Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
File: mHKOiifTDIOu5fSWJAmF7kDLN4s.mft (raw, json)
Hash identifier: yfO1rJ1bkFNrtkF6LGeZVH/J5EBIVK27uDz0hB2TZ2g=
Subject key identifier: A5:DE:28:46:5B:42:00:51:91:09:36:E0:A7:B1:F0:4E:6C:63:31:37
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 01974A7B67BE91F5FA7C0D3C84421BD1FDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 13:01:30 +0000
Manifest this update: Sat 07 Jun 2025 13:01:30 +0000
Manifest next update: Sun 08 Jun 2025 13:01:30 +0000
Files and hashes: 1: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (hash: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=)
2: YQBMItgYzXgvtsJZr9Y-cbi0JwI.roa (hash: AkAfo5mQ4fkk6X0GxvhEwCam5E0S5qDCnTw0oq+a9Dk=)
3: mHKOiifTDIOu5fSWJAmF7kDLN4s.crl (hash: /4f0TKNIHl+etXei4o/M2IIltK+1o77lseyFZgxDu9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:67:be:91:f5:fa:7c:0d:3c:84:42:1b:d1:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Jun 7 13:01:30 2025 GMT
Not After : Jun 8 13:01:30 2025 GMT
Subject: CN=a5de28465b420051910936e0a7b1f04e6c633137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:e0:06:a1:c7:4b:58:73:ab:f2:dc:e7:70:
c3:86:d8:87:16:54:87:b6:b4:f4:c3:5f:d8:f1:bf:
67:87:3d:80:41:89:ec:e5:4e:fb:57:ff:26:6e:98:
fc:90:ba:de:85:b5:ad:68:e5:2b:f1:c3:a4:62:b5:
bf:a4:cf:75:07:12:44:e2:64:96:fc:57:ac:00:8f:
77:84:8d:11:af:46:f1:7e:6a:4b:ca:c4:29:71:27:
14:94:ed:00:f5:41:ac:ee:eb:51:43:0c:b4:40:e4:
37:f3:ec:63:98:4b:e8:62:50:7f:a6:7a:fc:0a:94:
27:eb:3a:1c:bb:f4:93:1a:e9:79:fd:69:22:cb:68:
c9:5e:8e:86:27:57:7c:f5:6b:d5:e9:f0:99:aa:79:
bc:33:cd:f4:da:3c:78:3e:7f:b1:13:3f:a6:2b:03:
03:dc:ef:34:e9:2f:5b:89:be:eb:f1:bc:67:2c:d6:
03:ad:d7:8f:35:49:2e:d3:b6:3b:13:b9:a1:80:47:
65:58:32:6c:7d:01:47:ca:94:75:0e:29:b9:99:c4:
a3:70:40:9c:34:26:eb:c7:0d:b4:ff:79:cc:d9:82:
1b:9e:ab:ab:a2:b0:e8:23:81:78:b7:d3:56:32:45:
21:4a:08:82:57:67:2e:f7:92:f0:1a:14:2f:b4:44:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:28:46:5B:42:00:51:91:09:36:E0:A7:B1:F0:4E:6C:63:31:37
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:72:90:ad:58:0f:55:a0:b6:57:7b:e7:d1:88:15:17:52:
79:36:a1:48:53:44:f0:8d:7f:9f:db:a0:0d:b2:60:76:8d:b4:
d6:a5:0d:43:99:36:38:fb:d6:0f:3f:ba:f5:c5:f3:81:c0:e8:
f9:b7:47:70:5f:3f:90:8c:d6:61:76:c8:87:6c:ba:ed:e5:f0:
d1:17:70:bc:c2:f9:8f:f8:60:18:9e:86:d8:be:2b:84:33:76:
eb:70:7b:08:d6:b6:37:0a:d1:38:2a:71:73:6c:5d:c4:14:55:
77:c0:22:12:3f:8a:fb:87:04:5f:18:27:ad:e8:87:29:10:0f:
01:4d:ea:82:18:2a:90:9f:48:8b:07:95:60:74:98:03:e2:78:
66:ef:cb:a1:0e:ec:65:5a:3b:c8:2a:8e:62:69:32:0f:8c:e0:
12:18:e0:73:08:c4:38:4d:77:cf:93:a2:20:3c:77:1f:49:3c:
70:7f:51:da:a3:8b:bd:06:1f:97:4b:d5:b6:6c:d8:ff:ff:5c:
81:a3:a0:d3:27:71:04:d3:8d:ef:3e:2a:63:ec:36:13:a2:91:
09:e7:8f:9f:db:99:c1:87:92:8c:45:88:3f:21:06:a5:14:21:
5f:21:08:e3:60:2f:fb:63:b5:c2:fc:8b:a7:0f:cc:9c:bc:d8:
c9:43:c4:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe2e+kfX6fA08hEIb0f2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzI4ZThhMjdkMzBjODNhZWU1ZjQ5NjI0MDk4NWVlNDBj
YjM3OGIwHhcNMjUwNjA3MTMwMTMwWhcNMjUwNjA4MTMwMTMwWjAzMTEwLwYDVQQD
EyhhNWRlMjg0NjViNDIwMDUxOTEwOTM2ZTBhN2IxZjA0ZTZjNjMzMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+fgBqHHS1hzq/Lc53DDhtiHFlSH
trT0w1/Y8b9nhz2AQYns5U77V/8mbpj8kLrehbWtaOUr8cOkYrW/pM91BxJE4mSW
/FesAI93hI0Rr0bxfmpLysQpcScUlO0A9UGs7utRQwy0QOQ38+xjmEvoYlB/pnr8
CpQn6zocu/STGul5/Wkiy2jJXo6GJ1d89WvV6fCZqnm8M8302jx4Pn+xEz+mKwMD
3O806S9bib7r8bxnLNYDrdePNUku07Y7E7mhgEdlWDJsfQFHypR1Dim5mcSjcECc
NCbrxw20/3nM2YIbnqurorDoI4F4t9NWMkUhSgiCV2cu95LwGhQvtEQ9IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXeKEZbQgBRkQk24Kex8E5sYzE3MB8GA1UdIwQY
MBaAFJhyjoon0wyDruX0liQJhe5AyzeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjkt
YTI0ZTNhMGEzMWVmLzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wM2NhMjMtYTE0My00ZGYwLWFmYjktYTI0ZTNhMGEzMWVm
LzEvbUhLT2lpZlRESU91NWZTV0pBbUY3a0RMTjRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3tykK1Y
D1Wgtld759GIFRdSeTahSFNE8I1/n9ugDbJgdo201qUNQ5k2OPvWDz+69cXzgcDo
+bdHcF8/kIzWYXbIh2y67eXw0RdwvML5j/hgGJ6G2L4rhDN263B7CNa2NwrROCpx
c2xdxBRVd8AiEj+K+4cEXxgnreiHKRAPAU3qghgqkJ9IiweVYHSYA+J4Zu/LoQ7s
ZVo7yCqOYmkyD4zgEhjgcwjEOE13z5OiIDx3H0k8cH9R2qOLvQYfl0vVtmzY//9c
gaOg0ydxBNON7z4qY+w2E6KRCeePn9uZwYeSjEWIPyEGpRQhXyEI42Av+2O1wvyL
pw/MnLzYyUPELA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:46 2025 by rpki-client