Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: tt8QB6fNCp/aTO3MU4bx/q97za5L2ehDK+c8cLmjj0g=
Subject key identifier: 25:14:8E:06:FF:3A:E5:F1:E4:EC:38:B8:41:EC:8B:BC:2B:D9:4B:85
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 0197B6A100789769724B96A79E8827468243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: l2gd58k+PkGNyj6AvgiMsjwtR1yjv2825YhbeKh1mX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:00:78:97:69:72:4b:96:a7:9e:88:27:46:82:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=25148e06ff3ae5f1e4ec38b841ec8bbc2bd94b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:bd:93:5c:fc:4f:6a:5c:c8:31:d9:aa:1f:
40:33:73:1d:fa:d5:49:93:11:6f:27:7a:bd:a2:1a:
a7:bb:2e:be:36:a9:55:54:d4:86:c7:9d:4d:44:78:
5b:37:3e:b2:a7:42:63:13:09:ec:0c:07:dc:ed:43:
24:89:7a:8a:7f:aa:3b:dd:a6:41:f8:4e:13:80:12:
84:2c:68:c2:7e:4c:80:5b:e0:77:d0:32:52:b0:c7:
ba:7c:ff:fa:e0:56:59:e6:72:f7:c6:de:3f:a4:a9:
9e:36:e7:8c:e6:dc:40:5c:79:84:c6:ac:ef:f3:32:
21:ef:25:75:1a:cc:1a:45:12:a4:d6:bc:f5:86:2c:
b6:ca:80:af:6c:7f:4c:7f:33:f7:57:39:9f:87:27:
ff:a6:ca:ad:34:13:7a:5c:83:36:4e:11:05:bc:2c:
c7:07:4d:c6:7d:55:04:b4:da:0a:9c:51:61:e4:a6:
06:0f:44:fc:f7:5a:d1:c3:63:96:c0:c4:d3:9a:6b:
cd:ce:d1:c7:be:6e:a4:c2:29:68:5b:ca:46:1b:16:
47:75:75:28:76:98:b8:e5:4e:30:fd:a8:15:87:7f:
60:c0:2b:1c:44:b7:1a:30:4c:16:b2:11:d7:06:e4:
b0:fd:5e:a8:81:6d:0e:ab:a3:32:8c:d6:94:48:2e:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:8E:06:FF:3A:E5:F1:E4:EC:38:B8:41:EC:8B:BC:2B:D9:4B:85
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:51:d5:a4:3c:27:30:44:10:ab:dc:27:94:64:8c:f8:3e:34:
11:5c:e4:10:21:f8:ea:26:fc:6a:c0:59:f8:5d:36:08:6a:ee:
08:35:e5:ee:65:ba:5d:6b:bb:8e:69:ed:03:44:f5:17:b7:d3:
7e:d2:ce:8c:76:fb:09:a3:ec:c3:f1:4a:11:7d:1a:ba:e8:cc:
ba:88:ce:6f:3f:2d:c6:1c:ea:c2:0a:2e:64:b2:84:70:10:79:
3e:2f:0e:ad:71:ef:38:e3:df:d2:d9:5f:c1:78:6c:e4:f3:22:
91:53:c3:c4:14:e8:4a:b5:76:db:05:ba:a4:34:55:9c:a9:1a:
12:f6:71:04:50:5e:69:00:e1:a1:5c:6c:3e:f7:48:80:75:d1:
74:8f:40:b0:23:b3:bd:8f:c7:8b:a6:75:10:01:00:a5:c9:94:
2e:d3:03:c1:d3:b8:5d:a6:39:de:30:a6:84:ba:6d:f6:8e:00:
ba:b9:3d:4d:e9:10:62:40:73:09:a0:ce:8b:14:50:7e:09:a6:
30:d6:15:a9:ca:89:9e:fc:4a:e1:84:0a:08:27:bb:c1:a1:40:
06:2b:ce:ba:a4:32:e6:e1:2d:b5:54:2a:ba:ac:e4:2c:9a:19:
74:93:7e:38:47:67:87:a4:f1:85:ac:22:47:3c:50:ba:67:1c:
4f:eb:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:46 2025 by rpki-client