Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: pjkb19SBnSdKoRgRHAy4wyzbFNtJVgTA7MTsOYRGV0s=
Subject key identifier: FC:8C:B4:CA:BB:1F:64:75:11:00:A3:2C:4C:41:FF:0B:A9:29:0E:16
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019A4D73B015A2D95EB66EE64EF398326CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0B6B
Signing time: Tue 04 Nov 2025 06:00:18 +0000
Manifest this update: Tue 04 Nov 2025 06:00:18 +0000
Manifest next update: Wed 05 Nov 2025 06:00:18 +0000
Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: lwMsDfzxdrn0b8L5zlrDUrD9H8xljlpsMng7enzcL48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b0:15:a2:d9:5e:b6:6e:e6:4e:f3:98:32:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Nov 4 06:00:18 2025 GMT
Not After : Nov 5 06:00:18 2025 GMT
Subject: CN=fc8cb4cabb1f64751100a32c4c41ff0ba9290e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:51:fe:11:e0:31:7e:15:3b:7b:ae:bd:4b:
9c:09:bb:40:90:ca:ee:80:60:cc:f5:4d:34:4a:29:
74:33:bd:f5:2a:17:b0:c2:1e:3d:e8:6c:f0:9d:f4:
81:dc:ea:42:07:39:bf:aa:40:e0:ef:f4:55:c0:68:
ca:b4:b2:50:2e:9e:99:d8:91:0c:20:f6:2b:c3:17:
c7:75:8e:1b:21:ca:29:13:d7:48:0d:68:86:de:e6:
59:4c:fe:48:b2:72:ef:9f:41:ec:fc:3c:ee:a4:14:
f6:a3:d9:a7:23:9f:8f:64:4a:09:db:de:43:d4:7e:
08:f2:91:56:5f:ba:c6:df:55:d0:9a:dd:12:4a:da:
9a:bb:a5:48:01:85:f1:bb:46:03:3e:82:7c:ca:74:
e3:2b:d6:a0:c7:27:98:c1:d0:65:68:91:fd:99:90:
54:80:fe:92:fb:e4:10:ab:d9:53:ab:7b:e7:5b:9a:
16:be:ef:87:85:32:b8:d0:1a:45:4c:bc:26:06:3a:
c1:4c:50:c1:4e:61:9a:f4:df:00:d2:19:0b:dc:98:
1e:6d:a0:7f:a8:1f:93:33:bf:8e:f5:fd:5b:da:63:
2c:e9:03:b6:20:d5:20:76:3e:57:bc:5f:1f:d6:63:
08:d9:3a:e3:bc:2a:05:58:ee:bc:59:d2:99:d7:eb:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8C:B4:CA:BB:1F:64:75:11:00:A3:2C:4C:41:FF:0B:A9:29:0E:16
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:f5:ce:99:f4:bb:70:55:4e:ec:f2:fa:fa:f0:93:4d:a0:
58:0a:3b:04:37:8e:bf:45:d5:6c:ed:40:45:79:fe:ea:ac:88:
0d:07:11:6e:65:15:32:41:5a:31:c1:62:ad:12:8e:42:f9:87:
76:f8:df:49:29:b9:ae:69:3a:77:e3:e4:ae:89:26:bb:d8:1a:
b7:3e:a2:a6:0d:b8:d0:07:26:29:90:e2:4a:5f:df:89:53:27:
15:4d:98:6d:98:d2:e6:bb:7e:d9:5f:5e:f9:37:59:28:e5:9d:
79:7b:3e:31:91:c6:c8:13:7f:da:5b:c3:d6:2e:15:18:36:ba:
07:cf:a8:9a:1d:a6:0a:d8:85:09:b1:40:e4:30:e9:5a:31:d2:
e3:b8:74:a5:8c:a4:f0:ea:8a:01:46:63:ff:8a:3f:c9:03:c1:
72:f9:86:df:fe:19:cf:69:72:48:cc:3f:85:be:f9:36:cf:34:
3b:49:d2:7f:0d:10:15:da:f0:03:e9:6b:51:c4:62:44:5e:bd:
11:40:79:e3:87:38:53:d2:72:92:82:b6:0b:42:17:69:bc:f3:
10:c4:01:ca:dc:b4:6b:91:b1:a0:bd:4d:ae:63:fd:00:98:29:
8b:65:8b:3e:4b:37:d1:b4:49:bb:6f:66:de:95:f6:ca:0b:db:
10:b1:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:23 2025 by rpki-client