Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: SoZC95e7ZYIPw841jOPkPTx2O8DNNVkPtt/6qJbOqIg=
Subject key identifier: CD:01:15:39:43:40:47:74:BB:01:C6:F7:62:34:3C:29:AB:06:52:03
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019A54C01C9D26C475A2765F76160DDA9837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0DF6
Signing time: Wed 05 Nov 2025 16:01:07 +0000
Manifest this update: Wed 05 Nov 2025 16:01:07 +0000
Manifest next update: Thu 06 Nov 2025 16:01:07 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: TIJLyzwOBX442LIGvlDqEILTvnCy80cj9kXJ3aEFC/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:1c:9d:26:c4:75:a2:76:5f:76:16:0d:da:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Nov 5 16:01:07 2025 GMT
Not After : Nov 6 16:01:07 2025 GMT
Subject: CN=cd01153943404774bb01c6f762343c29ab065203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:d6:36:6c:6b:d2:85:f8:d5:f2:4c:87:c3:
58:1f:2f:b4:0d:a8:16:47:b8:d8:68:39:9f:b9:f4:
5b:0f:7b:73:1e:ac:b9:62:a7:78:02:61:01:8f:9d:
d9:42:ae:ad:63:f9:54:3a:45:1b:d3:a5:b2:12:74:
d9:8c:d9:d8:5e:98:55:8d:9f:ac:1e:41:e8:97:81:
16:23:8b:3e:ef:e8:7b:2c:de:62:ad:a5:9a:16:06:
8b:e9:03:c3:7e:f1:9c:2a:e7:9c:19:2d:e2:e6:1e:
34:d2:94:b7:9c:a9:e1:6a:29:81:a1:0a:e8:1a:b4:
2c:4e:76:3a:da:8b:b0:e8:38:96:0e:39:b3:4a:71:
14:c3:48:9a:e4:0a:93:2a:05:a6:1a:f5:43:88:0b:
d8:10:5f:65:56:c7:34:3c:92:e8:1e:d4:3a:eb:cb:
27:93:00:96:9a:1a:bb:26:1c:bb:f0:f5:b6:7b:2f:
dc:76:c8:db:3b:b7:a4:2d:5e:cf:fa:e5:41:4b:92:
ab:55:70:5e:4d:74:47:57:07:cf:3b:46:db:af:43:
ab:e6:46:62:91:b2:0e:1c:00:87:79:79:3c:96:dd:
f5:ec:59:a2:89:5a:cd:16:08:ab:fa:af:76:bb:b6:
3f:d5:51:93:44:89:96:e3:8f:91:89:ab:97:4a:11:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:01:15:39:43:40:47:74:BB:01:C6:F7:62:34:3C:29:AB:06:52:03
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:94:bd:a3:59:bd:98:88:6f:49:e0:fe:c4:9d:20:5c:e0:
31:57:bd:d0:5c:e7:49:de:89:d4:68:fb:5e:e1:d4:3a:03:f8:
64:14:a0:58:5e:74:7c:03:37:91:be:40:74:0c:ab:04:60:68:
19:0b:f9:a6:2a:3a:7f:2c:9d:d9:84:cc:24:74:57:20:5d:cd:
92:8a:40:74:f4:aa:a5:df:29:28:cf:4e:09:6b:93:98:a2:ba:
c7:38:b0:55:7f:38:d8:a9:b2:32:ed:d0:21:de:1d:e9:7f:f2:
fb:ad:41:a0:5f:08:52:d2:94:35:cf:e8:28:6a:28:ce:f4:bc:
14:c7:85:1b:10:ca:c1:cd:e0:68:51:51:0d:44:85:12:ac:ee:
bf:f0:af:b0:37:f3:87:8d:0c:f8:ee:f3:63:a7:57:fa:a8:ae:
65:35:b0:d3:33:37:ef:ca:18:b9:69:e8:04:c3:a0:e0:6e:68:
7b:32:7e:2a:a6:69:90:d2:39:d5:e5:47:7b:5e:54:24:69:63:
16:e1:86:5b:ac:07:e1:66:82:ed:ca:1a:b2:64:54:66:37:f9:
78:1a:09:c6:a2:96:d3:10:3d:5c:ed:e7:b0:99:f3:97:ac:6c:
07:a0:da:09:eb:e7:dd:84:f4:17:10:58:5d:c9:05:10:55:f5:
cd:e7:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:48 2025 by rpki-client