Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: gS+TehMtnrw7TPzGEO32RW93wk63OKFbfE1Xs/kpkk8=
Subject key identifier: 41:71:1C:E1:59:7E:C8:55:DE:2F:E6:73:DF:55:66:68:78:6F:CD:A2
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 01976997E5F55FDCC0B146036070946A278C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 12ED
Signing time: Fri 13 Jun 2025 14:00:51 +0000
Manifest this update: Fri 13 Jun 2025 14:00:51 +0000
Manifest next update: Sat 14 Jun 2025 14:00:51 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: jLUobjC6FiKfvhtWPTIfS4VMqQPA8mJvXJvJ/G+EmyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:e5:f5:5f:dc:c0:b1:46:03:60:70:94:6a:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jun 13 14:00:51 2025 GMT
Not After : Jun 14 14:00:51 2025 GMT
Subject: CN=41711ce1597ec855de2fe673df556668786fcda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:2a:4f:8f:44:4e:8d:60:7b:0d:c6:62:09:
5e:79:29:49:53:64:28:37:f6:80:5b:f6:05:05:ea:
2e:8e:3a:44:28:05:36:99:a5:8a:ce:6b:90:2f:7e:
44:b7:ab:4d:90:d1:f6:de:10:2e:1c:7e:02:c6:52:
bf:c2:6b:98:20:0c:f5:92:23:85:ed:58:9b:79:72:
6c:05:3a:41:c8:87:fa:e2:79:5a:05:03:09:37:28:
54:a3:67:3d:7d:2b:95:ba:1d:d4:7f:92:2f:88:95:
4c:10:a8:0d:31:46:7e:1e:40:87:8c:39:42:bb:18:
cc:ab:82:5e:07:b6:90:dc:15:ac:ba:76:2d:bb:90:
9a:a9:7f:af:01:65:55:52:b7:48:a4:7d:19:d4:de:
e0:3e:d4:1e:74:ef:d0:ac:e3:33:fb:75:3b:c6:78:
35:6d:70:7e:44:a8:10:b9:c6:e0:1a:9b:b7:75:32:
8c:80:a3:d6:3e:11:ca:dc:7a:40:15:f3:bc:44:c9:
bf:90:61:92:65:fd:2a:95:39:78:ea:af:df:22:66:
07:4b:e5:05:ec:64:0f:ad:aa:a3:46:0a:0f:ef:cc:
da:48:21:32:2f:2d:c9:df:08:d9:c9:ac:33:4e:22:
76:4e:bb:cf:6c:93:e8:b0:e4:03:97:11:46:6c:60:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:71:1C:E1:59:7E:C8:55:DE:2F:E6:73:DF:55:66:68:78:6F:CD:A2
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:54:9c:b9:47:5e:bb:6f:6a:d5:e7:a5:58:98:ff:15:59:
47:53:aa:b9:59:38:bd:c9:82:0c:d3:22:9c:ea:f7:b7:92:71:
32:6a:cb:bb:05:b8:ed:79:b8:4f:40:f9:29:a7:56:25:52:5d:
b0:4f:53:ab:0e:e7:73:4c:6e:38:f8:4c:2a:38:78:51:3b:bc:
5f:b1:83:d9:2b:95:cf:39:d7:dc:52:82:32:33:3c:e8:b8:2f:
53:03:62:84:f3:a6:05:e7:41:34:ca:50:67:b5:c1:c2:dd:a8:
1c:80:7d:d3:75:9b:90:e5:08:89:a0:bd:5b:db:8a:1f:b6:14:
29:31:d1:5c:4a:f8:4f:d9:a0:71:92:3b:20:f8:80:45:95:b8:
8b:90:d6:c4:71:e2:2d:88:31:0c:e9:6f:a2:06:22:2a:01:d4:
2c:c9:b6:5b:b5:4b:db:9c:c2:da:66:49:84:1d:1d:2a:1a:61:
88:76:31:a5:36:d1:cd:c8:22:06:c1:d7:0c:f2:09:b2:2e:d9:
2a:67:cb:80:01:1e:53:59:1f:4a:cf:d5:2a:8a:88:02:54:52:
90:d6:96:5e:66:e3:a9:ed:bc:c9:f5:6d:0d:1a:98:95:69:b8:
28:7f:64:7a:9d:d5:f2:af:76:32:49:ee:ed:54:1e:3a:b0:9f:
27:d8:33:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl+X1X9zAsUYDYHCUaieMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3
MmZmMTIwHhcNMjUwNjEzMTQwMDUxWhcNMjUwNjE0MTQwMDUxWjAzMTEwLwYDVQQD
Eyg0MTcxMWNlMTU5N2VjODU1ZGUyZmU2NzNkZjU1NjY2ODc4NmZjZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDQqT49ETo1gew3GYgleeSlJU2Qo
N/aAW/YFBeoujjpEKAU2maWKzmuQL35Et6tNkNH23hAuHH4CxlK/wmuYIAz1kiOF
7VibeXJsBTpByIf64nlaBQMJNyhUo2c9fSuVuh3Uf5IviJVMEKgNMUZ+HkCHjDlC
uxjMq4JeB7aQ3BWsunYtu5CaqX+vAWVVUrdIpH0Z1N7gPtQedO/QrOMz+3U7xng1
bXB+RKgQucbgGpu3dTKMgKPWPhHK3HpAFfO8RMm/kGGSZf0qlTl46q/fImYHS+UF
7GQPraqjRgoP78zaSCEyLy3J3wjZyawzTiJ2TrvPbJPosOQDlxFGbGBKjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFxHOFZfshV3i/mc99VZmh4b82iMB8GA1UdIwQY
MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt
MDdhMzE1ZTkwMzNkLzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk
LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsBUnLlH
XrtvatXnpViY/xVZR1OquVk4vcmCDNMinOr3t5JxMmrLuwW47Xm4T0D5KadWJVJd
sE9Tqw7nc0xuOPhMKjh4UTu8X7GD2SuVzznX3FKCMjM86LgvUwNihPOmBedBNMpQ
Z7XBwt2oHIB903WbkOUIiaC9W9uKH7YUKTHRXEr4T9mgcZI7IPiARZW4i5DWxHHi
LYgxDOlvogYiKgHULMm2W7VL25zC2mZJhB0dKhphiHYxpTbRzcgiBsHXDPIJsi7Z
KmfLgAEeU1kfSs/VKoqIAlRSkNaWXmbjqe28yfVtDRqYlWm4KH9kep3V8q92Mknu
7VQeOrCfJ9gzpQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:12 2025 by rpki-client