Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: n9wdodPRyVbIV+ct6hlWgHymJ+uZL1kn5S7WSjzaNUM=
Subject key identifier: 12:F1:99:AD:33:A1:D0:89:3F:4F:D3:FA:D1:8C:77:BE:A0:4E:10:59
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 019A50E2F6E8C99C66959C73447FAAF67B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:00:42 +0000
Manifest this update: Tue 04 Nov 2025 22:00:42 +0000
Manifest next update: Wed 05 Nov 2025 22:00:42 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: xevoSMT+EfzPLPKENaSqgI1aYdHMZEW/yWxF2PCg0kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f6:e8:c9:9c:66:95:9c:73:44:7f:aa:f6:7b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Nov 4 22:00:42 2025 GMT
Not After : Nov 5 22:00:42 2025 GMT
Subject: CN=12f199ad33a1d0893f4fd3fad18c77bea04e1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:10:11:9c:5e:54:9f:f7:98:71:ae:96:e6:
da:5b:ea:92:d6:10:6d:f8:b7:b3:a3:7d:fe:98:0d:
21:41:a4:6e:f1:3f:60:1b:fa:1f:ae:81:81:de:47:
cd:50:54:98:68:ee:82:32:fe:fa:22:2f:fc:52:b9:
6c:98:44:89:61:66:45:6b:58:77:f8:50:5f:6d:9d:
b3:92:39:4a:f3:77:e6:84:aa:d8:f8:e9:6d:b6:19:
5a:9a:47:52:a9:f7:34:1d:2a:91:86:d2:18:38:8d:
93:00:75:f9:6e:c2:fb:8e:05:00:91:90:ae:4f:9c:
36:d3:09:59:62:0e:3e:f7:e5:0c:08:d4:76:2f:70:
d8:b7:d7:d8:ad:24:cf:ec:2f:a8:c0:26:db:0d:96:
1d:4c:4e:bf:09:be:ca:fe:12:dd:b3:38:69:75:bf:
18:e2:04:bf:99:54:9c:39:0d:93:bf:55:bb:59:63:
ec:5c:d1:d8:26:53:4b:d1:a6:e0:56:88:e8:98:d0:
c2:c9:1b:9f:b9:a8:5c:88:82:df:7e:de:a2:45:66:
39:31:9e:83:df:51:7a:f1:ba:c8:ed:28:6f:1a:db:
01:8d:70:48:3f:c8:33:cf:5a:8e:9b:e3:c9:8a:aa:
ba:76:46:6f:f4:19:80:97:83:3b:63:bb:5e:69:7f:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:99:AD:33:A1:D0:89:3F:4F:D3:FA:D1:8C:77:BE:A0:4E:10:59
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:90:9d:f1:63:6a:d4:6e:20:ed:89:8b:a8:02:71:eb:80:51:
73:08:c1:e2:b7:44:fa:2f:6e:34:07:45:85:fa:77:2e:3d:6c:
c6:79:66:d8:33:6a:41:2b:c6:1d:d2:87:c8:cc:62:95:28:09:
ee:90:3a:fe:88:95:a5:a5:69:46:27:f4:06:06:5c:24:61:56:
8f:2b:57:e6:77:18:48:fa:96:04:dd:56:6b:5f:03:05:85:ee:
bf:da:c3:e7:30:f3:b2:d9:68:8c:05:03:86:65:4f:9f:82:00:
42:2b:d5:1d:3e:c6:65:e0:41:52:77:a9:82:b3:7f:0e:c7:03:
7b:2d:3f:aa:e9:33:fe:e9:4a:a5:01:d3:be:54:14:1e:07:b6:
15:70:11:ba:fc:1c:13:d0:59:14:6f:e6:46:c3:cd:0e:db:5e:
92:f8:e5:85:20:ef:32:3b:66:8b:63:3a:84:a3:9e:e6:f9:bd:
a1:6d:81:44:01:f1:2b:c6:8e:11:2b:62:7f:5b:b0:85:dc:52:
e0:a4:34:4b:19:3b:b8:00:f5:33:48:a6:4b:db:73:62:26:a4:
a3:7d:c9:ea:27:43:84:82:07:c3:24:c9:7d:1e:b4:5e:f2:3e:
a8:8d:68:af:09:2f:b9:d3:19:38:a7:98:92:6d:76:09:76:00:
4b:27:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:20 2025 by rpki-client