Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: D5g9/LlcWXaCcECqw1hHsqHNGwnvUNwmmpYJ1WICL78=
Subject key identifier: 4D:DC:3D:B3:86:3D:37:39:78:BD:84:0A:00:B5:8C:F7:15:6E:B3:61
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 019A4D74168496591CE4ABE011F6AE599E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 037F
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: /j6qY3sR6WilpWF5J+2saoxUGtRVmDR1GkG/0CJrKPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:16:84:96:59:1c:e4:ab:e0:11:f6:ae:59:9e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=4ddc3db3863d373978bd840a00b58cf7156eb361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:73:19:83:60:e7:86:22:2f:85:88:9a:bd:
12:0c:17:6c:7b:5c:cc:dc:aa:cc:f4:fb:ca:2a:6f:
f9:c9:e5:f8:cf:e4:11:8d:5b:bd:cd:cd:b0:0b:1b:
55:3a:fa:3b:8e:95:19:cd:7c:15:59:95:af:4a:d2:
c8:51:fc:30:a9:8c:7f:4f:f1:97:9d:b9:df:86:cb:
22:44:ad:d6:e0:77:4e:6d:a6:ae:46:11:47:d6:52:
48:7f:72:bb:f9:d0:a5:79:f0:62:48:aa:7b:26:d7:
cf:f1:cf:43:b8:eb:9f:ac:ff:c4:57:f4:e2:a5:a0:
5e:a0:2f:be:b0:ee:bc:b4:e9:1c:ef:e9:23:4c:62:
f4:b8:f8:eb:f5:d2:4c:cf:b6:bd:1e:0f:27:ee:2c:
b7:96:36:a0:03:fd:b4:be:ac:1b:a9:32:5a:a3:07:
41:d4:f2:ff:34:d7:6b:9a:0c:22:40:d1:5f:ed:eb:
98:06:c4:5b:b7:c7:54:23:97:1d:6f:ef:d2:35:69:
ea:22:5c:dc:64:07:e4:a5:82:18:73:90:50:32:0e:
4c:74:e8:65:9d:4a:30:71:09:56:09:dc:ba:76:42:
25:3a:e2:01:45:55:3f:53:d2:22:d2:74:74:56:51:
b4:a9:22:73:ef:3d:25:ba:31:ea:8a:d3:33:14:b1:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DC:3D:B3:86:3D:37:39:78:BD:84:0A:00:B5:8C:F7:15:6E:B3:61
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:64:89:fc:bc:1b:95:85:77:20:02:e0:ba:cb:e4:ca:5f:07:
59:6d:24:87:0f:63:48:6f:ce:ec:63:e0:9b:85:a0:70:1e:45:
23:51:1c:1b:d7:fe:ea:85:63:5a:58:dd:b9:df:bb:95:e4:b4:
bd:9b:48:d5:84:01:bf:61:4f:ae:5c:11:04:3e:fa:2f:2d:b0:
5e:e7:8b:d3:9a:32:dc:5a:06:df:b1:31:a9:f5:b5:b8:0b:fd:
c0:73:2e:1c:80:63:d0:b9:93:e2:8c:e8:13:f1:cd:a5:ae:f0:
b7:b5:78:38:ba:21:a5:3a:d1:a4:f3:43:77:4b:68:82:9f:34:
4b:35:d9:0e:9d:92:b9:ee:22:6a:a0:dc:c3:d7:a1:b2:17:04:
a7:f6:77:b0:79:6c:11:75:a9:62:11:96:59:27:35:88:55:e3:
8d:14:62:fc:6e:66:7f:0a:c0:3c:b9:17:aa:d1:06:e3:80:6e:
a0:9d:3d:20:4c:e9:03:78:61:1e:bc:11:3b:b0:fd:cb:7e:60:
9a:a2:3e:74:c9:f1:ee:c8:b3:2f:8c:29:0e:bf:3a:e3:0c:19:
19:37:95:de:7e:d2:a3:83:28:58:6e:ef:ae:12:47:7c:fb:dc:
14:7c:54:6d:ab:d0:31:3d:23:14:fa:17:7e:86:67:08:59:f7:
42:97:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:41 2025 by rpki-client