Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: QR4hE52k852kaZR8RPy1f9Oc94Pxeve25FjOaJ5Dxvo=
Subject key identifier: 6E:0C:C2:AD:85:16:5F:CA:24:2B:92:CE:AA:44:01:EC:3D:ED:F1:5C
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 0197C6EFACFC7815046E396A1568F91543C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 13E5
Signing time: Tue 01 Jul 2025 17:01:25 +0000
Manifest this update: Tue 01 Jul 2025 17:01:25 +0000
Manifest next update: Wed 02 Jul 2025 17:01:25 +0000
Files and hashes: 1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=)
2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: DfJEimqdIsGO0OxzKvV+SfstVQmf5ioJ3qAp43AbS24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:ac:fc:78:15:04:6e:39:6a:15:68:f9:15:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Jul 1 17:01:25 2025 GMT
Not After : Jul 2 17:01:25 2025 GMT
Subject: CN=6e0cc2ad85165fca242b92ceaa4401ec3dedf15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:9e:59:bc:cd:cb:9c:8f:bb:8a:3c:b8:22:
84:0e:ba:b9:20:ce:46:4f:b2:bb:68:b6:17:3c:72:
0d:cf:cb:bf:21:53:1e:7c:28:c4:36:bd:39:9d:49:
5c:f7:c3:20:74:34:9b:f4:55:cb:3f:55:94:7d:91:
bf:3a:68:2b:11:44:08:11:6e:3b:27:a6:a6:d8:48:
04:80:31:53:37:c2:a6:e0:3a:24:25:17:b1:ad:d9:
41:68:aa:7b:8e:6c:a1:39:f2:8c:cf:0f:87:03:0d:
c5:37:71:fa:57:f5:21:26:ca:de:4a:97:c9:52:47:
50:39:55:b5:76:6d:d7:b7:7f:ad:93:b1:71:92:db:
15:08:2c:1c:70:0a:e1:5f:20:05:8e:e4:13:66:60:
6c:91:3f:b3:0b:8a:0c:13:9e:3b:d7:d3:e1:bd:65:
8e:d7:57:38:b9:a9:a2:20:8d:31:e1:46:bc:9a:18:
33:b2:bb:d4:22:7e:e6:1c:ec:c2:0a:39:65:d3:37:
6f:28:5c:3a:40:53:fe:53:5d:52:03:b6:9c:f0:c5:
4b:9a:2c:10:80:42:fa:82:b4:0f:ae:16:3f:15:7d:
30:d4:a8:21:f4:66:1e:d3:bf:cd:61:f0:df:30:39:
2b:8a:33:ad:38:ea:6c:1f:64:1b:f9:be:0b:5d:43:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:C2:AD:85:16:5F:CA:24:2B:92:CE:AA:44:01:EC:3D:ED:F1:5C
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8b:52:13:b8:6b:c1:8e:04:87:25:82:af:38:8b:c0:72:7c:
84:de:8c:3f:9c:39:81:b0:4a:ae:29:53:aa:88:e0:14:e9:35:
be:30:57:fd:78:ac:b1:79:20:c0:7d:40:b8:66:63:ad:85:65:
8e:ec:b5:53:e2:90:14:9d:5e:94:b2:7b:8d:f7:33:b2:a9:d4:
0a:2c:ed:1d:fe:01:6f:bc:0b:26:97:ad:15:61:89:64:85:42:
a3:e9:3a:cd:a9:15:9f:22:e4:71:67:ae:e8:12:bd:ab:93:2d:
32:0b:fc:d3:59:89:8d:54:cb:fa:cd:7f:b7:82:d7:39:00:3d:
8a:0c:bc:8d:1c:f2:64:a1:56:33:69:9d:d5:19:3a:04:99:ec:
a7:03:f4:ca:0a:a9:2b:48:0a:4e:3d:1d:d8:74:a5:20:f1:e7:
80:e1:45:3a:c9:ff:87:8b:5a:28:b8:cd:69:20:89:2e:33:b4:
3c:44:a0:74:72:e0:16:ea:bc:41:a5:81:93:f6:9f:9e:4d:76:
21:00:6a:48:57:62:12:f6:50:06:ce:dd:72:c5:07:18:52:bb:
20:9d:6b:79:d3:f5:49:97:d2:56:ac:8e:6e:3c:93:fe:12:7e:
c2:8b:ae:1b:fc:fb:2b:3f:2b:5b:30:1e:d0:a6:01:ca:fd:59:
0e:df:60:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfG76z8eBUEbjlqFWj5FUPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWEwODY5MmYyMjhkYTBjNDFiMzE3YzZmYTdjYzVjM2Jl
YzUxZTEwHhcNMjUwNzAxMTcwMTI1WhcNMjUwNzAyMTcwMTI1WjAzMTEwLwYDVQQD
Eyg2ZTBjYzJhZDg1MTY1ZmNhMjQyYjkyY2VhYTQ0MDFlYzNkZWRmMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwqeWbzNy5yPu4o8uCKEDrq5IM5G
T7K7aLYXPHINz8u/IVMefCjENr05nUlc98MgdDSb9FXLP1WUfZG/OmgrEUQIEW47
J6am2EgEgDFTN8Km4DokJRexrdlBaKp7jmyhOfKMzw+HAw3FN3H6V/UhJsreSpfJ
UkdQOVW1dm3Xt3+tk7FxktsVCCwccArhXyAFjuQTZmBskT+zC4oME54719PhvWWO
11c4uamiII0x4Ua8mhgzsrvUIn7mHOzCCjll0zdvKFw6QFP+U11SA7ac8MVLmiwQ
gEL6grQPrhY/FX0w1Kgh9GYe07/NYfDfMDkrijOtOOpsH2Qb+b4LXUNUrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4Mwq2FFl/KJCuSzqpEAew97fFcMB8GA1UdIwQY
MBaAFJoaCGkvIo2gxBsxfG+nzFw77FHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2Yt
MDJlZGYwOGY3Y2Y4LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2YtMDJlZGYwOGY3Y2Y4
LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4tSE7hr
wY4EhyWCrziLwHJ8hN6MP5w5gbBKrilTqojgFOk1vjBX/XissXkgwH1AuGZjrYVl
juy1U+KQFJ1elLJ7jfczsqnUCiztHf4Bb7wLJpetFWGJZIVCo+k6zakVnyLkcWeu
6BK9q5MtMgv801mJjVTL+s1/t4LXOQA9igy8jRzyZKFWM2md1Rk6BJnspwP0ygqp
K0gKTj0d2HSlIPHngOFFOsn/h4taKLjNaSCJLjO0PESgdHLgFuq8QaWBk/afnk12
IQBqSFdiEvZQBs7dcsUHGFK7IJ1redP1SZfSVqyObjyT/hJ+wouuG/z7Kz8rWzAe
0KYByv1ZDt9g5g==
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:50:30 2025 by rpki-client