Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: loyfzqd08FHF5ZjOz3nk8O7q0Zps+au+s87PAyF7xMk=
Subject key identifier: 85:16:10:44:8C:5B:C7:F6:29:1A:64:8E:E8:E6:CF:18:4B:4E:18:9E
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019A4D3CD9A64479AB73B079F4DDCEA55CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 146C
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: RvxTpxOce30vrNjhbIews1VsAmaJmZ8i1lZjvHKYiWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d9:a6:44:79:ab:73:b0:79:f4:dd:ce:a5:5c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=851610448c5bc7f6291a648ee8e6cf184b4e189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:56:12:9b:83:5c:e0:97:96:df:de:3a:56:
7e:aa:ae:45:b4:7b:98:9c:c4:33:15:19:e6:26:8b:
83:57:52:39:9a:a5:04:7d:a5:53:fd:7b:e7:e8:b8:
c4:dd:cc:e1:20:bf:e0:4a:74:6d:db:a7:48:81:7d:
a1:47:d5:e4:35:4d:13:76:2c:6e:55:87:95:d4:f9:
f0:88:e6:0e:61:fd:5f:55:23:4c:8d:71:8c:0d:3a:
26:0c:26:7b:4d:5e:1b:cc:07:b1:ef:5e:8e:62:07:
5e:c0:b3:99:f7:30:9e:5f:29:07:86:08:60:19:03:
99:5d:5c:64:23:02:44:e6:41:46:d2:ef:05:bc:92:
48:ca:77:dd:92:03:8a:64:48:1c:40:78:2f:eb:3a:
44:60:cc:47:09:ad:9c:5b:00:a0:52:f3:ae:48:10:
3a:95:91:95:1f:91:4f:fa:2e:f5:2a:f1:2b:d8:05:
22:6c:80:ed:95:41:ea:e8:f6:a6:93:3e:14:b5:cc:
05:d8:63:22:a8:9b:18:b4:55:68:b2:ff:cc:23:34:
bc:46:01:34:08:dd:37:6e:3e:62:50:14:ad:b5:7f:
f7:b2:bb:e6:5a:b4:67:cf:5f:47:f1:0d:59:91:86:
0c:65:b1:63:1b:4a:db:79:9d:b6:86:62:85:fb:5a:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:10:44:8C:5B:C7:F6:29:1A:64:8E:E8:E6:CF:18:4B:4E:18:9E
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8e:92:12:73:90:70:92:94:b1:80:5a:28:37:c7:1d:f2:c4:
57:65:4d:ea:4d:30:0c:66:5c:27:83:e1:f3:a8:c5:c1:57:80:
1c:33:8b:a1:92:5b:e4:7f:9f:6f:39:2d:1d:dd:f6:83:54:c7:
bd:a9:62:17:0d:76:e5:0b:9f:79:3a:19:bb:3e:74:ec:62:ff:
55:9e:8f:a9:78:b5:d3:07:fa:07:c8:f4:14:8f:31:da:60:cc:
cf:42:7b:1e:45:ed:10:37:66:e4:aa:3d:a3:3d:a1:0c:44:6e:
04:17:57:71:4d:5c:81:32:07:d6:a5:38:3f:6d:7a:40:5a:b6:
40:3a:cb:8f:54:ee:ea:87:1b:97:ac:f1:8c:71:92:96:fe:8b:
e0:25:ca:7a:27:da:68:88:19:a5:41:42:e5:19:7a:99:bc:e0:
1e:c3:09:1c:de:0a:44:20:bd:de:1c:60:9f:2c:80:bd:00:9e:
1d:b6:d4:1c:8d:b8:f9:f2:f1:7b:0c:95:13:f8:9f:bd:dc:b2:
5f:a8:fe:d3:1e:e3:06:6b:69:2c:d9:d1:d2:a3:19:70:73:67:
17:7c:3b:4d:45:c9:10:cb:79:a1:25:2c:2b:43:4d:48:43:c7:
68:c3:76:2a:b7:63:97:21:e6:64:89:b5:8b:43:e7:64:d3:db:
ee:e7:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:23 2025 by rpki-client