Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: CHbQIgEiNAhpnt3xuEbZG8ENFxbNzMQq1QVxDW8UmxI=
Subject key identifier: C7:79:B0:A7:57:EE:6D:93:6D:EE:F9:8B:F3:A5:44:EB:BC:5E:CF:09
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 0199FC5860ED5EAC3BC924D24BDD40E8AD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 0287
Signing time: Sun 19 Oct 2025 12:01:14 +0000
Manifest this update: Sun 19 Oct 2025 12:01:14 +0000
Manifest next update: Mon 20 Oct 2025 12:01:14 +0000
Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: L6+OMPhMyqBsrPWwoPKvs5QoOV/HETxWs0XY6MO8EQ4=)
2: n-uGHXU9mK8VqWn_-PLqMRGS8Ts.roa (hash: ygEEJ097SaCUzOmNUISceDFVrT5Qf+Tcg4RtFktgRHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:60:ed:5e:ac:3b:c9:24:d2:4b:dd:40:e8:ad:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Oct 19 12:01:14 2025 GMT
Not After : Oct 20 12:01:14 2025 GMT
Subject: CN=c779b0a757ee6d936deef98bf3a544ebbc5ecf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:00:57:c1:d8:47:56:5f:8c:24:56:84:37:
ab:80:18:30:74:b6:49:ba:da:06:48:a8:02:27:18:
27:90:56:e7:d6:04:b7:88:f5:87:49:c0:8f:78:92:
9f:e4:0d:f5:e2:f0:bb:71:ed:35:95:56:a0:5f:c5:
54:9f:4c:2c:31:ed:56:71:c7:76:b3:38:41:49:ec:
87:c5:a9:a0:e2:17:b1:72:02:0c:db:4b:82:d8:d3:
b7:7e:a3:00:b1:77:f6:6b:40:ef:c4:8d:39:c7:08:
33:01:0f:6c:da:e5:12:b0:fb:c8:de:21:86:09:4f:
a6:9b:58:94:ea:b0:6f:80:52:e2:16:cc:e7:56:88:
b0:9f:91:40:64:76:cb:83:7f:42:81:4e:2c:d1:e6:
08:e5:09:d5:2e:e7:14:08:93:40:30:8b:57:d8:9b:
89:c7:5d:d6:b6:27:d2:d6:59:58:99:45:ec:24:ea:
c1:77:2c:f2:5d:93:50:ed:78:60:ae:c9:64:26:94:
71:e3:e4:0f:31:11:97:ba:9a:4a:6c:6e:5c:ac:cf:
f0:cc:de:99:c1:c5:d8:a3:61:89:e0:9a:f4:f2:f7:
2e:a9:26:f5:57:cd:1d:f6:4f:20:d5:f3:5f:48:59:
94:2b:1c:ed:b3:07:af:80:88:fe:b4:b8:46:0c:1d:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:B0:A7:57:EE:6D:93:6D:EE:F9:8B:F3:A5:44:EB:BC:5E:CF:09
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:62:31:d6:f6:9c:60:3d:26:1e:b8:49:1d:f2:37:93:d7:2b:
cb:83:2f:e1:ad:2b:9b:f0:56:95:2a:5e:c6:c6:f4:7b:6b:10:
83:a1:8e:0e:51:21:01:d7:5a:f0:1b:24:e7:3c:f7:5d:82:5c:
39:b9:71:f9:91:ff:1d:db:40:23:f2:e4:61:c7:59:cf:6a:61:
29:03:93:4a:a2:b5:ed:c4:c7:30:b9:ee:bd:7a:18:fc:5f:1d:
8d:0c:2d:bc:5e:d9:25:c4:ac:6d:35:26:99:09:ce:d0:f6:bc:
20:c2:57:ce:69:e6:3a:2e:1e:f2:3f:fe:04:58:b1:31:23:80:
8d:13:6b:67:1c:da:ed:d3:c2:d1:18:09:ea:dc:43:5d:9c:24:
a8:42:fa:f6:68:1a:c0:ff:e9:fe:41:85:ef:af:3f:cb:3a:33:
4a:bb:32:0f:f1:f7:f4:9c:b6:59:20:17:75:16:27:c9:03:1c:
c0:ee:5a:c0:aa:18:fb:76:e4:52:52:0c:77:51:7d:d3:5d:9a:
03:d9:ac:d1:3c:ae:2f:7a:13:36:8c:92:9b:b4:b8:85:20:83:
71:de:b3:e9:b5:b9:d6:fd:a2:c9:d6:6a:27:f9:52:05:59:8d:
80:55:93:8f:f2:8c:15:2e:fd:17:7e:b4:62:80:6c:e1:a6:e3:
26:c4:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:28 2025 by rpki-client