Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
File: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json)
Hash identifier: 1YPw8lcmDIWYXiGNksU3L7wTG42L9ar759blLMR2+VU=
Subject key identifier: 44:C0:90:EF:28:C3:FD:FB:D8:23:F1:CE:C4:05:58:18:56:73:22:40
Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4
Certificate serial: 0199FEB4F2E5C11345D57ECDAE5EB774C960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
Manifest number: 0779
Signing time: Sun 19 Oct 2025 23:01:35 +0000
Manifest this update: Sun 19 Oct 2025 23:01:35 +0000
Manifest next update: Mon 20 Oct 2025 23:01:35 +0000
Files and hashes: 1: eEuL986vzdl5Ue42JMTwEjrhHL8.roa (hash: sD06A9ioFyTX7xWQwS5R0iqBwd3oxcUKyjznK7FeoF8=)
2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: N7IzrKEmJsimUex0NW6wVrpm8ThRWtCvmQOMGZ3kgvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f2:e5:c1:13:45:d5:7e:cd:ae:5e:b7:74:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4
Validity
Not Before: Oct 19 23:01:35 2025 GMT
Not After : Oct 20 23:01:35 2025 GMT
Subject: CN=44c090ef28c3fdfbd823f1cec405581856732240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:c7:47:a0:3f:3a:45:25:d6:b4:1e:79:d7:
b5:41:38:8f:77:c6:dd:55:d1:b5:59:21:f3:0b:19:
e8:5b:9c:35:e5:56:38:b1:67:3c:11:71:7c:48:5f:
7f:41:04:b8:29:63:6e:57:9f:fc:4a:05:76:70:0a:
44:82:d8:34:f8:6d:35:bf:ad:ee:80:2d:ee:88:2b:
d1:be:36:16:17:f5:de:c9:56:7f:f7:bf:20:ec:c3:
e8:e6:bb:cf:2f:cc:55:86:b6:4b:a0:8e:2d:15:1c:
57:ee:98:d6:5b:56:99:cc:0d:b5:12:4d:16:74:31:
81:b1:bf:8a:e1:ef:26:c0:26:d6:21:3c:3a:f6:f3:
9b:75:c4:52:7b:fa:3d:fe:21:89:86:ed:99:de:5d:
42:10:2c:a9:25:dc:df:94:0d:a5:f7:a2:6b:8c:20:
05:ce:4b:55:76:6c:ff:5a:53:7c:7f:73:7d:2c:7d:
a0:cc:13:df:f4:61:90:05:ef:e6:c1:7c:20:4b:2f:
6f:4d:fd:ab:23:a9:e4:1f:ae:da:48:a2:94:3c:74:
7a:d7:10:2d:75:0e:c7:d1:aa:5f:d7:dd:df:e5:67:
92:93:11:df:09:d6:d1:bb:66:d1:9b:d8:57:b5:8a:
41:bb:d1:e4:3f:d2:e1:59:3c:a9:1c:87:bf:9a:69:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:90:EF:28:C3:FD:FB:D8:23:F1:CE:C4:05:58:18:56:73:22:40
X509v3 Authority Key Identifier:
keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:49:77:29:4e:89:73:48:23:bd:2f:09:55:c8:ad:60:4c:18:
a1:70:8c:c2:54:95:7a:e1:82:40:58:85:aa:8a:88:88:23:1b:
a3:d0:99:a4:e6:21:04:00:af:ba:41:2e:ca:3c:3b:e5:84:9a:
e0:27:c6:97:33:60:14:3f:7e:01:31:cf:34:d2:dc:e2:ad:29:
70:ee:9a:ea:8e:d4:80:bc:9c:c2:10:35:72:0d:53:d7:de:e0:
a7:8c:f8:40:25:65:83:b0:b7:90:c4:0d:5a:2b:de:6c:65:a5:
8a:a1:84:65:db:9f:57:b7:a1:46:9d:66:8a:ac:5e:66:ec:36:
39:6e:f5:8f:c5:62:e8:7e:8f:4e:46:a9:a5:32:1c:02:4e:c4:
c8:80:66:57:e5:ab:89:a2:f5:f1:70:e1:2d:d5:ea:e2:4e:f0:
59:d9:d7:5f:b8:75:0c:72:8d:e4:dd:95:c6:af:59:ed:fc:f6:
ed:7e:c9:db:d7:50:c8:cb:09:28:92:83:a5:ae:70:05:40:ee:
52:04:26:ff:f1:d2:7d:70:c4:eb:5d:ce:9e:4a:2c:8b:11:2c:
6f:ba:81:00:02:1a:64:9a:3e:00:31:4b:dc:fc:bd:04:cc:82:
11:98:a5:ea:52:d4:7d:ce:93:f5:5e:b7:84:53:7a:4f:4e:2c:
13:1d:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:24 2025 by rpki-client