Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: gAbPM5QCXd7mwq4UTr1MxaY4bpTAHL77JXcHeNAFkNg=
Subject key identifier: 25:45:2C:0A:E7:52:49:EA:9E:F9:F2:FC:26:9E:5C:DE:91:5D:AF:A4
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 019A50E298993A418F28D413F778415EB67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:18 +0000
Manifest this update: Tue 04 Nov 2025 22:00:18 +0000
Manifest next update: Wed 05 Nov 2025 22:00:18 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: xF75xLcw8nA/VUsC8KH2QNnm481ACrcSfutyADud050=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:98:99:3a:41:8f:28:d4:13:f7:78:41:5e:b6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Nov 4 22:00:18 2025 GMT
Not After : Nov 5 22:00:18 2025 GMT
Subject: CN=25452c0ae75249ea9ef9f2fc269e5cde915dafa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:10:a9:97:13:bc:c4:fb:2c:78:98:e7:a3:
39:6e:93:45:2c:b2:68:09:4f:b5:bf:4c:e0:52:7c:
a1:c6:ca:50:e5:bf:27:41:0a:b5:95:18:a1:57:40:
4d:7f:98:af:50:a1:3d:ab:07:db:d6:b3:e0:2c:6b:
cb:5c:c0:18:9d:6a:c3:f0:e2:75:00:8b:00:e9:05:
72:5b:f8:4c:f6:a4:d0:f3:d3:88:60:e6:c6:f6:9f:
b0:fc:67:77:fd:bf:48:ca:79:cc:43:18:d3:46:d5:
6c:eb:5d:98:e6:4f:0d:fe:db:72:26:2c:2c:80:e4:
91:6f:64:15:97:ba:1e:dc:ea:06:a0:3e:e5:e2:7d:
d1:81:72:14:ae:bb:85:02:ac:93:70:99:c8:4c:4b:
c6:c9:73:78:3b:9f:6d:21:d5:aa:c1:02:36:84:d9:
1f:2f:1c:a3:2d:ad:87:81:c2:38:04:c3:88:29:d9:
cf:c1:ef:fb:08:21:6e:6b:82:68:33:1f:07:48:16:
6b:0b:dd:38:99:17:af:cd:e6:fd:2d:f5:45:1d:3e:
d7:8c:4c:37:12:d1:7f:da:7f:64:f1:73:e3:57:67:
29:f2:88:bb:16:64:60:aa:0c:ef:30:b0:82:29:e6:
ba:56:2c:1a:b1:72:50:60:fe:06:0f:19:17:ec:65:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:2C:0A:E7:52:49:EA:9E:F9:F2:FC:26:9E:5C:DE:91:5D:AF:A4
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5d:3f:90:f3:99:a1:31:d1:f6:c2:fa:c6:fc:46:f0:56:a0:
9a:84:e3:30:d9:75:10:0b:71:1f:2c:ff:08:c2:c8:c8:ef:c2:
2b:f9:11:3d:e1:09:c6:12:d7:4d:d2:5f:64:9c:8d:8f:d5:5c:
65:c9:ff:51:ef:b8:7e:1e:37:38:c5:d6:90:e4:5f:58:2d:2a:
c7:f5:bc:f6:43:40:43:ba:d8:bd:5e:ee:cb:f0:bb:be:68:b0:
de:d3:d9:eb:5f:85:cd:59:73:8f:8f:c7:90:3e:bd:ec:bb:c7:
ae:8c:1b:2e:6f:9d:c5:fc:34:19:a3:ba:40:f8:7e:ec:20:c3:
43:fa:db:28:38:b5:f9:6c:c9:30:9b:77:4a:8c:b6:98:c9:87:
4a:2a:80:0c:9e:79:dc:f7:3d:98:5f:68:cd:ce:e9:06:f5:48:
37:26:d3:b9:0c:28:5f:5f:47:15:5c:34:04:45:08:c6:dd:39:
48:a6:19:1d:0f:0e:32:65:57:55:e7:78:c0:a8:55:9a:68:1d:
39:94:9c:c9:37:7d:62:d3:af:87:02:19:85:0a:e7:9a:35:d0:
b5:e0:13:8d:52:e0:92:ff:ec:37:dc:3f:63:1c:da:54:2a:33:
73:b2:b6:0e:11:cb:8a:02:fa:e8:bf:15:dd:c4:c4:d6:76:9d:
31:51:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:51:44 2025 by rpki-client