Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: iJCM1ZuMUAv9BR+puTFHzeRUpVXTmAsdSLbclNJgpko=
Subject key identifier: 2B:F3:5A:3C:84:3F:11:1F:E7:4F:82:9B:EF:23:5B:CA:F5:43:0D:03
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 01985532AC36B02857676A280997C0ACA7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1367
Signing time: Tue 29 Jul 2025 08:00:40 +0000
Manifest this update: Tue 29 Jul 2025 08:00:40 +0000
Manifest next update: Wed 30 Jul 2025 08:00:40 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: hBQzuEfQh3vDFArDk25iBtO9QKr3GDlFc4+/2XSf7vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:ac:36:b0:28:57:67:6a:28:09:97:c0:ac:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jul 29 08:00:40 2025 GMT
Not After : Jul 30 08:00:40 2025 GMT
Subject: CN=2bf35a3c843f111fe74f829bef235bcaf5430d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:d1:f3:c3:de:81:c0:08:dd:78:8f:35:59:
b3:47:12:90:25:86:fc:26:a4:7d:92:d3:52:e3:e1:
63:8e:8f:b9:a1:96:d1:22:45:66:64:f4:32:9e:88:
17:c7:f6:11:6c:4b:9b:ac:7f:37:27:5e:9e:ee:8d:
6b:9b:1a:78:f7:21:b1:2c:e2:9d:b9:77:58:0f:2c:
9f:c6:c1:27:32:4d:b1:7a:2d:26:d5:78:c9:81:56:
6a:81:c1:bf:c2:b5:eb:7e:a5:23:c1:28:10:3a:1a:
3f:ec:57:a4:27:80:66:db:92:89:bf:16:4f:0b:01:
9b:0c:8f:df:11:b8:e4:21:b9:98:bb:0d:9d:0f:7d:
02:85:65:b0:2d:56:43:5a:bc:f2:b9:91:3c:ae:ab:
7b:78:17:03:d7:fb:9b:63:1d:10:9f:46:79:e6:cc:
cc:4f:73:28:7d:04:9b:7e:66:62:72:da:01:47:8b:
7c:3c:b8:5e:ed:7b:78:7e:83:d5:2b:21:eb:ef:a5:
ce:98:51:d7:d8:b1:0b:75:25:d1:6c:00:cf:83:a1:
13:36:08:5c:78:e0:9e:15:5b:00:3a:67:ad:a5:3f:
cd:88:53:0d:db:7b:77:41:e2:c7:77:4a:a9:23:da:
a7:79:80:9a:69:37:bb:1d:5e:56:c2:9d:7a:63:2a:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:5A:3C:84:3F:11:1F:E7:4F:82:9B:EF:23:5B:CA:F5:43:0D:03
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2e:db:0d:09:75:22:0f:6b:a8:3d:2f:ab:9c:01:57:d2:6f:
6b:ae:1a:4c:a4:1d:ac:94:b6:ca:b6:62:36:de:67:1c:48:fd:
7e:43:b3:96:b7:27:77:f6:7d:69:62:cc:4d:8c:0e:37:24:13:
ef:72:dc:ce:a6:f2:94:50:8e:a9:d5:ef:19:f0:11:c8:f2:54:
76:0d:ca:e0:ed:31:ee:85:33:c3:6b:aa:75:e0:0f:f2:3e:32:
43:02:b0:92:17:d2:27:53:84:7e:f0:0a:9c:c5:b2:43:f9:cf:
8c:7d:81:27:db:20:68:d9:61:63:12:69:05:eb:44:eb:0d:93:
76:27:67:db:73:70:2f:82:54:e7:bf:6c:bf:00:95:b0:da:75:
8e:c4:00:6c:8e:5d:1b:96:43:b5:4a:44:fc:e0:ae:14:a1:31:
b7:55:70:dd:52:81:66:03:3b:29:b2:e5:3e:2a:de:f0:6a:c6:
d4:5a:4c:ae:ee:9b:47:f7:35:a3:d1:2b:a0:6d:ed:42:b3:39:
c1:63:8a:8f:29:6a:30:9c:dd:1b:27:a3:3b:55:e1:20:35:84:
75:e3:52:6d:e3:64:c6:9b:c5:47:e6:98:b0:bf:73:d0:78:7c:
3e:1b:10:64:79:2a:31:1c:ff:ce:d7:ef:02:5d:01:42:28:ab:
f7:a1:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:18 2025 by rpki-client