Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: LKx/GBDNhMHR3hEI89vXF6SQvybGa/hbpQUi5KVeYug=
Subject key identifier: 7D:A5:16:9A:04:07:E4:03:C3:E2:CD:68:4C:95:CB:AB:0B:49:90:22
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 0198741919849426BDB66242817CCFED9DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1377
Signing time: Mon 04 Aug 2025 08:00:58 +0000
Manifest this update: Mon 04 Aug 2025 08:00:58 +0000
Manifest next update: Tue 05 Aug 2025 08:00:58 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: WDKWH9owGbXuhWB4rHRLksJuzKPPXs1OXKuk1vAiIZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:19:84:94:26:bd:b6:62:42:81:7c:cf:ed:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Aug 4 08:00:58 2025 GMT
Not After : Aug 5 08:00:58 2025 GMT
Subject: CN=7da5169a0407e403c3e2cd684c95cbab0b499022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:3a:e1:d5:66:ee:23:cf:d4:9e:79:a9:94:
cf:f4:ef:be:ca:5e:08:d0:df:85:2e:22:8f:ac:1e:
8e:bb:2d:5e:1c:c4:43:ba:dd:86:eb:69:bb:a3:04:
8f:22:69:7f:6b:39:c9:10:af:24:06:e5:be:7a:cd:
33:23:6d:70:dc:6f:80:ec:41:2d:60:1c:ca:6b:1c:
f7:c9:d4:97:c3:24:d1:4f:63:17:bb:c6:44:93:97:
49:93:1a:e3:ec:7e:3c:59:f7:ed:cb:76:91:7d:59:
a4:aa:c3:70:cd:7a:fd:43:fb:51:56:ac:99:23:72:
49:19:f0:bb:cd:4a:68:24:26:bf:d6:8c:3b:9b:88:
8c:bd:9f:05:63:1d:a6:86:a2:86:c6:5a:11:a4:e4:
3d:a6:04:b1:94:49:7f:d4:11:c1:fb:26:19:fa:d1:
e2:e4:9f:d9:60:8e:15:26:dc:2c:5d:59:36:cc:d9:
08:10:94:8e:f7:ee:09:5a:98:c7:b2:90:e8:bd:a9:
64:72:c3:c0:5d:9e:b0:8b:d5:81:a1:2c:fb:ef:14:
3e:6e:d6:41:ef:6a:e5:98:bb:28:c5:40:43:75:d1:
17:45:80:bf:bc:d4:9e:f0:ba:52:c9:e5:c4:51:a8:
46:16:6d:3e:0c:36:d9:52:34:83:86:f6:b4:77:d2:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:16:9A:04:07:E4:03:C3:E2:CD:68:4C:95:CB:AB:0B:49:90:22
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4e:1f:b8:49:9b:d3:b4:1d:f0:f7:c1:05:84:a2:3b:40:cf:
41:46:62:5f:34:73:79:7c:57:c8:87:7a:0b:4c:cc:03:6a:f6:
2f:ea:18:f2:0e:b1:bc:a7:a5:40:8d:ac:5e:c3:a3:bb:cb:d4:
34:ec:54:44:47:e6:7f:8a:8c:70:0b:24:31:87:02:b0:9e:cd:
cb:ba:d1:63:a9:29:fa:e4:31:bf:6e:ce:2d:09:3a:85:d2:48:
68:20:a9:d8:f7:66:38:cd:ef:0c:a4:4e:9c:71:21:09:31:93:
6b:e4:74:93:6c:9f:d4:b9:b8:60:ea:bf:fb:16:34:09:d1:0a:
e4:86:a6:f1:45:34:61:27:c8:cc:12:6e:a0:5d:8c:33:b5:ff:
95:b3:2c:f7:4d:7d:25:03:0e:3e:11:1a:2d:22:2e:9b:4a:b4:
d0:83:7a:80:77:e4:a3:68:c2:f7:fb:1d:08:95:a4:f6:37:07:
b2:8e:bc:c9:65:a8:65:af:16:e8:a8:ce:6e:42:7a:3b:1b:e6:
c8:44:7f:47:05:76:74:6a:51:0e:da:c8:64:39:a6:1c:22:92:
4d:9f:aa:75:64:3f:9e:a7:e6:f4:c5:c6:05:17:6d:8a:77:ab:
ca:45:75:49:14:96:74:5e:f5:21:b2:bd:cd:08:78:3f:b2:63:
b7:70:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:59:10 2025 by rpki-client