Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: vZujdvdSEmuFa2EtnkiejbnxXQmZ6Gvys4i72L45tt8=
Subject key identifier: D5:01:7F:34:18:82:8A:42:E5:AB:A3:BB:58:14:35:3D:15:B6:E8:1F
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 0199FBEC0BDECFA9AA405F2B15EF17403D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: eIfIpT/0FBTaUfeJ3JPq8flDZtFp3zpqx5PBjCkVa1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0b:de:cf:a9:aa:40:5f:2b:15:ef:17:40:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=d5017f3418828a42e5aba3bb5814353d15b6e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:f5:92:1d:4c:55:e1:d5:a9:38:e1:c1:57:
16:d2:da:a5:58:45:b6:19:a0:34:75:41:58:20:a9:
24:63:6e:a8:89:e3:1c:27:c2:9c:fa:35:9a:a4:c3:
da:0c:de:14:fb:f7:4c:14:92:1d:a7:7b:fd:d3:0d:
e1:65:93:88:df:2d:fe:de:4a:33:20:a6:68:83:ab:
c5:34:85:6b:e3:0a:96:1d:8b:16:2a:62:7b:4b:b1:
26:bb:f3:7e:38:a8:4a:a4:18:ef:7e:78:ea:91:cd:
af:2d:90:d3:78:56:32:92:62:db:3f:43:96:ef:83:
e9:ce:8f:1b:95:8b:50:9b:06:e4:16:8f:32:8d:66:
e3:f0:54:2c:ce:e8:af:2b:b1:22:ee:da:23:92:9a:
63:b4:0b:d8:07:ee:f6:a8:32:4b:45:6c:9a:14:c2:
7f:f4:ca:8e:58:9c:f8:74:dd:31:54:6b:3e:18:b3:
1d:6f:5b:3b:4b:c5:b9:00:51:a4:3f:45:ec:ac:7d:
2e:ce:2e:2f:a5:6c:18:32:e2:89:56:10:76:b4:94:
2b:ca:8e:0f:6b:ca:db:c4:f9:23:c4:bc:70:d2:02:
6f:9f:42:bf:d5:7f:24:0d:c0:22:72:52:42:6f:6d:
42:9b:85:9e:0f:aa:c4:fd:f3:2e:39:fb:3a:c4:21:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:01:7F:34:18:82:8A:42:E5:AB:A3:BB:58:14:35:3D:15:B6:E8:1F
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c2:ed:9f:8b:57:ee:5d:9c:ac:91:50:89:a8:9c:a7:1a:b2:
69:86:02:d4:7d:9d:73:80:61:50:df:9b:37:63:bf:de:96:90:
08:3c:03:26:53:1f:5a:b4:5f:1a:9f:e0:1b:9d:b2:49:f3:96:
98:37:32:d6:7b:a5:04:de:f2:b5:46:b9:86:61:c8:3d:d6:75:
ed:be:6a:b5:c6:13:b4:e7:e2:d1:37:dc:f4:7a:87:c0:04:9a:
5b:e1:b0:24:09:fe:13:ad:6f:1b:8f:60:8b:85:40:25:a1:47:
27:d4:13:e8:a5:62:19:fb:19:a3:12:ae:cc:cf:3d:86:33:ed:
d5:63:bc:5b:71:12:c8:78:18:7e:cc:46:1f:77:14:21:dd:23:
99:35:24:f3:d1:0d:73:3c:2c:61:df:2b:5d:cb:6e:f4:d1:c0:
75:dd:dd:6c:19:9b:51:cf:88:a6:4d:3e:22:c0:6a:c1:b2:01:
d8:4e:53:29:a7:3b:d2:76:37:8b:32:9b:9d:b0:23:9f:f0:05:
08:7c:52:d8:d6:d4:11:0e:af:57:0b:10:e2:df:a3:e9:38:51:
01:9c:ca:02:77:fa:d4:40:5e:83:66:6d:7a:3d:4c:1c:94:8a:
1e:77:2e:49:0a:c9:89:34:af:14:06:ee:5f:ec:fe:72:04:dd:
d1:af:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:40 2025 by rpki-client