Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: v9+UTozhxyO0GqxiFKE4RjawMoy8TEN76zdGmYsu7kg=
Subject key identifier: 40:E7:46:49:DD:C9:33:A2:C6:10:B0:A6:9A:17:B2:22:84:E2:F6:6D
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 01987F7A25F788BD2C416A88E23B7B3EA0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0D03
Signing time: Wed 06 Aug 2025 13:02:48 +0000
Manifest this update: Wed 06 Aug 2025 13:02:48 +0000
Manifest next update: Thu 07 Aug 2025 13:02:48 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: 5NuHVvT7/b3mO+8O6FdSZqc6yxKIRrl47c0D5Eojrkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:25:f7:88:bd:2c:41:6a:88:e2:3b:7b:3e:a0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Aug 6 13:02:48 2025 GMT
Not After : Aug 7 13:02:48 2025 GMT
Subject: CN=40e74649ddc933a2c610b0a69a17b22284e2f66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:27:a6:88:99:fe:39:d4:9c:60:d1:33:fb:
72:06:0d:25:92:12:ed:b0:e9:16:d6:88:93:e4:04:
94:92:27:b7:e3:11:c4:91:4e:ca:15:b0:38:64:ca:
71:e3:04:6c:4d:b6:41:75:39:3d:a7:5a:bc:df:dd:
65:f9:81:f7:8f:a9:6e:cc:16:08:4f:6b:85:e5:23:
7d:82:31:f7:c5:99:c7:c8:db:be:1f:f8:ef:c2:fb:
73:8d:f6:c1:0b:59:eb:08:91:31:72:74:2b:35:94:
05:1a:db:c5:7f:40:df:24:23:2e:3f:19:34:e8:3a:
ce:37:e4:90:cf:54:a1:1f:15:79:52:84:8f:92:b5:
ad:e8:1c:fe:4a:ad:a7:10:01:1f:94:36:f7:07:cd:
d8:16:a6:1b:ed:d6:2a:d6:bf:d3:32:48:e8:52:b9:
e5:4f:7f:08:c6:3c:b6:42:51:32:ce:f0:21:45:f3:
2d:67:c4:61:2c:df:bb:d0:fc:f5:26:bc:4d:db:16:
6f:b8:73:09:01:ac:44:bc:60:63:10:09:e9:4e:ca:
23:5e:99:4e:2d:6d:a8:ed:c6:5f:b3:75:61:e1:00:
e9:bd:ac:64:9f:b6:ba:18:bf:b5:1c:54:a7:89:f0:
be:ca:94:3e:00:70:25:81:61:46:e9:89:1c:0a:89:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:46:49:DD:C9:33:A2:C6:10:B0:A6:9A:17:B2:22:84:E2:F6:6D
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a9:a2:32:b2:52:df:29:04:ae:35:2c:09:24:61:d7:2a:30:
21:37:c8:79:08:18:2a:5b:a3:0c:49:3a:1f:c7:0f:11:76:a3:
16:9c:17:bf:c6:b2:9c:a4:8a:bb:f7:d8:ef:3e:3f:0c:ab:51:
37:2d:df:ec:8a:0a:b9:30:40:57:2f:e2:98:4c:0f:95:98:11:
6b:55:90:0b:7d:ad:eb:db:69:99:60:ee:29:b9:fa:33:16:ab:
c2:e0:f5:39:12:19:8c:b5:c0:d0:58:c2:05:88:cb:4c:6d:8e:
65:8c:45:8d:08:a4:f1:d9:c1:c8:e9:44:25:e5:21:50:aa:49:
88:6d:63:e1:d6:df:2b:39:24:aa:bf:b4:2c:6c:ce:4e:48:b7:
27:37:15:b1:4e:44:2d:0b:f5:f6:63:9b:3d:c4:17:da:35:29:
81:7a:6d:40:e6:43:ef:87:b1:f4:ca:58:b1:0d:bb:12:7e:b7:
81:f9:79:89:aa:15:27:e8:2e:bb:de:57:20:b6:27:58:94:20:
71:0e:7e:7e:5a:39:ed:7c:6a:80:74:17:a3:ef:68:8b:aa:ff:
d0:e3:c0:4e:42:0f:1a:b7:69:2b:10:db:5a:4a:1a:e3:3c:82:
31:00:df:1c:f1:d0:27:b3:33:9a:29:23:57:c4:bf:0c:c1:e9:
fa:6d:c6:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/eiX3iL0sQWqI4jt7PqCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj
YmY0YmQwHhcNMjUwODA2MTMwMjQ4WhcNMjUwODA3MTMwMjQ4WjAzMTEwLwYDVQQD
Eyg0MGU3NDY0OWRkYzkzM2EyYzYxMGIwYTY5YTE3YjIyMjg0ZTJmNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspEnpoiZ/jnUnGDRM/tyBg0lkhLt
sOkW1oiT5ASUkie34xHEkU7KFbA4ZMpx4wRsTbZBdTk9p1q8391l+YH3j6luzBYI
T2uF5SN9gjH3xZnHyNu+H/jvwvtzjfbBC1nrCJExcnQrNZQFGtvFf0DfJCMuPxk0
6DrON+SQz1ShHxV5UoSPkrWt6Bz+Sq2nEAEflDb3B83YFqYb7dYq1r/TMkjoUrnl
T38Ixjy2QlEyzvAhRfMtZ8RhLN+70Pz1JrxN2xZvuHMJAaxEvGBjEAnpTsojXplO
LW2o7cZfs3Vh4QDpvaxkn7a6GL+1HFSnifC+ypQ+AHAlgWFG6YkcColgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDnRkndyTOixhCwppoXsiKE4vZtMB8GA1UdIwQY
MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt
NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi
LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6miMrJS
3ykErjUsCSRh1yowITfIeQgYKlujDEk6H8cPEXajFpwXv8aynKSKu/fY7z4/DKtR
Ny3f7IoKuTBAVy/imEwPlZgRa1WQC32t69tpmWDuKbn6MxarwuD1ORIZjLXA0FjC
BYjLTG2OZYxFjQik8dnByOlEJeUhUKpJiG1j4dbfKzkkqr+0LGzOTki3JzcVsU5E
LQv19mObPcQX2jUpgXptQOZD74ex9MpYsQ27En63gfl5iaoVJ+guu95XILYnWJQg
cQ5+flo57XxqgHQXo+9oi6r/0OPATkIPGrdpKxDbWkoa4zyCMQDfHPHQJ7Mzmikj
V8S/DMHp+m3GTQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:03:55 2025 by rpki-client