Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: y3qeS5YFu0sAK9iQ8eA0vwxuSn9EvTNEAmOGA/k5Zxs=
Subject key identifier: 75:C6:6C:47:13:C3:9A:A2:56:4E:03:A1:7C:2A:F2:60:4E:DE:67:95
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 0197B6A2442DD8A48F936DC1EB838DB07294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: FItOIv266jDaDoFB4Cth/2p4QahgM1H5rHypLeT7AlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:44:2d:d8:a4:8f:93:6d:c1:eb:83:8d:b0:72:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=75c66c4713c39aa2564e03a17c2af2604ede6795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:86:67:ae:e8:a1:46:79:e0:93:8e:b5:58:
35:eb:0b:c5:2a:e7:e6:ee:12:14:f6:28:26:f9:ff:
05:89:f8:14:1f:23:7a:b3:2b:d8:dd:b7:68:17:cd:
86:e7:10:0a:5f:5a:bc:13:97:ef:73:f5:18:88:fb:
cc:c3:45:fc:ce:cf:88:e0:fe:14:e9:e2:6a:be:70:
eb:31:6c:a1:cd:61:db:9e:c4:1f:1e:97:43:82:c5:
8a:45:cc:ed:6f:cb:36:ce:88:63:10:07:92:b3:14:
4e:c2:12:11:4b:5d:ca:46:87:7d:e8:30:32:f1:c6:
f1:eb:8e:e9:cf:3d:b5:ff:75:a6:51:22:c5:37:bf:
9c:42:48:84:38:4b:bc:fa:15:7b:be:ee:0d:d3:5b:
fa:cd:b7:8c:e7:d4:67:91:ea:06:ff:e3:85:19:5d:
d0:37:dc:1b:34:1e:71:da:58:73:53:cd:fa:c8:fb:
a4:ed:19:6d:7f:38:83:a1:0a:8a:a7:e4:17:51:cb:
58:e6:ac:ed:80:1e:40:ca:45:fe:79:f5:9d:c4:60:
fa:55:1d:4a:c8:6c:f6:72:fd:91:12:ea:bf:4e:54:
9e:91:65:a7:38:ea:a4:1f:5b:af:f5:d0:64:76:25:
35:40:77:5d:5e:94:f4:96:2f:e4:74:d7:96:64:4a:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C6:6C:47:13:C3:9A:A2:56:4E:03:A1:7C:2A:F2:60:4E:DE:67:95
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e9:ce:df:8d:1a:d8:e9:86:02:07:d8:5e:d5:b8:f7:9d:f4:
b5:0e:58:7e:f9:fc:17:3a:eb:2c:43:6a:ae:36:95:92:fe:1e:
73:37:5f:6d:b3:7e:f7:2b:eb:cf:e7:37:ce:81:fb:ae:11:a4:
c7:d6:09:bf:59:13:3b:7d:10:57:ea:b3:6d:92:4f:9a:84:a9:
61:e3:2e:06:7c:e3:4a:a8:6b:03:c6:8d:5f:a2:ff:6c:43:ea:
60:d9:d7:ba:72:57:8d:25:c4:24:c8:c1:81:b2:75:a5:52:dc:
4e:51:4f:49:22:5f:ff:c1:da:c7:f4:d4:3c:92:5d:76:85:56:
d0:97:4b:bc:80:13:89:6e:a9:05:01:52:95:49:f8:8b:6e:f6:
41:b9:e3:dc:ff:41:55:5b:67:df:2c:e6:b5:fe:c9:33:49:97:
15:14:46:ff:88:4e:f9:c5:85:cd:1c:09:0c:a9:6c:a8:70:7d:
f7:9b:4e:5e:98:f1:d4:4b:79:3d:d6:62:88:d8:e0:bf:2c:c0:
ae:82:31:24:05:46:5c:7b:eb:60:b8:e5:b8:ca:04:88:95:2a:
77:43:6f:6b:42:64:92:44:8c:1f:9f:3d:ae:b6:4f:ea:2e:ae:
73:79:ab:87:dd:b6:f7:51:2f:9a:63:7a:40:1f:ac:37:8c:1a:
c3:75:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:20 2025 by rpki-client