Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: cWZ0crtv8mdK9VJjNH5GOgzkWfdXe2+K2EP6Zw534ko=
Subject key identifier: 52:75:11:4D:54:C5:6A:27:94:A0:54:21:3C:34:6F:07:7F:67:0D:6E
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 0198D6985CDE840974B9E8E993235429ED66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 13AA
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: LUIQY0ogd9GcM1DlcnaVwRv7fr4N2xFGZ7gRcUHzESU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5c:de:84:09:74:b9:e8:e9:93:23:54:29:ed:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=5275114d54c56a2794a054213c346f077f670d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:12:c2:e2:ff:f1:5e:f1:fc:6f:1f:d2:fa:
fe:80:de:4f:8e:93:4a:dc:8f:7b:55:d9:2e:a1:f7:
f9:fe:e0:b5:99:bb:40:a1:2a:08:69:ed:8f:c5:f5:
59:ab:d3:33:80:98:c4:3a:58:2e:ad:df:a4:4f:7a:
ad:be:da:2b:e7:9c:ba:20:54:2a:db:53:14:b2:7d:
18:f5:ad:fa:00:64:58:47:d2:b2:cb:1b:b6:cb:b2:
f3:cc:f3:6f:9a:85:31:c4:c6:de:79:46:d2:ee:81:
0b:3e:11:4c:dd:4e:dc:aa:cf:7a:1e:65:c6:32:bb:
24:a7:83:cb:bd:ef:c5:a6:d2:83:87:58:2a:92:a5:
db:cc:84:c9:2c:8c:5d:72:01:5d:34:86:d0:d7:b8:
2e:24:e2:2a:42:2a:0d:7f:61:ec:56:d5:5b:5e:f9:
16:95:7b:bb:ae:6f:40:f4:81:7f:34:01:d1:84:0d:
8a:af:bf:43:7f:d2:1b:27:17:18:98:4e:86:b3:2c:
53:5e:d9:6b:4e:0f:00:ca:22:d0:90:b9:a8:44:83:
61:b6:a2:b6:46:26:01:1a:da:e8:df:2c:22:34:d9:
60:42:66:64:da:c4:86:74:6d:2f:09:13:73:b8:23:
00:66:c2:15:1f:3b:d5:7c:db:ec:e9:9f:83:9a:cc:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:75:11:4D:54:C5:6A:27:94:A0:54:21:3C:34:6F:07:7F:67:0D:6E
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a5:33:a0:81:5c:ea:3f:d7:cb:38:7c:62:9f:0a:95:35:13:
40:32:6f:ce:e2:b9:ed:ae:fb:0c:52:88:dd:78:c8:ec:7c:cc:
cf:7b:d6:40:e9:77:34:b9:fc:47:42:a8:ee:b2:18:79:76:3e:
38:2c:6d:c6:b5:e5:d4:83:60:bc:29:20:26:26:7c:e1:ef:de:
9f:05:80:b3:8c:cc:38:1f:4c:8b:b5:8c:eb:19:8c:66:24:5a:
3c:c8:17:31:bc:ce:34:6a:3e:67:08:23:ab:37:37:58:77:d5:
ea:84:13:93:00:ed:92:f3:2d:88:1c:94:d2:ba:6e:98:81:c1:
de:a3:10:19:24:c4:39:f5:fe:44:1d:c2:63:67:24:2d:70:d9:
06:73:35:48:ec:61:41:18:fe:15:e7:fd:3a:c3:5b:ab:ba:91:
e8:2d:96:86:a4:5f:98:a2:96:93:7c:6f:a3:a1:4a:73:a1:78:
30:83:49:f5:1f:70:cd:4b:ba:a7:86:8a:23:c4:05:1d:48:12:
b1:12:e8:e7:cb:a3:2b:10:ae:23:f8:91:a6:a2:ea:94:eb:ce:
4b:15:ae:d6:20:cf:3f:2b:a5:21:b2:31:60:b8:20:d9:06:a9:
48:76:1d:6c:9d:49:ca:f0:1c:97:87:be:23:62:2c:22:83:66:
fa:d3:2b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:24 2025 by rpki-client