Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: xjRLBTMqdPvt0RzIS8n1eV4T7z1nKQp1hnOYznJBCuY=
Subject key identifier: 7F:BD:26:2A:B5:85:1C:1D:17:09:C5:4E:F0:7F:DB:6E:49:BB:88:FB
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 01988E0F68CE98512DDE46C89D23233F8C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 0797
Signing time: Sat 09 Aug 2025 09:00:30 +0000
Manifest this update: Sat 09 Aug 2025 09:00:30 +0000
Manifest next update: Sun 10 Aug 2025 09:00:30 +0000
Files and hashes: 1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: umE18VmKkEz39tbNPbzHM0j7QtLCxSi+Blo8Q4R1YYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:68:ce:98:51:2d:de:46:c8:9d:23:23:3f:8c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Aug 9 09:00:30 2025 GMT
Not After : Aug 10 09:00:30 2025 GMT
Subject: CN=7fbd262ab5851c1d1709c54ef07fdb6e49bb88fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:47:aa:97:71:d4:fb:e2:53:f4:44:3d:03:
50:99:22:df:3c:75:43:82:1f:8d:13:69:d8:e8:23:
32:ee:6c:e5:c1:40:b9:a6:20:d6:28:75:a5:8c:36:
47:ba:95:1a:93:27:3f:be:0c:da:5f:a4:5d:c3:e0:
da:e9:b9:15:d6:9a:02:24:e9:6e:d6:3d:b6:00:b0:
0f:d6:65:cb:06:84:2d:ad:40:e0:41:d5:c6:42:8b:
b1:09:e6:4a:e6:f0:f1:7b:a8:05:8e:28:67:00:e5:
9a:33:e5:32:08:c6:80:f9:c0:e2:a4:0d:20:31:26:
fd:b0:a8:c2:c7:4e:e2:bf:1d:df:fa:78:c8:e3:b5:
ab:03:dd:3d:e9:fc:88:5b:6a:e8:cd:29:75:49:a7:
fb:b5:ac:0d:c0:df:05:eb:f9:44:04:3e:49:41:b9:
a4:cf:86:22:fc:a7:44:e5:cb:80:52:1b:ff:52:43:
f9:f5:24:5a:ba:ef:69:ec:6b:44:34:97:d2:e9:0f:
72:12:25:ab:0b:d6:2f:3a:56:26:e1:87:fe:b0:d3:
3b:d1:32:a4:26:2e:8c:4f:15:7f:f3:5a:9a:9f:75:
70:0c:bc:11:da:69:4c:48:7e:e7:7d:d9:65:7c:53:
01:de:98:ae:2d:c2:16:ca:2b:b6:f1:fd:10:d4:20:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:26:2A:B5:85:1C:1D:17:09:C5:4E:F0:7F:DB:6E:49:BB:88:FB
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d3:e5:3f:22:7f:90:cc:36:bf:3e:e4:b2:dc:81:b0:eb:89:
fd:12:63:17:30:8a:35:64:38:4b:90:4e:4e:46:bc:f8:7b:60:
b0:11:c6:1b:d8:18:c8:4d:dd:eb:19:ab:c1:34:bb:dc:ba:2e:
b7:ff:bc:ea:b5:d5:3e:d6:47:b0:8e:5b:c5:2e:d1:6e:31:15:
18:4f:05:8b:49:79:0a:82:91:c5:c3:61:d9:d5:dd:94:bd:dd:
b6:ba:73:ea:66:8e:b0:d0:31:80:32:e5:2f:47:43:90:ef:e0:
43:59:7c:45:9c:c3:ba:1e:be:41:ca:0f:5d:d6:6d:ec:0b:f2:
ef:45:03:59:4e:30:2f:51:c5:67:0f:ef:51:89:e1:30:a3:9e:
e0:ef:a6:24:cd:2f:aa:6d:a8:c9:5e:8d:8b:b4:40:b8:36:3f:
ae:34:e3:cc:4d:b9:3a:1e:54:73:42:4d:67:52:88:bb:ff:30:
29:47:a0:e2:20:47:d9:26:e7:a5:e8:dc:a6:39:ff:89:d9:eb:
7e:aa:15:d8:a2:f4:2c:d8:d3:7e:af:18:15:9f:cd:3b:88:fa:
ea:f6:1d:9a:19:33:f6:13:37:11:81:6b:c7:c5:41:aa:e5:cd:
c9:28:54:1d:cf:73:4d:1e:c8:bc:4e:20:e1:be:8d:a5:6d:ed:
ce:25:fa:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOD2jOmFEt3kbInSMjP4whMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4N2NhZjBjYjZiMzMwMWNjMDg0YTI1ZDVjMjE0MTBhOTJj
YTdlMzYwHhcNMjUwODA5MDkwMDMwWhcNMjUwODEwMDkwMDMwWjAzMTEwLwYDVQQD
Eyg3ZmJkMjYyYWI1ODUxYzFkMTcwOWM1NGVmMDdmZGI2ZTQ5YmI4OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w5Hqpdx1PviU/REPQNQmSLfPHVD
gh+NE2nY6CMy7mzlwUC5piDWKHWljDZHupUakyc/vgzaX6Rdw+Da6bkV1poCJOlu
1j22ALAP1mXLBoQtrUDgQdXGQouxCeZK5vDxe6gFjihnAOWaM+UyCMaA+cDipA0g
MSb9sKjCx07ivx3f+njI47WrA9096fyIW2rozSl1Saf7tawNwN8F6/lEBD5JQbmk
z4Yi/KdE5cuAUhv/UkP59SRauu9p7GtENJfS6Q9yEiWrC9YvOlYm4Yf+sNM70TKk
Ji6MTxV/81qan3VwDLwR2mlMSH7nfdllfFMB3piuLcIWyiu28f0Q1CAIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+9Jiq1hRwdFwnFTvB/225Ju4j7MB8GA1UdIwQY
MBaAFJh8rwy2szAcwISiXVwhQQqSyn42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEt
MzYxNzBjZDgxMzMwLzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEtMzYxNzBjZDgxMzMw
LzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNPlPyJ/
kMw2vz7kstyBsOuJ/RJjFzCKNWQ4S5BOTka8+HtgsBHGG9gYyE3d6xmrwTS73Lou
t/+86rXVPtZHsI5bxS7RbjEVGE8Fi0l5CoKRxcNh2dXdlL3dtrpz6maOsNAxgDLl
L0dDkO/gQ1l8RZzDuh6+QcoPXdZt7Avy70UDWU4wL1HFZw/vUYnhMKOe4O+mJM0v
qm2oyV6Ni7RAuDY/rjTjzE25Oh5Uc0JNZ1KIu/8wKUeg4iBH2Sbnpejcpjn/idnr
fqoV2KL0LNjTfq8YFZ/NO4j66vYdmhkz9hM3EYFrx8VBquXNyShUHc9zTR7IvE4g
4b6NpW3tziX6XQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:49 2025 by rpki-client