Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json)
Hash identifier: AwWaSz5S+TTkjdKVtwFkntH2cc1GFkJBbX+VSxwLNEo=
Subject key identifier: ED:EF:09:71:BA:A2:A0:B0:AC:32:17:A8:E6:FB:AF:3E:5F:0A:3F:62
Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Certificate serial: 0199FBEB3EB6C408BDFA5F94B75A4FF3546E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
Manifest number: 138A
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: Sj9Ra2auH64Ah23bvSWjhe5BfbOE7Odr9kGo6CO+QVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3e:b6:c4:08:bd:fa:5f:94:b7:5a:4f:f3:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=edef0971baa2a0b0ac3217a8e6fbaf3e5f0a3f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:38:1e:b6:8c:89:4e:fc:c5:c1:b2:12:1e:
0d:70:59:67:e4:dd:af:36:d5:04:2d:e9:b6:ac:00:
e8:ee:ad:40:0f:0e:d9:b2:42:86:9e:2b:9c:10:a8:
1a:62:fd:db:e6:05:73:45:f1:a2:01:1b:3c:9c:83:
f2:37:31:41:33:a3:27:67:ca:c6:28:b1:87:43:4f:
79:37:b2:34:f2:e0:cd:15:14:35:fe:a5:55:da:45:
46:18:62:58:20:12:90:f5:aa:0a:a9:3c:86:f5:6d:
10:07:a6:13:1d:d2:67:b4:2b:39:bb:4c:85:70:cd:
7c:0e:20:98:c7:df:67:ef:71:6d:93:d0:b4:38:6a:
70:3f:f9:ee:fd:b2:3a:6d:2e:e6:81:7b:26:6b:e6:
a4:e8:ea:67:6a:74:0d:06:57:87:8e:a1:36:22:8c:
ae:d1:79:69:60:7e:ac:f8:7f:c4:f9:b5:4f:3e:62:
97:21:b2:e9:2f:89:6c:14:aa:63:68:0a:bb:bc:eb:
3a:1e:de:a6:cc:1c:92:96:7b:42:cc:66:63:d7:b2:
da:9e:d6:5f:a9:ce:f9:4a:3e:8b:c6:b6:38:7d:25:
da:ad:e8:8c:a0:dd:cc:8c:5e:a4:10:ac:9e:49:5b:
11:79:86:e3:3b:7f:5c:26:2d:8a:d5:66:ab:69:ff:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EF:09:71:BA:A2:A0:B0:AC:32:17:A8:E6:FB:AF:3E:5F:0A:3F:62
X509v3 Authority Key Identifier:
keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:b3:26:c3:b7:cf:89:44:46:e0:97:24:a4:e8:e1:d7:36:6a:
71:16:7e:02:50:b8:db:a5:ab:f5:8c:3f:d9:cd:7c:36:61:c0:
fc:3d:f2:94:4a:8c:22:9c:37:7e:33:20:41:47:da:4d:be:49:
e9:c8:c7:38:25:4a:50:c5:17:e3:c8:ec:f9:c2:f9:d2:a2:f9:
2f:89:e8:92:ed:bd:b6:3b:6d:32:31:5d:40:5f:77:0d:0a:ac:
b0:18:31:4e:cb:3d:64:9e:d0:f5:83:9b:65:ce:90:f5:bc:41:
49:bd:6e:85:c1:d6:40:bf:ae:a4:ae:f9:e9:ac:fc:11:d8:a7:
c5:d3:30:49:7c:c3:c9:6b:55:6d:7e:91:13:ba:80:0d:10:01:
9c:99:00:2e:9c:de:72:5f:b6:7c:28:40:23:45:6e:67:13:90:
b4:f8:69:19:96:4a:d4:c1:4c:f3:5f:30:1b:36:25:d7:7c:c5:
b6:5b:40:f2:2b:8f:fa:17:33:d5:e2:e4:92:65:ae:fd:12:c3:
e3:fa:65:a3:7f:bc:78:f5:51:18:b0:07:05:18:a7:fd:7b:39:
a2:84:af:87:63:45:ec:7b:3a:c2:57:2d:17:48:ac:8a:55:b1:
a7:2f:bf:71:31:0b:b0:bb:54:08:b1:55:5e:55:08:d2:08:58:
de:a8:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:32 2025 by rpki-client