Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: zwMgf4cxZcl+IlolI49WNwued1o0RInc5kVgV1z4EJM=
Subject key identifier: 9D:BE:EA:2E:D6:27:5A:82:1D:89:A1:6C:A1:10:64:35:0C:88:C9:0A
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019A4D74832803B22AD91BC2433F4BECB511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: dxugmgJoiNJpG5GwTg1xq2KhnQDZzwsEtM2XlgTyRqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:83:28:03:b2:2a:d9:1b:c2:43:3f:4b:ec:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=9dbeea2ed6275a821d89a16ca11064350c88c90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:3c:a9:57:e3:49:30:00:f0:4e:03:ca:3d:
e5:76:25:d1:df:bd:38:aa:dc:9a:e4:62:64:a9:85:
c0:87:b1:b1:2a:32:1d:bc:08:82:ad:f8:06:81:51:
d4:5c:21:d3:33:1b:ca:48:db:49:18:57:e6:b1:83:
58:b0:f4:a6:2c:85:11:07:24:cf:f1:43:8a:0c:c7:
0f:2a:e3:03:dd:aa:e0:3d:8c:de:f1:1e:27:f5:7f:
d5:39:14:19:e0:f5:1c:17:90:ee:18:56:3c:ff:7e:
d2:78:7f:4c:03:0e:92:c2:63:0a:1c:fb:6a:ce:30:
44:21:f3:0b:32:84:e7:dc:76:ae:a7:93:c9:6c:78:
ce:f1:48:75:52:0a:1b:90:c6:c6:14:53:29:0e:07:
ac:d6:84:e1:28:fc:7a:6f:e2:db:5f:43:3c:2e:26:
f2:57:81:41:88:b7:a0:05:0b:f7:72:63:87:8e:96:
cc:da:a7:c9:0f:9d:cc:7f:af:88:aa:63:d4:75:dd:
6d:1b:a6:35:aa:88:b4:ab:22:11:67:dd:32:d7:88:
da:ba:79:3c:da:7c:29:90:06:56:92:1b:3c:2d:02:
24:69:fe:02:3d:8b:b8:f5:f1:fe:33:7c:73:5f:3e:
35:61:8a:3c:90:d7:01:b1:05:4f:d6:5c:a3:44:41:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:EA:2E:D6:27:5A:82:1D:89:A1:6C:A1:10:64:35:0C:88:C9:0A
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:93:47:15:26:36:a3:4e:5e:40:b5:4f:a5:57:70:89:7b:10:
88:49:d9:4e:e1:1d:73:2d:ef:4a:f7:a2:2a:d4:bf:a8:69:b4:
7d:36:8f:42:da:16:61:a8:69:d2:d9:ea:32:f8:c0:be:0b:fc:
44:39:0a:6d:93:d4:81:6e:ae:ce:44:a6:b9:3c:b0:13:94:36:
9e:5c:21:7d:19:d0:4f:40:01:fc:d7:6a:a9:a1:a0:09:bc:37:
27:42:77:5a:50:a1:a1:4a:a5:d4:a6:25:01:4c:29:fe:04:e9:
74:4f:9e:b9:2c:e7:62:c4:15:33:16:6b:6e:7a:26:53:27:c7:
e6:6b:e4:6c:fb:80:3c:c2:1e:a0:8f:8f:86:32:7d:ea:5f:e8:
7b:38:d5:d6:1f:14:73:1b:42:b2:9c:a8:7d:7d:0f:fe:ad:35:
a6:e8:9d:9f:62:81:63:ce:a4:b6:7c:b7:72:46:61:45:6b:d2:
ce:d2:77:6e:d7:bb:3b:ab:7f:3f:d0:53:82:f4:23:72:6c:c3:
99:74:cc:a1:b0:58:a9:6a:ef:ca:82:b2:b4:30:f0:b6:64:33:
03:6b:5a:82:df:79:96:22:f0:20:e4:84:65:b8:2f:6a:f0:0d:
c0:a2:82:ac:71:3b:3b:e7:7b:10:f5:46:9a:97:b5:63:04:c9:
12:0f:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:25 2025 by rpki-client