8:61:B4:F6:83:25:E4:93:00
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01976D06E1EDFA8AC6875871FF6FD2B9789F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 15D3
Signing time: Sat 14 Jun 2025 06:00:56 +0000
Manifest this update: Sat 14 Jun 2025 06:00:56 +0000
Manifest next update: Sun 15 Jun 2025 06:00:56 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
4: GybFbQZPW3_7i-RQuCEFHffGer0.roa (hash: tj1qN/jD8BZvRM4L8M8Yu1BpEYn8wNg9Af4c40NWF28=)
5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: +ggkbacxhv3S9on3Sr4xaezvGlMWZCrLzDBsjIS8j/0=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e1:ed:fa:8a:c6:87:58:71:ff:6f:d2:b9:78:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jun 14 06:00:56 2025 GMT
Not After : Jun 15 06:00:56 2025 GMT
Subject: CN=8f9d161a1951e0507d9e3aa861b4f68325e49300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:3f:2f:3e:31:ea:44:08:31:dd:1b:8a:ed:
e3:91:5b:12:37:33:5e:5c:53:5d:11:45:70:00:02:
b1:8f:02:b5:68:5e:6a:2f:ea:db:91:95:19:95:45:
b7:6d:ba:be:bd:cd:92:6d:66:bd:54:92:24:65:3d:
30:da:37:4e:93:02:81:e1:30:e9:fe:0e:38:13:5c:
64:14:f2:7c:ff:4b:42:8f:a3:ae:b7:08:1a:5c:fa:
d3:19:31:75:26:96:1a:53:83:70:0d:7e:c0:e2:9d:
b3:41:31:a4:6a:8f:25:9f:96:df:49:ef:4e:b3:d5:
c8:16:cf:58:09:c4:1f:2c:70:45:30:31:9c:07:d3:
db:ad:c9:3a:34:3f:7c:fa:f6:7f:fe:07:e8:a2:b4:
5d:63:8b:d5:37:4c:f1:b4:0c:a0:28:39:b8:a4:df:
96:d5:37:99:ed:21:b8:27:d5:f3:da:b5:b6:87:48:
91:4f:c0:35:c8:70:e7:f5:22:28:aa:bf:10:f0:93:
e3:3f:0d:47:cd:92:71:81:63:14:37:20:a6:91:cd:
2c:a0:d9:71:a1:9a:ef:69:91:a2:9e:12:d1:d7:04:
8c:8e:a2:09:c6:5a:5a:31:98:24:dc:39:cc:98:a9:
7f:8b:c0:d0:3a:b4:f1:28:41:52:73:e5:0e:2f:b7:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:16:1A:19:51:E0:50:7D:9E:3A:A8:61:B4:F6:83:25:E4:93:00
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:24:90:d4:12:61:7f:38:e9:64:17:21:1e:34:0f:9d:4d:b3:
bf:62:92:dc:79:35:76:8a:0d:8e:8b:2e:6a:5c:e0:05:96:f0:
f5:a6:4b:1a:30:13:eb:16:b3:0c:a8:14:1c:15:cd:17:09:b9:
25:ff:6c:10:d5:e5:a4:24:90:4e:48:78:1e:06:ba:8a:d5:f5:
bc:99:b2:52:30:cf:d5:e5:e7:30:3b:0f:d4:d7:d2:b1:9c:f9:
16:07:54:1d:f2:fc:54:08:83:48:2e:9a:df:13:17:d3:41:7b:
66:a3:3a:6a:5d:69:c1:ab:af:d5:e0:be:d6:91:8e:4b:31:c7:
ba:af:56:0e:ec:70:20:f9:55:74:51:28:5f:cc:86:fc:38:52:
5e:6a:24:75:dd:a9:0a:68:70:f8:22:12:26:e4:bd:9d:6b:4c:
00:b6:35:3e:d7:76:be:98:12:a4:bb:4f:4a:71:19:4a:30:d4:
25:43:d5:a2:0a:27:c7:6d:1c:16:4d:0d:f3:99:09:1b:52:a8:
99:f5:07:6a:06:01:04:c3:9b:52:32:ac:d2:d3:d9:ab:6d:bd:
5b:da:75:9f:3b:01:81:78:47:a5:1f:b0:10:05:b9:af:e9:61:
f2:c4:eb:e9:7b:28:ca:8c:00:c6:fb:3f:b0:98:ed:26:a9:4b:
09:89:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:46:59 2025 by rpki-client