Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: lIScGKNyEfMt9QoZo+uufqgJnoQW3fTFu+lfCDb58Do=
Subject key identifier: AE:7B:D0:1D:95:FC:3B:C2:84:65:1A:D1:C6:29:24:92:0D:53:C1:CA
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 01976F2BEAFD430AD464C88D78D280A5299B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 16:00:38 +0000
Manifest this update: Sat 14 Jun 2025 16:00:38 +0000
Manifest next update: Sun 15 Jun 2025 16:00:38 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: FeoCzsyvImi62sbvpqpZZ5biM5Ogfz9Q8/JmTB+mrUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:ea:fd:43:0a:d4:64:c8:8d:78:d2:80:a5:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Jun 14 16:00:38 2025 GMT
Not After : Jun 15 16:00:38 2025 GMT
Subject: CN=ae7bd01d95fc3bc284651ad1c62924920d53c1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bd:c5:b6:46:e7:de:a5:3e:43:34:1e:35:34:
39:80:c4:7f:fd:98:6a:d1:87:8a:32:91:58:88:fb:
16:37:69:31:66:2c:7f:d4:e2:56:3a:60:a8:64:33:
51:c2:6c:b9:02:29:7f:7f:fb:d4:2c:cc:fa:0c:d3:
77:2d:b4:fd:90:22:e0:95:97:40:d4:42:5f:b6:9e:
71:c9:20:24:b0:f6:31:86:63:a9:49:d5:e2:12:35:
5e:fa:1e:1f:fd:1a:66:4e:6c:b3:5e:8f:77:70:5c:
c1:3a:a8:58:ef:39:dd:0b:f4:91:32:59:2e:fb:ad:
8a:c4:ce:6d:f6:4c:fe:5b:ee:30:0b:be:81:fb:c0:
a3:cf:a1:a1:45:17:b2:f1:c5:4a:c2:7f:e3:82:28:
f0:8d:e0:28:90:39:78:37:29:7f:68:78:64:ec:dc:
c2:7c:20:cc:bb:4b:c6:68:05:8f:df:93:97:a8:00:
ae:eb:ea:39:83:f8:50:96:20:7f:09:18:fc:a8:16:
66:3c:0d:b3:3d:e9:d9:54:a9:8a:0f:a2:3e:e3:5e:
fd:fd:91:ba:bc:63:5a:c0:d3:08:8d:56:6f:80:8a:
b9:9a:35:c5:60:8e:2c:9c:66:8b:86:4a:22:ee:14:
f1:70:82:e0:0f:73:a9:52:88:6b:70:db:76:fc:b5:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:D0:1D:95:FC:3B:C2:84:65:1A:D1:C6:29:24:92:0D:53:C1:CA
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4f:cf:78:5b:25:5c:e7:07:ce:50:13:ca:99:c6:4c:96:f0:
94:e6:b5:32:ca:f8:c7:21:88:00:01:18:c2:f5:b7:50:e5:7c:
55:5e:d7:b0:cb:b3:b5:1d:09:fe:de:31:35:86:20:71:7b:f5:
2c:bb:e0:70:36:30:8b:08:d8:4a:b4:1c:27:85:ee:07:15:f9:
fc:a6:94:fd:e1:83:30:24:6b:48:f7:90:fc:91:a5:ae:eb:8e:
b1:55:8a:60:82:01:04:cb:66:e2:f1:2b:8c:ca:81:ad:7e:65:
c4:85:b9:37:46:b7:4d:0e:7c:78:28:17:12:39:65:6c:9e:bd:
56:8e:b5:d3:71:5b:cb:a6:30:a0:1a:e2:d6:46:9f:68:97:6a:
90:86:5e:f1:bc:d0:77:30:1c:64:87:b8:e0:85:06:48:61:2c:
48:b9:7c:45:71:52:33:f8:22:26:c8:00:4b:d3:85:5e:b4:e2:
7b:5d:73:c5:ca:87:f7:68:bf:85:83:23:a0:99:12:1c:56:b4:
5c:49:3b:aa:25:ae:58:df:1f:bf:07:8a:ba:6a:5c:e8:5c:e5:
e1:66:71:d1:ba:82:79:1f:63:02:22:6a:8c:7a:13:bb:75:02:
26:2c:a4:9f:a9:7b:03:61:be:84:6b:b5:6b:9d:94:49:ee:a2:
67:c6:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:27 2025 by rpki-client