Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier: y5SORx9eCBr/23BkSNvJ13AmJBoXtCGWrQxuYmetTJg=
Subject key identifier: D1:D9:53:10:52:C8:56:DF:5F:7C:2B:60:FD:B2:28:4D:82:2B:15:5A
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 019A5D55584A322AE8A42EC6729D4AEB2268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number: 153C
Signing time: Fri 07 Nov 2025 08:01:05 +0000
Manifest this update: Fri 07 Nov 2025 08:01:05 +0000
Manifest next update: Sat 08 Nov 2025 08:01:05 +0000
Files and hashes: 1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=)
2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: Hck15kcyTgA/TkSuPsYduZ9DRWzFm6LVEED9wZ2kkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:55:58:4a:32:2a:e8:a4:2e:c6:72:9d:4a:eb:22:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Nov 7 08:01:05 2025 GMT
Not After : Nov 8 08:01:05 2025 GMT
Subject: CN=d1d9531052c856df5f7c2b60fdb2284d822b155a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6a:2a:55:7a:dc:3f:63:99:e8:cc:97:77:02:
64:4b:c3:22:40:76:e9:21:84:a7:1c:ce:77:38:3e:
c8:2a:48:99:f3:c6:60:2b:8c:78:8c:0c:7b:46:ea:
c6:6b:6e:4c:44:f5:d1:45:28:e2:70:64:e5:2e:9c:
9d:86:de:98:31:98:10:61:c6:0b:b9:38:a1:4b:4c:
20:61:4e:6a:37:2b:34:6d:3e:d1:e4:6f:ac:c4:75:
0d:51:a5:56:0c:5e:16:e1:ba:f0:d1:45:dc:35:cb:
e5:8f:29:a1:20:6c:7f:29:53:15:8e:8c:6f:63:42:
55:57:28:a0:47:3a:ff:00:9b:1d:fe:9e:0c:90:28:
04:05:e1:18:fd:34:7f:a8:78:27:da:22:b8:21:5d:
14:bb:ac:d0:d3:bd:ba:33:61:37:21:c5:00:8b:89:
64:04:3b:0f:93:75:5a:08:c9:7f:00:04:c1:af:51:
ec:28:5b:0b:30:ad:2b:e9:d0:1c:8a:d0:45:bc:fb:
d4:66:77:b8:88:c1:42:0c:bd:f3:27:17:9f:de:b2:
98:73:45:d0:01:c3:a7:86:15:4d:09:9f:b4:27:24:
92:ad:08:93:71:41:d0:e1:38:d5:9a:e9:52:98:81:
3a:bb:3e:ab:8d:6f:93:8c:67:d1:2e:06:41:ef:36:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:53:10:52:C8:56:DF:5F:7C:2B:60:FD:B2:28:4D:82:2B:15:5A
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4d:ea:be:c6:7e:83:2c:53:9e:c6:dc:74:33:b0:15:3e:12:
c8:5b:03:d3:bd:a5:0a:bf:3f:26:e1:20:53:4f:c6:33:af:21:
b4:84:76:f2:c9:38:9e:a2:3b:ae:c1:5e:f1:56:7b:0f:46:d0:
8e:f5:00:23:ba:00:86:7b:8c:c6:63:1e:5e:c2:3b:86:94:80:
92:ed:c1:39:69:a2:fb:05:91:a3:d8:11:5a:d5:ce:90:b6:65:
ef:ad:0b:0b:85:15:1d:51:3d:d5:cb:0b:ce:be:f6:53:42:69:
72:2d:f0:84:fc:7b:82:76:31:4c:6c:88:99:24:a6:46:99:82:
0a:6d:2d:8b:8c:c6:d5:0b:f1:02:e6:ef:3e:45:ec:a8:c9:8e:
42:f2:b4:8d:13:6d:37:ff:e6:06:16:b7:e6:02:3d:b4:c9:91:
a7:77:99:59:d9:8e:3b:81:49:88:56:4f:c1:ce:0d:f2:31:4d:
07:7c:eb:59:6e:ce:7d:3c:bb:b1:05:bb:87:73:41:b3:e4:b8:
35:58:4d:db:1b:83:c0:c7:46:09:89:59:2d:0c:c0:bc:10:ba:
f3:de:88:89:c0:b3:e6:20:c2:29:3b:31:ad:cc:80:1f:ef:bc:
91:92:e3:82:cd:3f:ed:9d:2c:29:5f:9d:f2:fe:45:ea:99:e5:
9d:85:9f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpdVVhKMiropC7Gcp1K6yJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWEwODY5MmYyMjhkYTBjNDFiMzE3YzZmYTdjYzVjM2Jl
YzUxZTEwHhcNMjUxMTA3MDgwMTA1WhcNMjUxMTA4MDgwMTA1WjAzMTEwLwYDVQQD
EyhkMWQ5NTMxMDUyYzg1NmRmNWY3YzJiNjBmZGIyMjg0ZDgyMmIxNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8moqVXrcP2OZ6MyXdwJkS8MiQHbp
IYSnHM53OD7IKkiZ88ZgK4x4jAx7RurGa25MRPXRRSjicGTlLpydht6YMZgQYcYL
uTihS0wgYU5qNys0bT7R5G+sxHUNUaVWDF4W4brw0UXcNcvljymhIGx/KVMVjoxv
Y0JVVyigRzr/AJsd/p4MkCgEBeEY/TR/qHgn2iK4IV0Uu6zQ0726M2E3IcUAi4lk
BDsPk3VaCMl/AATBr1HsKFsLMK0r6dAcitBFvPvUZne4iMFCDL3zJxef3rKYc0XQ
AcOnhhVNCZ+0JySSrQiTcUHQ4TjVmulSmIE6uz6rjW+TjGfRLgZB7zZeKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHZUxBSyFbfX3wrYP2yKE2CKxVaMB8GA1UdIwQY
MBaAFJoaCGkvIo2gxBsxfG+nzFw77FHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2Yt
MDJlZGYwOGY3Y2Y4LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2YtMDJlZGYwOGY3Y2Y4
LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE3qvsZ+
gyxTnsbcdDOwFT4SyFsD072lCr8/JuEgU0/GM68htIR28sk4nqI7rsFe8VZ7D0bQ
jvUAI7oAhnuMxmMeXsI7hpSAku3BOWmi+wWRo9gRWtXOkLZl760LC4UVHVE91csL
zr72U0Jpci3whPx7gnYxTGyImSSmRpmCCm0ti4zG1QvxAubvPkXsqMmOQvK0jRNt
N//mBha35gI9tMmRp3eZWdmOO4FJiFZPwc4N8jFNB3zrWW7OfTy7sQW7h3NBs+S4
NVhN2xuDwMdGCYlZLQzAvBC6896IicCz5iDCKTsxrcyAH++8kZLjgs0/7Z0sKV+d
8v5F6pnlnYWfnQ==
-----END CERTIFICATE-----
Generated at Fri Nov 7 16:18:25 2025 by rpki-client