Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: npdNpx2enS3CVsnO3VzT+J23bs9mKiyj9+fcOiCbNio=
Subject key identifier: 61:8E:D8:4A:F9:A9:91:7C:F7:57:89:36:24:31:2B:2A:3A:55:FF:C9
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 0197B6D75D204682811E4D93EBD9EDC15B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1315
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: NpSRJKIMiLkb1cie/pg3E1QK3gfTePxRi1/ic1zWpUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5d:20:46:82:81:1e:4d:93:eb:d9:ed:c1:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=618ed84af9a9917cf757893624312b2a3a55ffc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:6e:25:bc:22:2a:2d:a4:d7:a9:49:92:4e:
c3:06:f2:4f:6f:0d:15:1b:95:00:29:c9:77:95:4b:
18:5c:c7:21:10:72:6e:ba:c4:ab:87:f3:2d:21:bf:
c0:03:fe:61:a6:8d:ca:fd:d3:6c:70:26:e2:8b:69:
11:42:fc:cf:e6:4b:eb:06:89:b9:fe:9e:c7:54:8f:
75:dd:a3:69:4d:a9:bc:d1:d1:53:e3:57:e0:00:61:
2e:c9:37:6a:44:13:1a:30:21:e1:7c:cb:bd:4e:3c:
34:a8:56:27:f4:27:91:20:88:c7:e0:e3:8f:99:ba:
3e:16:bc:e8:8b:24:1e:58:89:03:60:58:d8:20:c8:
d3:41:dc:ff:15:65:7c:9b:01:1b:db:76:4a:32:00:
eb:69:77:8a:db:18:ef:5e:e6:9c:a1:3a:c9:76:27:
63:5f:99:b7:80:20:e3:5c:fc:d6:f1:7a:9b:8c:34:
c7:1d:10:72:20:72:59:15:52:96:ba:7b:a4:66:09:
95:86:0b:e3:32:5a:5f:6e:7c:27:49:5c:6a:f4:4a:
51:4d:81:c2:38:84:97:43:7e:39:78:f1:9d:7c:f4:
9b:31:02:dc:d8:29:70:04:e1:92:7f:3c:d5:59:a9:
27:39:60:eb:d5:ea:11:ec:03:f4:e0:b2:51:a7:cb:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8E:D8:4A:F9:A9:91:7C:F7:57:89:36:24:31:2B:2A:3A:55:FF:C9
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3a:21:37:bf:a7:96:ac:91:86:c6:8f:e4:fa:f2:19:c3:cf:
e8:d7:ef:3b:9f:a2:5b:90:83:7f:c6:bb:58:fd:4a:1e:01:89:
5d:08:2b:ea:cf:6e:ed:df:1d:13:75:46:95:fd:c3:90:eb:8e:
ee:83:64:9b:72:37:c7:dd:88:69:ee:94:9c:d3:19:97:83:d8:
63:ef:b2:70:1c:c7:03:00:02:17:06:e3:66:ae:b1:be:cf:91:
b1:3a:37:3d:32:40:e9:55:dc:24:4d:a2:df:bd:4a:55:eb:3d:
dd:0e:95:97:b8:b8:00:49:5c:66:2b:52:18:ab:00:d1:d1:8e:
94:d0:15:50:97:e6:05:e6:83:b7:d7:9a:cd:cb:f4:7e:13:d0:
5f:ab:96:0f:b9:49:b5:2b:05:57:64:ca:64:30:e6:01:6d:1d:
12:d9:b0:40:23:3b:e1:fb:10:57:fe:e5:73:77:13:13:d1:1d:
78:44:82:c5:92:00:8e:ee:7e:c6:44:9e:fb:3f:4d:ff:a1:3b:
03:fc:88:26:85:63:88:0f:a7:4a:9a:ad:d8:e7:b8:b8:23:18:
4a:f1:fd:70:f8:7c:7a:51:43:33:dc:55:c5:ad:e8:f9:55:08:
3d:70:64:ec:95:9e:ca:e1:36:df:d2:d0:5c:2d:24:86:9b:b9:
ea:d1:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:09 2025 by rpki-client