Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier: k4+ytDJvNII+QOensglf9nb7shLYB402nJAHqPnXkuo=
Subject key identifier: CD:C1:B4:02:E4:8D:E4:B5:D9:08:66:56:F1:9D:F8:79:76:5A:15:8F
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 01967C7C6BA1404C83FB8D08DD89BAB9168C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 13:00:50 +0000
Manifest this update: Mon 28 Apr 2025 13:00:50 +0000
Manifest next update: Tue 29 Apr 2025 13:00:50 +0000
Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=)
2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: NBtRhM5WJkfRvOb3ANO/OEfoNJDL81nAAX1TuCak8EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:6b:a1:40:4c:83:fb:8d:08:dd:89:ba:b9:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Apr 28 13:00:50 2025 GMT
Not After : Apr 29 13:00:50 2025 GMT
Subject: CN=cdc1b402e48de4b5d9086656f19df879765a158f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:63:9c:ab:87:0d:99:b1:d1:3a:5c:6a:40:
ac:91:13:23:67:9a:16:25:09:62:40:6d:ca:7c:6e:
28:ce:91:61:2f:81:8d:a9:01:b7:33:f6:e5:53:75:
15:b3:d3:1c:f8:6c:9c:2c:5e:ac:76:15:46:18:f0:
4e:d3:ec:df:b4:78:8d:84:a5:87:d7:16:12:e1:19:
d1:33:dd:7a:7d:1c:23:ac:5f:74:33:57:1f:74:97:
38:9d:d5:4d:35:f4:46:6e:a6:5a:1d:eb:ca:aa:c0:
22:31:c5:e9:9d:0f:68:6e:da:4a:ad:70:19:76:57:
fb:4f:31:87:c5:9d:2d:cb:92:e7:58:b9:f4:a6:41:
c0:59:cd:8a:4f:7f:b2:72:9c:75:1c:df:be:9a:ab:
c3:e3:fd:0d:d9:90:05:70:99:79:97:9f:dd:ce:e6:
ad:db:66:dd:50:5a:fc:77:db:de:6b:b5:d6:10:15:
b9:8c:65:8c:67:cd:30:42:e4:49:4a:e9:5d:56:8b:
fa:42:4e:34:0b:98:8c:bc:14:c9:6f:e2:5a:63:21:
94:5f:99:22:0f:5f:18:5a:45:f8:ea:7b:2e:db:e2:
c1:ec:e2:27:9d:bd:4f:91:c0:23:2d:36:94:83:6c:
e4:7b:bc:7c:bb:90:bf:3b:82:f3:5a:55:18:23:ee:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:B4:02:E4:8D:E4:B5:D9:08:66:56:F1:9D:F8:79:76:5A:15:8F
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a1:13:f7:f9:88:a6:01:cd:65:71:64:9a:f7:90:52:b1:f2:
30:0b:b6:01:81:72:d9:4d:f2:96:ec:2e:ca:6b:96:f8:2a:d7:
77:db:3e:c4:aa:a7:f8:4d:cc:cb:f1:66:ce:41:f6:e5:49:c9:
f6:85:9e:f2:d1:d4:63:b9:fe:e1:6a:09:5f:a4:87:01:88:3e:
1a:2e:35:40:1c:ca:ea:82:eb:90:a8:b8:00:5e:43:4a:e7:57:
40:da:32:af:9e:7e:d5:ca:bc:54:9d:af:50:04:67:f4:ea:60:
6b:f1:d4:a6:d1:bd:09:a2:37:9e:c1:8f:40:43:65:b4:be:96:
ef:d5:d8:c6:ec:a7:52:9c:38:45:be:70:9a:c0:b4:f9:ba:b5:
68:b9:84:fe:86:e6:d7:2c:b6:98:ea:f2:f2:e7:34:52:58:02:
a5:2d:56:31:ad:de:47:ae:84:ca:3c:03:6d:4a:65:8b:05:c2:
68:49:de:a0:27:45:7d:85:5f:a0:fc:7b:66:8a:12:dc:22:ec:
0f:77:1c:77:a8:1a:38:03:76:71:91:54:b0:c8:ec:ac:dc:f2:
5c:fb:ff:ec:8a:79:f0:10:29:4d:f8:ff:9a:99:65:10:31:39:
ab:d1:28:21:45:b6:e6:c6:78:a5:c7:57:5a:ed:60:ce:2f:01:
1e:98:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:27 2025 by rpki-client