Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
File: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json)
Hash identifier: 3IvVgvh7pM+FZsJ7fm6QfaiNHa+bZ0kvkl9vADCVsus=
Subject key identifier: 9C:75:B0:C2:AA:09:3B:01:CE:15:AF:32:E9:1F:75:7B:BE:1B:D0:E2
Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4
Certificate serial: 019A4FCFF5EF8804C99CC7B571769F7FFC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
Manifest number: 07A3
Signing time: Tue 04 Nov 2025 17:00:20 +0000
Manifest this update: Tue 04 Nov 2025 17:00:20 +0000
Manifest next update: Wed 05 Nov 2025 17:00:20 +0000
Files and hashes: 1: eEuL986vzdl5Ue42JMTwEjrhHL8.roa (hash: sD06A9ioFyTX7xWQwS5R0iqBwd3oxcUKyjznK7FeoF8=)
2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: E2UriHtvT8o7JG2c7LDWnog8WhykoTXdUkChO0DVaS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f5:ef:88:04:c9:9c:c7:b5:71:76:9f:7f:fc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4
Validity
Not Before: Nov 4 17:00:20 2025 GMT
Not After : Nov 5 17:00:20 2025 GMT
Subject: CN=9c75b0c2aa093b01ce15af32e91f757bbe1bd0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:4b:13:2c:a7:a8:20:02:72:57:68:d0:fb:
14:16:1b:0c:a6:31:f5:22:5e:8b:30:69:58:26:4c:
69:11:19:06:5d:08:e8:39:15:5f:42:63:be:10:7d:
d2:ca:de:c7:bd:24:67:f7:cd:d3:b5:e5:32:e1:03:
d2:81:ce:bd:66:aa:92:1a:de:93:54:df:8f:c3:41:
61:8a:00:cd:eb:71:c8:9d:d2:5e:eb:68:c3:f0:d5:
33:ca:1c:d2:18:74:0e:9f:23:d6:6f:e1:62:3d:cc:
e9:88:9d:71:21:93:47:0f:6c:c3:27:43:50:fd:b7:
40:e9:92:91:30:28:82:bd:91:29:1e:22:20:5a:3a:
0c:dc:b0:b1:47:49:d0:77:e9:f3:d2:8c:58:b8:d9:
e8:83:c1:d0:3a:04:55:0a:b1:a2:df:45:fc:3b:21:
5e:cb:ff:9d:6c:f7:09:bc:b8:58:7c:e6:7a:65:c1:
f1:48:99:ca:dd:04:73:d1:74:ed:fb:60:dc:ad:1b:
84:7b:29:82:4d:ae:6d:d4:fd:44:40:ee:3c:9c:bb:
59:53:e4:5c:e5:63:2a:86:03:95:58:b7:72:cf:3e:
4c:81:06:6f:d9:73:60:6c:1d:c0:f0:74:82:73:17:
0c:af:f0:3c:0a:a8:18:0b:5a:80:6a:57:e6:0d:18:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:B0:C2:AA:09:3B:01:CE:15:AF:32:E9:1F:75:7B:BE:1B:D0:E2
X509v3 Authority Key Identifier:
keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ce:7b:a9:06:8c:c8:70:e7:97:d8:0b:e9:b8:bf:30:06:d6:
08:12:bf:6c:f4:a4:79:a1:f8:a9:d9:38:7f:72:00:51:ab:56:
a8:ca:4e:f2:e7:57:c0:6b:16:e1:47:7d:33:e0:4b:66:8c:cb:
27:10:78:c7:12:8b:43:9c:99:6b:a4:db:9e:cc:64:4d:4e:fa:
28:64:cf:a7:18:41:0a:fc:24:f4:fa:66:2b:3f:22:cb:5f:da:
1e:4c:2c:2e:a9:e5:91:f3:df:79:32:07:49:f7:76:a2:28:28:
1d:20:0b:c4:05:ac:11:9c:c6:dd:7e:87:6c:b7:4b:36:ba:0e:
27:d2:0e:c6:7b:51:47:e5:72:0b:33:5e:1b:82:88:5b:c9:ea:
4e:0d:00:ea:a3:06:3a:a6:bb:c3:57:6b:46:17:de:b3:d2:28:
86:0a:93:b8:9b:54:c1:55:11:88:ae:30:f5:78:ad:23:ac:b5:
54:97:85:d9:d4:5e:aa:0e:09:92:40:fb:89:ab:89:92:60:41:
51:3a:b5:c3:f7:5c:ac:5c:f6:34:cc:ca:53:7c:78:2f:2c:aa:
da:68:d7:e8:6c:be:e6:e8:2c:ee:68:16:3d:f5:a2:a0:07:86:
d4:97:77:6b:04:6d:0a:ec:9b:36:1b:df:36:ff:fc:91:bd:fb:
2a:31:67:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz/XviATJnMe1cXaff/xvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NzUyZDE4NjY3ZGJmZjg0MjJmOTdlMWUzODkwZTk5Mzgx
ZDA5ZDQwHhcNMjUxMTA0MTcwMDIwWhcNMjUxMTA1MTcwMDIwWjAzMTEwLwYDVQQD
Eyg5Yzc1YjBjMmFhMDkzYjAxY2UxNWFmMzJlOTFmNzU3YmJlMWJkMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC1LEyynqCACcldo0PsUFhsMpjH1
Il6LMGlYJkxpERkGXQjoORVfQmO+EH3Syt7HvSRn983TteUy4QPSgc69ZqqSGt6T
VN+Pw0FhigDN63HIndJe62jD8NUzyhzSGHQOnyPWb+FiPczpiJ1xIZNHD2zDJ0NQ
/bdA6ZKRMCiCvZEpHiIgWjoM3LCxR0nQd+nz0oxYuNnog8HQOgRVCrGi30X8OyFe
y/+dbPcJvLhYfOZ6ZcHxSJnK3QRz0XTt+2DcrRuEeymCTa5t1P1EQO48nLtZU+Rc
5WMqhgOVWLdyzz5MgQZv2XNgbB3A8HSCcxcMr/A8CqgYC1qAalfmDRiXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx1sMKqCTsBzhWvMukfdXu+G9DiMB8GA1UdIwQY
MBaAFJh1LRhmfb/4Qi+X4eOJDpk4HQnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUt
MTkwYWZhMmMxMzYxLzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUtMTkwYWZhMmMxMzYx
LzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ857qQaM
yHDnl9gL6bi/MAbWCBK/bPSkeaH4qdk4f3IAUatWqMpO8udXwGsW4Ud9M+BLZozL
JxB4xxKLQ5yZa6TbnsxkTU76KGTPpxhBCvwk9PpmKz8iy1/aHkwsLqnlkfPfeTIH
Sfd2oigoHSALxAWsEZzG3X6HbLdLNroOJ9IOxntRR+VyCzNeG4KIW8nqTg0A6qMG
Oqa7w1drRhfes9IohgqTuJtUwVURiK4w9XitI6y1VJeF2dReqg4JkkD7iauJkmBB
UTq1w/dcrFz2NMzKU3x4Lyyq2mjX6Gy+5ugs7mgWPfWioAeG1Jd3awRtCuybNhvf
Nv/8kb37KjFnbA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:26 2025 by rpki-client