Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: myK0P5vI3sMyoMW+ZRcB0eWvLi4lVhxHQ5zNoa8Uq4c=
Subject key identifier: 7F:4A:6B:60:F9:7C:BC:22:74:59:A0:2C:DB:C9:8E:65:EE:65:0D:88
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 0198D4729F64467BE0BDA3421B4290DF547C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: Pzgps9aEGo62PXkxE2fk0IVRkjdNZ81+TuSOgJSE/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9f:64:46:7b:e0:bd:a3:42:1b:42:90:df:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=7f4a6b60f97cbc227459a02cdbc98e65ee650d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:d6:da:ae:ca:e8:ed:5a:f9:96:ec:dc:b0:
b1:9a:5c:1f:02:ec:59:ac:91:d8:ba:b4:c4:cc:dc:
65:34:97:7c:57:a6:6b:da:6e:ff:27:08:e4:fd:be:
7e:82:f1:96:73:55:5f:04:f7:6f:0c:0c:36:a4:60:
d0:fa:6d:a4:61:b4:d5:9f:a9:15:69:47:e0:35:0b:
27:6d:3a:87:e6:f9:6b:01:df:46:96:97:e7:ae:2e:
85:24:b9:8d:0f:e4:bb:89:6c:df:65:2d:55:8d:f3:
57:3c:c4:c0:96:e8:0f:b8:ac:05:94:96:46:44:bd:
8b:69:27:bd:af:0e:2d:95:f0:12:00:03:af:b0:d3:
89:d3:27:5f:1a:b5:c2:67:97:9f:c6:a4:eb:ce:df:
b1:9c:be:14:08:b0:32:a5:f0:b6:b7:89:60:7b:50:
84:bb:34:db:65:2c:2a:22:08:04:5f:8d:a3:cd:36:
0a:4d:51:bd:4a:4b:4d:78:a7:88:fb:1e:2f:29:e2:
40:ef:04:0b:97:95:bd:2a:5e:d4:38:87:d7:fc:49:
fb:2d:95:aa:87:bd:49:8c:30:85:9d:ed:3b:fe:17:
be:ee:b8:b0:9f:60:e7:38:76:89:8e:e7:5a:4a:5d:
1c:9c:b2:73:94:cb:cd:00:6c:f1:93:74:6a:1d:c4:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4A:6B:60:F9:7C:BC:22:74:59:A0:2C:DB:C9:8E:65:EE:65:0D:88
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c6:7a:f5:d7:63:e3:c4:92:33:03:61:16:c4:e6:58:78:70:
cd:f9:d4:3c:0f:39:28:d0:f5:a7:f7:0a:f4:06:18:50:c8:0f:
b9:25:cd:1f:80:9e:9b:a5:d5:e9:5d:03:88:53:05:a0:e3:91:
43:8c:7c:44:59:55:8e:3c:b7:71:8b:29:c4:ad:a4:b6:44:98:
bf:11:6b:44:04:e1:cf:07:3b:26:9a:e5:c3:c7:a1:00:6f:a2:
e1:6f:fc:21:42:48:58:6b:44:12:ed:63:c5:0f:77:9a:63:94:
1c:96:ee:12:74:1c:9a:b6:97:ce:80:95:63:a0:b6:1c:e3:31:
21:61:4b:21:27:c6:09:d3:87:03:32:bd:7b:be:6a:80:a0:0e:
82:8c:61:73:4b:ea:bf:85:da:39:39:5d:45:88:96:bd:ba:57:
36:65:4d:18:4a:3e:7a:5a:04:3d:7d:cd:e3:f5:7d:25:d9:54:
3a:9b:cd:c9:34:eb:c8:eb:b7:5b:20:73:9a:26:aa:38:30:b6:
b4:0e:4f:f6:5b:4a:f7:2d:62:5e:5e:46:1b:2b:c5:44:27:ea:
6f:b1:16:5e:de:04:64:ab:34:de:74:c3:9d:87:99:c4:91:fa:
11:da:89:e0:74:e3:be:bd:f1:e3:b9:61:db:fa:d5:3a:06:62:
a1:1f:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:38 2025 by rpki-client