Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
File: MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json)
Hash identifier: uKaNSpS+dWPCd9nseuqTG54aUYeq1YzbdTzLuV3Pyfk=
Subject key identifier: 28:2B:8F:48:58:C7:CE:9C:5D:53:08:D5:F9:B5:41:27:24:01:CD:B6
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Certificate issuer: /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial: 0199FB7C86D19120F6C779D705D020052C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=)
2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: 1jvtAExA/iMd+vOUjQokeA0g/NK6KCza0KfNKtpTU6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:86:d1:91:20:f6:c7:79:d7:05:d0:20:05:2c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=282b8f4858c7ce9c5d5308d5f9b541272401cdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:c1:08:02:37:a8:6d:c1:2a:b6:3f:8c:bb:
6a:7c:db:fb:b1:89:14:36:62:63:ce:f3:95:a1:21:
94:3a:8e:c3:99:1b:21:66:a9:a2:c3:11:ee:9d:00:
67:76:1c:d3:a8:39:ea:cd:2a:2b:63:1c:42:02:36:
71:eb:f1:18:1c:a9:e6:1c:0c:5f:36:97:6f:9c:ae:
66:8c:69:c4:b9:7e:0f:93:ff:b3:d8:5c:5a:6f:ae:
cb:3b:43:82:00:4f:f6:08:09:8d:3c:4c:90:b4:64:
82:5a:a3:c0:5d:be:9b:f7:7b:16:b2:6d:6f:1b:05:
45:82:99:71:c0:0a:ff:f6:36:8c:af:75:e4:a5:b8:
12:b1:b6:91:f3:24:05:8e:ee:be:a0:46:8b:5b:b0:
65:fd:02:28:e9:ee:4f:e5:23:34:0c:63:41:f3:73:
dc:04:2e:a6:45:03:6c:6a:d7:eb:06:90:c2:b4:d8:
3a:58:f7:41:6a:7d:95:20:7d:9b:53:be:98:9a:ca:
23:20:31:63:7b:4c:79:31:97:7f:4a:ac:0a:dd:c6:
65:20:cd:5e:9d:ee:38:47:86:d6:43:e9:ec:e1:23:
7d:bc:c6:64:41:66:90:26:04:8a:f4:71:d2:90:8d:
1b:76:ec:eb:05:f8:44:b2:92:5e:dd:7b:f5:33:a2:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:8F:48:58:C7:CE:9C:5D:53:08:D5:F9:B5:41:27:24:01:CD:B6
X509v3 Authority Key Identifier:
keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:ba:5c:13:db:83:41:67:29:f1:43:29:42:22:d2:9f:fe:
e0:21:53:44:04:36:23:8f:d3:00:b8:4f:bc:0a:3f:ca:9b:9d:
55:bb:ed:4c:49:11:53:e4:ea:a3:4e:bf:36:1a:27:20:e6:cc:
b9:a8:8f:0b:7f:c0:b2:a8:4a:c6:bc:4d:77:3f:ce:15:08:d4:
2e:69:b2:d1:a7:5b:39:2e:4f:3f:d1:97:c8:b5:c4:54:2f:8a:
b8:77:64:e2:58:ff:f0:e8:44:b6:cb:4d:66:83:00:9b:dc:32:
13:34:ca:5e:b3:44:ea:40:89:76:23:11:12:00:22:37:ce:ba:
f6:8f:3e:b6:01:d0:cc:1a:b1:d5:da:6e:59:27:8f:cb:1d:9f:
58:35:57:b8:76:10:b2:ea:cb:ea:f1:95:25:9e:5d:cc:ba:cc:
70:3b:85:76:ff:61:5f:0c:80:b7:b4:22:41:8a:f7:93:d9:72:
6f:3f:55:93:95:46:da:4e:44:c9:49:6b:ef:dd:83:e1:a4:41:
08:63:52:77:97:c7:ce:a2:dc:06:d8:65:58:5a:54:b9:ab:76:
ba:c2:7c:b7:fd:f2:61:d0:0c:4d:a5:39:37:64:e9:b7:74:ba:
a6:a0:ac:03:02:dd:96:37:f3:40:68:eb:9b:17:0d:9a:e9:b0:
28:d0:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:26 2025 by rpki-client