Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
File: HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json)
Hash identifier: tCFvR33oHY4Av3a4v9nYaZ0sQu0Z0sUVgvMNK44XMRY=
Subject key identifier: 1C:3E:D7:52:67:01:F5:E0:41:F1:E7:57:39:9E:66:58:16:8E:E6:B7
Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
Certificate issuer: /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Certificate serial: 0196748B96ED34330872CC839ED9640C0CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
Manifest number: 0BA0
Signing time: Sun 27 Apr 2025 00:00:27 +0000
Manifest this update: Sun 27 Apr 2025 00:00:27 +0000
Manifest next update: Mon 28 Apr 2025 00:00:27 +0000
Files and hashes: 1: 3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa (hash: NJmABczjuAOTLl0h6DBnrPjIGOR8/qxj1OB7hIhj4j0=)
2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: DskHUIWLNS0HCVmULVWUwv/cBm6R40UWC4RnJwLimLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:96:ed:34:33:08:72:cc:83:9e:d9:64:0c:0c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2
Validity
Not Before: Apr 27 00:00:27 2025 GMT
Not After : Apr 28 00:00:27 2025 GMT
Subject: CN=1c3ed7526701f5e041f1e757399e6658168ee6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:9a:16:6a:8a:02:34:d4:a9:d8:03:b7:35:
c5:aa:72:6f:52:2c:54:9b:25:db:e7:5b:b9:05:d7:
36:4e:79:57:a2:ea:f9:84:21:36:49:8a:be:83:32:
7a:26:23:01:6d:5f:09:2d:4c:eb:3b:c1:2a:db:5a:
24:e9:da:86:32:df:c8:65:a9:8e:2e:b1:71:a5:71:
cd:2d:47:6d:8f:fb:21:e9:b1:ff:6d:37:9a:b8:9a:
31:83:3a:0a:ec:c4:b5:e2:53:31:4f:23:1b:0c:f9:
11:d7:e9:fa:77:79:b6:be:40:a4:9f:27:43:2c:0f:
60:57:c0:b9:5a:1f:ed:16:d0:a7:92:55:fa:a9:76:
a2:3a:3e:11:99:f0:2e:fb:c2:ac:91:dc:c1:45:ab:
e5:b8:ff:9a:f3:69:92:13:b5:7f:62:58:68:4d:75:
ef:2e:d4:5a:69:01:08:33:0d:96:7c:9e:7c:72:6e:
27:df:5b:1b:e2:b8:82:30:dc:46:f0:f7:ae:1d:c1:
1f:b8:ef:cd:25:d4:bb:40:a8:84:07:db:d8:e8:14:
2f:cd:b9:97:fd:97:7d:04:4d:8b:ad:cd:ea:ed:c6:
c8:7b:ab:d0:de:36:49:fb:16:5e:4c:d1:78:76:1c:
e8:54:3a:4b:4a:f6:ab:5e:f2:4a:53:75:a8:91:82:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:D7:52:67:01:F5:E0:41:F1:E7:57:39:9E:66:58:16:8E:E6:B7
X509v3 Authority Key Identifier:
keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:04:7a:72:38:cf:9a:4e:35:cf:2d:25:18:9a:8e:22:3d:b1:
0e:8a:5f:61:3d:ea:39:c1:ec:08:fb:9c:4c:91:f1:8b:6c:09:
fe:70:71:70:27:41:35:f3:3a:c6:4f:5e:85:ab:be:38:04:63:
6c:9e:1e:2c:92:11:bf:2d:e2:a2:f3:9a:fe:6c:88:d1:fa:8c:
dd:b5:a2:b2:25:3d:c4:6e:6e:03:c0:6d:94:62:cd:ab:28:39:
85:8d:e7:bd:06:85:0b:a4:4b:a9:ba:b2:d9:cf:79:73:c7:53:
2a:3a:e4:5b:05:27:f0:aa:92:41:44:5f:0c:8e:3c:5f:6f:0b:
48:64:c1:06:f5:70:3d:10:68:c0:1a:df:34:1f:a7:8d:a4:48:
a4:f4:39:85:31:e9:3f:81:2b:d6:9e:0f:39:63:03:d2:8b:a9:
b2:a7:84:81:14:45:cc:91:7a:a1:dd:0a:fb:36:d2:b8:81:18:
7e:8c:1a:a2:23:ed:5f:a8:11:7a:c0:64:0a:37:20:d0:23:89:
34:8c:4f:d7:e6:b7:97:9d:14:29:7f:c2:55:c8:e5:2c:8e:8b:
6c:7b:44:e0:8c:44:55:6e:b6:ce:71:b3:50:9a:f5:38:d9:03:
b8:56:77:d9:86:0c:3f:d6:65:ec:9b:5c:87:83:cf:78:2e:3b:
b7:a1:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:20 2025 by rpki-client