Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: VCd+iYZ8LK6Ieaulf1jel406PXSfYoG426eHceUVs8U=
Subject key identifier: 93:21:58:A6:A1:B2:AE:3D:AE:64:A6:CE:66:CF:E1:AF:FD:A8:AF:FF
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019A24AEB36BAF236A5CFE4AF419B4EA0FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1457
Signing time: Mon 27 Oct 2025 08:00:20 +0000
Manifest this update: Mon 27 Oct 2025 08:00:20 +0000
Manifest next update: Tue 28 Oct 2025 08:00:20 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: jsgoQNYFvX6ey7y3ftW0ZVS+eXQch46Yf+rqmriozqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:b3:6b:af:23:6a:5c:fe:4a:f4:19:b4:ea:0f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Oct 27 08:00:20 2025 GMT
Not After : Oct 28 08:00:20 2025 GMT
Subject: CN=932158a6a1b2ae3dae64a6ce66cfe1affda8afff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:b6:ef:80:53:51:e5:9b:ae:8f:8a:3b:cc:
39:04:9a:04:44:98:ff:d6:a2:0e:ec:d5:7c:90:7d:
05:0b:24:5c:50:cf:06:68:a8:ba:3c:a5:fb:01:32:
b6:3a:14:db:3c:7b:be:94:96:74:e0:4d:92:f2:bd:
b2:58:f6:6c:ef:78:b6:e9:60:70:a9:55:9f:0d:2a:
3a:e0:10:92:90:89:78:5b:20:db:f0:3b:0f:57:05:
a5:8d:41:08:40:6e:48:e2:31:2f:03:e8:79:61:2b:
9c:70:0a:82:9b:3f:e6:6a:d8:51:27:7c:71:f4:62:
dd:a8:15:86:39:bd:b2:c5:a5:3e:42:ca:cc:0f:0e:
2a:f5:9a:f6:bc:30:9b:f9:9c:bf:51:8f:4d:51:cd:
0e:83:d1:ea:f4:ce:f0:80:db:d6:8f:96:69:48:b9:
ae:5b:4c:a5:ea:aa:3a:a1:15:43:0a:3d:53:8b:f3:
23:66:c9:95:8f:cc:fa:d8:1b:f9:4a:6d:eb:ed:7d:
16:9b:ca:75:6a:7c:6f:c9:b8:e3:1f:49:e2:23:ea:
a3:de:60:c2:a5:63:f7:a0:09:d3:e1:fa:e5:e6:ea:
76:8d:b3:aa:40:78:96:ec:36:59:98:c4:be:dd:44:
dd:bf:f4:83:13:fc:73:d4:13:ce:6b:a5:e1:61:fe:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:21:58:A6:A1:B2:AE:3D:AE:64:A6:CE:66:CF:E1:AF:FD:A8:AF:FF
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:39:a9:73:06:a8:8f:8a:39:d0:31:ca:29:8d:f9:ea:74:
c7:03:48:c0:2b:77:30:28:6f:4b:b9:cc:91:93:a5:c3:cb:55:
7a:0f:8a:bc:db:33:18:ac:ef:ea:37:0b:b0:45:e9:19:7f:84:
37:74:21:81:33:aa:93:58:32:f7:e0:52:49:cd:4e:9f:f9:7a:
7b:06:c8:f8:3b:d6:b0:98:a6:fa:a7:ce:6e:ff:93:13:e6:6d:
26:23:f7:5c:ff:65:be:09:3c:91:71:37:e3:db:26:ba:8e:99:
ff:c4:75:63:05:26:d6:a5:ff:df:ef:52:01:6f:01:fd:af:2f:
d3:79:a6:f6:ed:83:f8:25:e5:5e:63:8c:35:f5:d7:e8:83:c3:
6e:d0:8a:3f:dc:8d:a6:b5:c4:ad:13:6f:17:9e:17:b1:eb:9b:
e0:d4:85:db:36:6e:ef:28:28:91:f6:e6:e4:c5:20:6f:0b:5a:
e0:56:8f:9e:4a:7c:11:c9:35:a6:2c:f0:32:dd:5d:4c:68:9c:
a7:1e:44:a4:4d:86:3f:61:cc:37:50:d2:8f:fb:87:de:d4:17:
b0:51:1b:d5:1f:aa:ca:8b:e5:39:89:2e:43:00:2c:dd:9c:9c:
de:45:36:be:73:3f:a1:96:45:09:cf:85:3d:e4:b9:41:be:a9:
6b:b7:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:51:03 2025 by rpki-client