
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: wwfa9lUUflZxgYCokOTEr9nAPwB2u6U/Zbqf5GY6OV4=
Subject key identifier: 29:20:93:6A:EC:73:A7:D3:DA:5E:F9:E5:2E:F3:08:1F:39:7B:8E:62
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 019873E30F8C5872FBF9B1FE6CFE3D9961C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: u9P9i/bRqXPLacs9S4blw75d0y/OWerWKxqbE9BmBes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0f:8c:58:72:fb:f9:b1:fe:6c:fe:3d:99:61:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=2920936aec73a7d3da5ef9e52ef3081f397b8e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:d7:21:84:02:90:a9:5f:6a:db:47:b3:d0:
e8:46:bb:04:2c:0c:51:53:c5:42:1b:ad:1b:82:38:
29:e6:8d:ce:59:0b:b2:11:68:92:ba:fc:93:ea:2f:
79:09:39:d6:ef:fc:95:31:fe:15:e3:d8:f4:ac:37:
0c:d2:52:98:30:6f:5f:f4:7d:aa:c3:d0:b7:85:f6:
4a:cf:36:70:27:52:d6:55:ed:7c:6a:f2:93:ba:20:
6f:e3:ea:71:68:a6:df:54:12:0c:c3:a6:bf:0a:40:
1f:5c:eb:05:2e:14:f7:e6:01:99:b4:7f:c6:c5:a5:
94:cf:97:66:e7:e9:7f:3e:51:34:e7:63:cf:80:f6:
01:e3:e7:e8:a1:f0:20:95:7d:39:50:48:5a:dc:68:
39:88:81:04:61:df:7c:8d:c9:dd:18:92:e0:40:6a:
34:09:44:d7:54:ec:c6:72:9a:3c:ae:c4:8b:8d:09:
83:84:e9:83:be:12:59:ce:ed:b2:ea:c8:4e:4a:ca:
0f:3c:c5:b3:59:ee:d0:f4:56:3e:43:fb:09:61:1f:
d4:2b:fa:9a:2c:2d:98:c8:5d:f0:fa:2c:0d:ab:8e:
fe:74:aa:5a:32:d0:74:82:f8:a8:b0:f4:6b:71:c7:
82:ad:b6:8c:2a:1c:60:63:de:17:73:ba:6d:e3:77:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:93:6A:EC:73:A7:D3:DA:5E:F9:E5:2E:F3:08:1F:39:7B:8E:62
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c2:1a:97:15:e9:91:8f:22:7f:f5:e0:77:3e:6e:b0:b5:b0:
f7:a4:d9:de:f0:ea:a1:6d:51:6f:e0:46:56:ee:95:55:67:db:
62:9a:5d:71:d8:fe:f7:47:9b:d2:57:f3:b5:83:f2:f6:de:de:
fe:f0:95:40:81:d9:95:80:01:c7:83:8c:15:7f:90:1e:fa:b6:
e5:fe:94:92:fd:7b:f9:e2:2e:b5:e2:24:20:55:da:75:e1:0e:
cc:f5:87:fb:99:20:db:95:7a:99:6f:86:e1:e7:84:43:b7:43:
c9:c5:5f:42:4f:b5:61:f4:2c:9a:e3:d0:86:da:8b:89:92:33:
00:9f:35:33:52:11:9c:a2:76:0b:75:68:a1:42:0c:d8:ad:2a:
f2:3f:22:81:f7:29:0d:a0:ac:4e:aa:c1:5c:a9:9c:5f:d6:b2:
df:af:5c:21:9c:56:eb:d6:93:ec:02:df:87:dd:9d:67:dd:ba:
a1:79:63:c0:1b:59:94:2c:ed:c7:fb:62:cb:72:3a:d1:c5:32:
47:48:3f:da:62:b9:02:66:30:fd:e4:22:0e:c6:56:6b:c2:f7:
21:13:09:87:79:96:79:1d:99:11:38:04:52:76:00:39:f2:a0:
48:07:a2:71:f6:63:09:00:0a:27:28:fc:3a:d2:97:88:67:82:
a4:b9:87:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4w+MWHL7+bH+bP49mWHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzI4ZThhMjdkMzBjODNhZWU1ZjQ5NjI0MDk4NWVlNDBj
YjM3OGIwHhcNMjUwODA0MDcwMTU3WhcNMjUwODA1MDcwMTU3WjAzMTEwLwYDVQQD
EygyOTIwOTM2YWVjNzNhN2QzZGE1ZWY5ZTUyZWYzMDgxZjM5N2I4ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzfXIYQCkKlfattHs9DoRrsELAxR
U8VCG60bgjgp5o3OWQuyEWiSuvyT6i95CTnW7/yVMf4V49j0rDcM0lKYMG9f9H2q
w9C3hfZKzzZwJ1LWVe18avKTuiBv4+pxaKbfVBIMw6a/CkAfXOsFLhT35gGZtH/G
xaWUz5dm5+l/PlE052PPgPYB4+foofAglX05UEha3Gg5iIEEYd98jcndGJLgQGo0
CUTXVOzGcpo8rsSLjQmDhOmDvhJZzu2y6shOSsoPPMWzWe7Q9FY+Q/sJYR/UK/qa
LC2YyF3w+iwNq47+dKpaMtB0gviosPRrcceCrbaMKhxgY94Xc7pt43doLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkgk2rsc6fT2l755S7zCB85e45iMB8GA1UdIwQY
MBaAFJhyjoon0wyDruX0liQJhe5AyzeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjkt
YTI0ZTNhMGEzMWVmLzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjktYTI0ZTNhMGEzMWVm
LzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsIalxXp
kY8if/Xgdz5usLWw96TZ3vDqoW1Rb+BGVu6VVWfbYppdcdj+90eb0lfztYPy9t7e
/vCVQIHZlYABx4OMFX+QHvq25f6Ukv17+eIuteIkIFXadeEOzPWH+5kg25V6mW+G
4eeEQ7dDycVfQk+1YfQsmuPQhtqLiZIzAJ81M1IRnKJ2C3VooUIM2K0q8j8igfcp
DaCsTqrBXKmcX9ay369cIZxW69aT7ALfh92dZ926oXljwBtZlCztx/tiy3I60cUy
R0g/2mK5AmYw/eQiDsZWa8L3IRMJh3mWeR2ZETgEUnYAOfKgSAeicfZjCQAKJyj8
OtKXiGeCpLmHhg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:47 2025 by rpki-client