Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: r3G+pOy9IwG1EAAr1VmjS4Q05vnhH/sYEChINHkXjbI=
Subject key identifier: A5:13:DC:77:81:7F:26:57:D7:98:0E:45:B3:B1:16:89:63:20:0A:01
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 019A04B645372094534BED7BCC1EB8929008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 0556
Signing time: Tue 21 Oct 2025 03:00:45 +0000
Manifest this update: Tue 21 Oct 2025 03:00:45 +0000
Manifest next update: Wed 22 Oct 2025 03:00:45 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: PpgkiJ3vowYDg6aYwDqgMxwBKIKGaOUyyV84G4c+kIs=)
2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b6:45:37:20:94:53:4b:ed:7b:cc:1e:b8:92:90:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Oct 21 03:00:45 2025 GMT
Not After : Oct 22 03:00:45 2025 GMT
Subject: CN=a513dc77817f2657d7980e45b3b1168963200a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:3f:64:f4:bc:3a:0b:e5:1e:fc:67:9b:cb:
be:f7:28:3f:98:ff:2e:b2:75:45:9a:11:65:09:85:
19:e6:a3:81:8f:67:d1:07:85:a0:70:8c:53:dc:4b:
5d:6a:3d:11:27:20:83:a9:42:6f:65:23:22:6c:2e:
7d:ed:7e:24:4f:c8:19:f3:25:62:43:15:8d:81:41:
22:db:28:f1:55:af:ee:c0:16:e1:51:53:1c:06:e2:
fa:87:4a:69:da:ab:09:b2:7c:ea:66:91:ff:b2:ff:
94:a5:ae:33:7a:65:2b:e5:50:86:16:75:95:8a:52:
e5:0f:d7:92:cd:25:6c:0c:26:fa:a5:d5:28:ab:4c:
6e:d8:29:1d:53:d2:0f:0f:85:d6:ea:48:5b:53:2b:
4c:c1:b0:e7:c4:95:bb:ed:20:1b:8b:13:86:dd:76:
d4:74:e8:84:4a:c9:70:9f:28:bd:82:13:a6:3a:f3:
6f:db:47:51:34:e1:ea:98:5f:93:f7:cc:3d:2f:17:
6a:7d:04:8a:3d:61:f5:94:04:e3:38:27:f6:43:6e:
ce:ac:3f:3e:00:06:85:3b:28:f2:c9:e0:42:44:65:
9c:73:19:89:28:b5:20:19:30:5f:2f:d8:60:d0:8b:
7a:61:13:e1:eb:01:e9:92:75:32:8e:c8:c6:b6:a1:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:DC:77:81:7F:26:57:D7:98:0E:45:B3:B1:16:89:63:20:0A:01
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:60:c4:2a:98:a0:19:98:8a:96:f7:0c:1d:eb:d2:be:04:b8:
d7:8c:10:cb:be:c9:d2:84:83:ed:e1:7d:98:28:5f:7c:24:7e:
80:bd:1a:fa:3f:40:95:d5:a4:24:8f:cd:aa:94:4d:0f:8a:f7:
6a:04:a9:a1:23:05:a3:46:ca:e5:fb:0b:f7:30:d3:f7:99:e2:
87:b9:fd:14:e3:9c:d5:f4:68:52:30:8d:6a:69:63:89:a2:4e:
90:94:95:86:90:0f:8c:47:70:60:ec:2d:d9:05:a0:72:a6:7f:
10:5c:84:ff:d7:e9:87:cb:9e:e7:a7:a9:20:24:4f:bb:96:c5:
0b:e3:0b:5e:83:0e:96:56:98:5f:46:9c:c6:5b:f5:6c:ad:4f:
e9:05:a9:2b:72:5a:20:d3:a7:2c:d4:37:bc:e5:aa:f1:c9:d2:
80:22:97:fb:91:c3:5e:b1:8d:c4:15:61:c9:71:da:df:6f:92:
43:69:2e:ec:df:37:02:54:64:0b:d5:2b:10:18:27:1a:9b:59:
87:b2:ef:95:19:12:1a:61:48:82:46:f3:44:25:a7:70:bc:fe:
e3:ea:9c:89:13:8a:ab:4a:11:02:35:02:66:1f:9c:3f:df:67:
7c:16:96:a6:d1:96:d7:c2:62:3c:b6:82:84:f8:09:76:7c:21:
4c:01:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:49 2025 by rpki-client