Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: N84xdRFoaBhw5cfb1J8yNqJ0BViHpXvUDjelCWYs5XA=
Subject key identifier: B9:9E:EF:B9:33:7F:00:35:B5:12:DF:BC:4C:31:90:F1:23:43:37:D8
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 0198D473DBA4CD09546E1F83708BBB59EC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: xinMR7bmZkzW9RuoPHsuJK0QuErWSVHvRNsjYOvGqP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:db:a4:cd:09:54:6e:1f:83:70:8b:bb:59:ec:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=b99eefb9337f0035b512dfbc4c3190f1234337d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:7c:2b:07:43:b9:64:19:04:bb:66:ef:07:
70:ea:04:01:5b:43:aa:46:a9:2f:da:03:0f:2b:b9:
8f:14:95:5e:09:34:9b:77:f4:56:73:e3:47:d8:e9:
92:27:18:08:7b:ae:57:82:3c:e1:20:8e:59:31:83:
30:c1:5c:8e:0d:e0:8c:f0:71:63:b6:f4:04:46:fb:
cf:7e:06:4f:d9:58:ba:d4:c2:cb:88:8c:4a:02:a4:
7c:86:88:01:43:32:f9:b9:da:7f:1c:eb:ef:55:bd:
ea:f5:2b:34:d6:57:da:f6:b1:7b:39:33:0e:64:46:
cb:56:ae:e8:f2:23:43:2a:c1:87:d3:ab:bc:d9:6c:
35:38:b9:a4:18:eb:d2:3e:07:7b:37:5e:e4:d7:fb:
fc:0e:3f:92:33:55:38:cd:8e:1a:27:7e:bb:f6:9e:
5a:0b:ac:a9:d2:99:0c:75:93:2d:c2:36:52:26:a7:
02:6e:25:06:ea:40:61:dd:3c:7e:dd:97:58:ff:4e:
71:1f:b4:73:2d:7a:32:01:13:b6:7b:6a:24:45:50:
df:a1:dd:77:a0:57:93:f7:21:c6:3d:2d:ee:da:20:
6c:59:50:72:2f:1a:b5:dd:a5:ca:50:90:94:2e:8e:
d3:03:07:ed:5f:3b:36:3f:a8:91:7e:37:f2:eb:63:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:EF:B9:33:7F:00:35:B5:12:DF:BC:4C:31:90:F1:23:43:37:D8
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ef:97:b7:ee:41:f7:4f:2d:2b:64:aa:87:f0:fc:ef:29:2d:
34:77:a2:23:25:07:4a:f4:24:8d:ca:95:c8:ea:84:b0:2f:a2:
0f:94:22:8d:de:85:73:20:d5:73:e9:0c:93:e7:5e:3e:55:50:
a0:11:7f:ac:c2:64:0e:8e:42:d5:72:db:cc:2f:4d:8f:68:e0:
89:20:ee:c3:8f:5d:5b:4a:f0:74:4e:2a:7f:f2:46:bd:49:5e:
48:10:64:af:bc:52:8a:27:ba:88:e7:eb:c1:83:33:82:5e:49:
61:a4:a9:f1:ec:90:e0:fc:10:ec:9e:4e:cc:f3:eb:bb:2b:dd:
63:b5:fc:b0:a4:3f:46:d3:22:74:4e:36:9f:31:ae:73:b9:4f:
1b:72:c0:59:d2:5c:a7:ba:b4:20:5b:9d:76:63:8c:5d:e4:ab:
eb:44:ca:5f:56:a1:fd:df:0f:e8:06:b7:e3:0c:bf:4b:f4:95:
87:fc:8d:d1:c9:b0:76:38:ed:55:4f:e3:1e:a5:a2:10:71:95:
d1:2a:85:50:9a:be:d3:ad:e5:54:30:4f:34:5d:cd:05:86:ed:
66:7e:18:27:11:3a:6b:0c:15:73:fe:4d:6b:62:a4:de:77:45:
61:5b:58:af:83:8f:81:66:b7:d8:c6:55:7c:31:67:e4:75:1b:
4a:7e:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:25 2025 by rpki-client