Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json)
Hash identifier: 5AR6FXXlnAAsLMz8cKQjdumuHydUonHqbBWfJ8PZc4A=
Subject key identifier: 9A:F5:81:0F:EF:46:6C:DA:6A:26:99:ED:18:CF:A8:75:62:9D:AD:D9
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 019A5150E0E97BF8C97DF69141B66DCC02CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
Manifest number: 0522
Signing time: Wed 05 Nov 2025 00:00:46 +0000
Manifest this update: Wed 05 Nov 2025 00:00:46 +0000
Manifest next update: Thu 06 Nov 2025 00:00:46 +0000
Files and hashes: 1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=)
2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=)
3: 8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa (hash: ocveRvdKmq2/uNW55ltBS2tVePO3vLCP/eERUMjU3Xk=)
4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=)
5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: KISFG1hozwBPUFNnvpw070gdsa95E/lJLY2u9gREFRw=)
6: vELKBYHFEWuziyxwHt8P-AaeZu0.roa (hash: nLjphrnkbyuT7M1CC3aPm0hUWrSdnIQEpDv8szLLPHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:e0:e9:7b:f8:c9:7d:f6:91:41:b6:6d:cc:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Nov 5 00:00:46 2025 GMT
Not After : Nov 6 00:00:46 2025 GMT
Subject: CN=9af5810fef466cda6a2699ed18cfa875629dadd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:dd:f7:09:83:bd:04:76:c6:4e:18:d1:d2:
4c:ea:ef:4e:08:b0:22:7a:49:b0:90:64:26:13:80:
d9:66:4f:aa:64:8b:9e:49:e4:6b:c7:f6:94:63:bb:
05:95:33:90:4f:55:a2:8a:1b:41:e5:6b:37:33:86:
1a:7d:61:8a:45:2d:5b:dd:6f:cf:94:30:d1:a3:29:
19:34:a7:4e:52:b2:09:ce:d8:83:24:5a:f9:10:70:
23:83:2c:4c:8a:47:77:25:4c:41:25:60:ad:e7:89:
4b:de:a7:9a:b4:87:34:06:02:bb:da:e4:96:33:cb:
6b:18:d4:39:ef:ae:7d:00:81:cb:42:3b:c7:cb:66:
d1:d5:4c:31:cb:81:bb:63:d5:bf:77:4e:f8:4c:a3:
d5:38:3d:be:46:9e:f9:1a:21:e4:6f:fa:65:29:29:
00:a2:9f:25:1f:04:c8:fc:d2:dd:ee:91:a3:4d:d8:
04:89:be:91:0f:58:40:3d:e9:9a:4a:a5:61:26:38:
0a:79:18:2e:b1:02:c7:9c:5f:f6:a1:87:ce:90:1d:
fb:48:0b:ac:44:f5:b8:47:1d:37:fc:0b:bb:2d:7c:
5b:76:f4:10:ad:d4:6b:44:68:51:7d:c3:22:37:bc:
9d:6a:bd:dc:ef:72:0c:b1:64:94:8c:85:cb:67:7d:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:81:0F:EF:46:6C:DA:6A:26:99:ED:18:CF:A8:75:62:9D:AD:D9
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b1:fe:ed:8e:4d:e9:e0:86:d6:4d:fb:44:4d:81:f2:c1:90:
b6:a9:3c:63:73:97:5e:b3:8a:5a:db:4d:86:b6:65:7c:e6:81:
94:6b:c0:25:0d:10:26:5c:96:51:16:56:c3:2d:8a:60:41:99:
73:b7:ca:d8:6c:9a:02:90:4b:f9:68:b8:f4:29:e1:fc:9b:9c:
1c:ee:65:42:2e:8f:6c:81:88:dc:f9:31:c7:e4:05:93:86:b7:
1a:11:18:8e:5c:b9:a7:87:cf:0c:7d:7a:a5:5b:3a:aa:2f:9b:
36:d2:30:3f:ec:cd:48:48:0f:22:27:e6:7d:2b:0f:bd:7b:62:
c9:8c:a8:2b:dc:1c:18:46:77:b6:b2:28:26:e5:ba:59:8d:08:
79:5d:5f:89:d1:7d:d3:89:23:96:f3:fa:2d:a1:17:0f:ba:72:
e9:dc:52:12:ff:fa:85:3f:56:d8:a4:7a:d5:89:1f:7b:18:cf:
09:0b:21:a4:e6:0e:3f:dc:91:e4:d8:ee:4a:99:81:d1:14:cd:
56:00:28:ff:f1:8a:f5:a0:71:60:3f:ab:21:db:e9:2f:7b:17:
68:bd:5e:df:35:9a:21:99:05:bd:b4:68:1a:a8:9a:30:9b:19:
0e:c1:49:b8:d3:27:b9:8a:2f:fd:ce:19:0f:db:d3:64:44:98:
11:6f:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:02:38 2025 by rpki-client