Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: v9sARTHtzIkvSLuHbAnL8d5R91+2tgKbe1XbIed4C8g=
Subject key identifier: 9F:04:E3:96:9B:92:27:EC:CC:D7:0F:CC:00:60:F7:D6:DC:9D:9D:13
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 0198D5BC336FB7297B5161BBF22192DE70D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 033C
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=)
2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: Rb0uR0XyEgKljMZ6gtKaJGCWnseMVoRPnZWs3rIeKSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:33:6f:b7:29:7b:51:61:bb:f2:21:92:de:70:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=9f04e3969b9227ecccd70fcc0060f7d6dc9d9d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:53:76:7d:af:e2:fb:68:d7:ed:d0:b9:f2:
27:ef:c3:06:0a:64:94:35:92:08:42:7b:22:98:32:
eb:c3:0b:11:a7:24:02:79:e6:fc:16:b2:f1:dc:d4:
46:00:f5:26:42:8a:3c:88:12:15:5e:67:5b:c3:7f:
cd:f7:ef:2f:e1:77:86:65:c3:0a:41:13:6c:31:ed:
eb:a4:f6:ab:f8:e1:89:c2:a4:5a:7e:f9:25:c6:f6:
4e:c6:55:b6:be:64:b5:47:4d:0e:e6:b0:6f:74:ab:
33:f9:05:a9:c2:dc:a2:ff:24:63:e3:ba:79:e0:bc:
20:09:68:c5:20:7d:11:28:6d:37:e0:39:97:aa:39:
bf:61:e7:9a:f1:cc:b5:2b:c6:29:1a:e8:9e:a2:c7:
54:af:af:64:bf:45:0b:38:5e:30:a7:16:3d:c4:d6:
7e:8e:99:6c:39:35:90:f9:18:f2:59:c4:a5:b9:b2:
4b:d9:76:e9:e8:fd:af:74:ea:43:92:40:9f:f0:bb:
4e:11:47:92:f1:59:ae:7f:cf:b5:30:ab:41:a4:bf:
5e:d5:11:5d:c2:a9:87:85:3a:72:3b:fd:72:5b:de:
41:6e:6e:4e:a8:66:ab:75:80:bc:c3:e8:2a:da:e5:
be:e4:1d:c1:e9:fc:37:67:20:07:59:8e:cb:ff:a3:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:E3:96:9B:92:27:EC:CC:D7:0F:CC:00:60:F7:D6:DC:9D:9D:13
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:21:ab:07:2e:84:d6:8f:54:35:6f:a0:40:1a:8d:e6:de:60:
eb:f8:4e:25:b6:7b:50:37:8c:57:dd:c6:5c:92:f6:bd:8f:a0:
0a:39:56:19:33:b9:20:85:39:f2:d7:18:29:4b:d8:02:da:9d:
1c:fc:6f:a2:9b:42:c1:82:ab:08:2c:76:c5:31:cf:5b:b0:24:
e3:24:4e:1e:e3:3e:f8:f3:73:23:93:bc:db:06:83:03:64:3d:
fa:4b:1d:c0:bf:89:4e:d3:2a:78:52:b5:de:32:a2:0b:95:81:
b4:6e:6b:3f:0e:7b:ce:8c:c0:74:12:07:75:ef:c3:65:86:35:
c0:b7:11:15:76:0f:49:ea:1c:e6:ef:c0:82:3c:35:46:96:b4:
87:15:4c:5b:d5:07:38:fb:46:35:1e:4f:3c:cd:b8:1c:28:42:
2a:10:b2:44:a5:d9:d3:31:ef:bd:b3:0b:d4:e8:fe:61:30:c9:
b6:7a:d5:3d:b2:6a:71:d9:e8:5e:6b:07:75:f7:e1:cc:b5:69:
a6:49:71:8e:36:1b:0d:52:da:7d:23:7e:da:ee:5e:54:4c:9a:
05:1a:7d:8a:09:b1:9c:b5:9c:2c:f1:5a:2e:e7:4b:e3:1e:0f:
f5:14:2d:77:be:54:c8:4e:80:cb:4d:55:25:6c:3c:f7:fd:75:
a9:fa:23:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDNvtyl7UWG78iGS3nDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm
ZmM4ZDUwHhcNMjUwODIzMDcwMjE3WhcNMjUwODI0MDcwMjE3WjAzMTEwLwYDVQQD
Eyg5ZjA0ZTM5NjliOTIyN2VjY2NkNzBmY2MwMDYwZjdkNmRjOWQ5ZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAtTdn2v4vto1+3QufIn78MGCmSU
NZIIQnsimDLrwwsRpyQCeeb8FrLx3NRGAPUmQoo8iBIVXmdbw3/N9+8v4XeGZcMK
QRNsMe3rpPar+OGJwqRafvklxvZOxlW2vmS1R00O5rBvdKsz+QWpwtyi/yRj47p5
4LwgCWjFIH0RKG034DmXqjm/Yeea8cy1K8YpGuieosdUr69kv0ULOF4wpxY9xNZ+
jplsOTWQ+RjyWcSlubJL2Xbp6P2vdOpDkkCf8LtOEUeS8Vmuf8+1MKtBpL9e1RFd
wqmHhTpyO/1yW95Bbm5OqGardYC8w+gq2uW+5B3B6fw3ZyAHWY7L/6PCBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8E45abkifszNcPzABg99bcnZ0TMB8GA1UdIwQY
MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt
NWU5NzQzNzc2MDBjLzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj
LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyGrBy6E
1o9UNW+gQBqN5t5g6/hOJbZ7UDeMV93GXJL2vY+gCjlWGTO5IIU58tcYKUvYAtqd
HPxvoptCwYKrCCx2xTHPW7Ak4yROHuM++PNzI5O82waDA2Q9+ksdwL+JTtMqeFK1
3jKiC5WBtG5rPw57zozAdBIHde/DZYY1wLcRFXYPSeoc5u/Agjw1Rpa0hxVMW9UH
OPtGNR5PPM24HChCKhCyRKXZ0zHvvbML1Oj+YTDJtnrVPbJqcdnoXmsHdffhzLVp
pklxjjYbDVLafSN+2u5eVEyaBRp9igmxnLWcLPFaLudL4x4P9RQtd75UyE6Ay01V
JWw89/11qfojDA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client