Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: E5DwCmMM7yqDmtrtvlV1yOB9VXiPGiGJKTTOlv8SrPY=
Subject key identifier: CB:D6:58:73:F6:D4:63:44:62:2B:58:69:ED:BB:37:0B:2C:14:9C:A2
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 019748C30FDDCBE67485A0284803722629AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 12DC
Signing time: Sat 07 Jun 2025 05:00:32 +0000
Manifest this update: Sat 07 Jun 2025 05:00:32 +0000
Manifest next update: Sun 08 Jun 2025 05:00:32 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: XArcBEOHgi1boiY/mgejE3/xkCdK4lilFJivSICeX00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:0f:dd:cb:e6:74:85:a0:28:48:03:72:26:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Jun 7 05:00:32 2025 GMT
Not After : Jun 8 05:00:32 2025 GMT
Subject: CN=cbd65873f6d46344622b5869edbb370b2c149ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:56:9c:fc:a6:58:76:e5:f7:a1:18:5f:bb:
ae:0d:41:53:a2:11:12:7c:3d:17:4b:d4:4e:b1:22:
11:9a:92:5e:e1:54:1d:5e:cc:b0:38:6f:36:8c:af:
99:ae:83:fb:b4:f7:57:ef:3e:4a:56:77:d8:24:9c:
69:a7:17:ef:c5:12:7f:15:d3:9d:8c:9c:f5:31:7d:
86:7f:24:88:39:76:1f:72:02:74:e8:1c:ad:93:9e:
b2:a0:5a:a5:a7:80:d8:13:94:79:f5:2a:c0:2c:fb:
ab:56:f6:98:a4:6d:4c:75:66:ba:2a:2e:55:c5:d1:
29:8b:37:ea:19:20:21:9f:03:54:ac:7a:64:5c:a8:
14:5f:00:48:40:23:ea:e3:f8:21:31:b1:33:9c:12:
4e:ac:f8:8d:49:ae:ec:8a:7d:ac:a4:7b:f5:48:32:
15:ed:57:bb:d1:60:20:07:65:96:b0:15:06:5d:c5:
1c:23:c9:62:a4:50:23:9d:78:b2:3f:54:e5:20:fa:
cc:e8:55:40:6f:b9:f9:4c:68:08:e9:b5:0a:59:31:
5c:9e:6d:39:1a:7d:e9:5e:ef:18:f5:67:f2:c0:64:
b8:e9:42:96:7c:03:aa:de:71:04:d3:b7:6f:50:4e:
f0:e1:d2:e2:ed:ad:9a:63:77:71:50:ab:75:d2:cd:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:58:73:F6:D4:63:44:62:2B:58:69:ED:BB:37:0B:2C:14:9C:A2
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:c1:12:f3:26:65:13:0f:b7:b9:53:cb:bf:8c:88:b6:30:
11:c6:d5:26:0a:0b:ee:d0:fd:2b:70:27:97:c1:30:ff:d3:1a:
f6:40:5b:bf:75:9b:47:31:56:b9:52:1b:7f:93:1e:fd:3c:08:
2d:b7:bc:7b:94:d6:1f:ee:71:97:dd:b0:2a:81:b2:95:62:2a:
ce:12:e0:cf:4b:fe:7f:db:ec:f3:81:c0:1e:d3:c4:a8:10:0f:
60:fb:8d:6f:71:87:c4:50:52:cc:5d:22:74:67:38:bf:fc:f3:
f0:95:4e:b2:69:ab:0f:c2:fa:86:dd:7c:71:52:b7:0f:69:3a:
67:1e:56:9a:27:2e:06:ab:6b:b7:73:04:45:96:4e:3f:39:dd:
96:64:c6:e3:e4:95:a3:50:41:58:30:31:85:48:53:33:9c:fd:
e7:11:03:ee:08:1b:ec:6e:ae:5e:f5:5a:e1:a7:5a:83:d0:30:
cd:57:11:77:68:d3:e9:00:30:d9:78:79:13:63:fa:40:17:c1:
d8:e5:56:9d:bf:e7:0a:cd:27:7b:cd:c5:bf:38:0d:0b:4f:77:
81:82:f5:fb:49:5a:58:c4:4c:1c:c4:9d:c4:92:03:ea:83:04:
1d:28:6a:3f:39:5f:b1:76:72:95:7c:44:ff:3a:63:1e:a7:14:
d5:96:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:16 2025 by rpki-client