Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: ckZEpALmZGQsagVyoWG3T8cP6n2MTNMAJ/BKv5jWNOM=
Subject key identifier: EF:7F:F3:28:C2:42:4C:D8:13:C4:D0:1A:29:73:9C:F1:2B:09:9F:68
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 0199FB459BE2F7E3EA33E3B3FCD766E635F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0B4D
Signing time: Sun 19 Oct 2025 07:01:07 +0000
Manifest this update: Sun 19 Oct 2025 07:01:07 +0000
Manifest next update: Mon 20 Oct 2025 07:01:07 +0000
Files and hashes: 1: 67T4HBu1pG9u9uC3z_qV_yWI8m8.roa (hash: EFwv6mLYMzp3bgNxL88piWuR3/pmV9TsB1QPsdp3Sjg=)
2: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: 0+M0T+NY4DnXvRIEE/U14rShRdK5fjXxEtFd4Z1uOQ4=)
3: TFll5ENpjCR3fFAI_0E-ikt6_GM.roa (hash: cdCSDqZSpIOGUxCTSX+KjodpOB497W7vlYLMjlGxydw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:9b:e2:f7:e3:ea:33:e3:b3:fc:d7:66:e6:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Oct 19 07:01:07 2025 GMT
Not After : Oct 20 07:01:07 2025 GMT
Subject: CN=ef7ff328c2424cd813c4d01a29739cf12b099f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:c5:26:be:e8:a1:fe:ca:2f:68:26:9b:aa:
aa:66:98:a5:22:8c:0f:26:cb:cd:57:bf:cb:83:b0:
e9:9e:d6:cc:b8:ad:13:81:51:f6:a9:3e:23:4a:7d:
02:a0:20:b0:75:23:ae:ff:22:75:37:2a:0e:7b:6e:
72:82:d2:ec:2c:50:09:29:88:6e:8a:1c:ad:70:48:
ff:54:51:19:ca:77:99:2e:26:74:99:94:91:9d:fb:
e0:98:0c:be:ac:5d:92:fc:e0:33:58:5b:47:bb:65:
6d:88:2f:85:c5:c8:b1:11:4f:44:af:0b:cc:d0:26:
b7:64:6c:ac:b7:0f:dd:0e:e2:b8:2f:4b:08:ca:4b:
e7:5f:6e:85:86:9e:6a:03:2c:51:b7:e5:0b:ab:13:
89:ca:1d:92:e0:af:ce:ff:22:b2:c5:d7:19:8a:c2:
8d:09:4c:e9:0c:3a:71:3e:2a:fb:a8:e6:fd:da:6f:
c1:32:ee:02:e6:d3:ef:95:a7:38:e2:99:8a:f3:83:
85:2c:e2:d7:1f:a9:24:86:4a:23:0e:79:e1:0c:00:
76:cc:b0:2f:52:c0:47:0a:12:b9:69:2f:f7:85:9a:
f3:f2:a0:bc:18:9c:c9:f0:48:23:01:4c:66:b3:45:
c9:1d:ae:f6:02:93:97:d2:65:f0:c5:b3:8e:d0:35:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:F3:28:C2:42:4C:D8:13:C4:D0:1A:29:73:9C:F1:2B:09:9F:68
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a4:ab:a4:1d:42:f3:ff:e8:89:d7:e2:6e:eb:ff:02:d6:e1:
de:b2:68:54:10:7b:45:44:56:00:6c:3f:8f:28:f1:11:1e:98:
97:c3:67:6d:9c:fa:e7:6b:42:11:b0:4e:7d:b8:06:90:91:1b:
53:ea:d8:9c:ff:47:75:6e:00:2e:90:d8:2e:43:eb:39:4b:9d:
e6:7e:0f:aa:3e:d7:e0:10:a4:25:2f:95:58:1d:74:15:84:45:
e1:b8:3d:8d:3c:f2:d0:11:0f:f6:83:1e:78:d3:63:7d:ef:ab:
10:99:e4:f9:b9:57:b3:b3:df:c9:5d:b4:a3:b4:ab:06:d0:83:
5c:b9:1b:2a:77:d0:93:b2:96:64:84:47:0c:16:92:a8:f0:99:
56:ee:f4:4c:cb:85:63:f0:12:03:c8:09:43:c7:69:d5:7d:1e:
72:0e:56:10:66:4c:30:50:c8:99:f8:f9:62:eb:e6:ae:a8:98:
78:5e:43:72:46:64:e2:32:e3:18:4a:7d:73:fa:fb:67:19:c0:
2e:9c:19:20:1b:bc:4e:69:ed:86:93:8d:00:a3:c0:23:ca:7b:
c1:72:d6:f7:5c:9c:4f:7f:d6:c5:06:73:7a:0a:72:6a:12:9f:
e8:80:ba:98:46:ac:ac:bc:88:11:ee:4d:a3:8e:a8:e0:8d:6f:
35:07:65:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RZvi9+PqM+Oz/Ndm5jX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzQ3NDk0ZmY0ZTI2NTc4ZDlkZWFiZTJlZTZkMDA0YjNm
ZTJkOGMwHhcNMjUxMDE5MDcwMTA3WhcNMjUxMDIwMDcwMTA3WjAzMTEwLwYDVQQD
EyhlZjdmZjMyOGMyNDI0Y2Q4MTNjNGQwMWEyOTczOWNmMTJiMDk5ZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P7FJr7oof7KL2gmm6qqZpilIowP
JsvNV7/Lg7DpntbMuK0TgVH2qT4jSn0CoCCwdSOu/yJ1NyoOe25ygtLsLFAJKYhu
ihytcEj/VFEZyneZLiZ0mZSRnfvgmAy+rF2S/OAzWFtHu2VtiC+FxcixEU9ErwvM
0Ca3ZGystw/dDuK4L0sIykvnX26Fhp5qAyxRt+ULqxOJyh2S4K/O/yKyxdcZisKN
CUzpDDpxPir7qOb92m/BMu4C5tPvlac44pmK84OFLOLXH6kkhkojDnnhDAB2zLAv
UsBHChK5aS/3hZrz8qC8GJzJ8EgjAUxms0XJHa72ApOX0mXwxbOO0DX8sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9/8yjCQkzYE8TQGilznPErCZ9oMB8GA1UdIwQY
MBaAFDB0dJT/TiZXjZ3qvi7m0ASz/i2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQt
Mzg5YTMwOThlYzJhLzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQtMzg5YTMwOThlYzJh
LzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6SrpB1C
8//oidfibuv/Atbh3rJoVBB7RURWAGw/jyjxER6Yl8NnbZz652tCEbBOfbgGkJEb
U+rYnP9HdW4ALpDYLkPrOUud5n4Pqj7X4BCkJS+VWB10FYRF4bg9jTzy0BEP9oMe
eNNjfe+rEJnk+blXs7PfyV20o7SrBtCDXLkbKnfQk7KWZIRHDBaSqPCZVu70TMuF
Y/ASA8gJQ8dp1X0ecg5WEGZMMFDImfj5YuvmrqiYeF5DckZk4jLjGEp9c/r7ZxnA
LpwZIBu8TmnthpONAKPAI8p7wXLW91ycT3/WxQZzegpyahKf6IC6mEasrLyIEe5N
o46o4I1vNQdlcQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:33 2025 by rpki-client