Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json)
Hash identifier: OPzdNzGTldTnxPTStqyz8Ld5rMfEVaG+o9jtLrHMeQ4=
Subject key identifier: 07:62:10:27:8D:F9:BF:CF:64:28:95:B9:B9:67:D7:8C:67:EE:36:D7
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 0199C4577CA05B0952BB23E5BB30FE870F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
Manifest number: 16C8
Signing time: Wed 08 Oct 2025 15:01:31 +0000
Manifest this update: Wed 08 Oct 2025 15:01:31 +0000
Manifest next update: Thu 09 Oct 2025 15:01:31 +0000
Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=)
2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: hj1AoWiM5xdDfR3PPySUzWWD51mBToCGUOmAGHFUnVA=)
3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:7c:a0:5b:09:52:bb:23:e5:bb:30:fe:87:0f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Oct 8 15:01:31 2025 GMT
Not After : Oct 9 15:01:31 2025 GMT
Subject: CN=076210278df9bfcf642895b9b967d78c67ee36d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9f:bc:7c:ef:f3:70:3e:bf:b6:cb:92:15:bc:
bf:1e:45:de:a3:0f:36:23:82:e2:24:61:c6:8b:57:
88:9c:cd:23:6b:7d:17:06:8f:19:10:48:82:e7:1c:
f3:33:bb:f0:94:6d:75:c7:4f:1e:44:be:9b:29:fe:
89:5e:14:41:3c:3b:08:f2:34:d1:68:40:b8:a5:ce:
a1:e2:2b:96:72:cb:bd:01:10:12:97:6d:21:30:3f:
1b:a7:e8:53:8e:05:85:6a:e4:c7:92:24:5c:74:21:
10:7f:cc:65:df:a5:12:ed:8b:06:d3:6e:98:e1:ee:
95:60:15:86:0a:ab:04:c1:54:c2:6e:ca:c4:29:ed:
15:7b:d1:98:1e:49:a8:d3:a7:3f:cf:dc:52:d1:1f:
c7:f7:7e:61:70:7c:9b:0d:d7:71:d8:1e:c1:ad:b3:
6c:7a:a8:a4:43:ef:e6:c6:0e:e1:9c:f1:34:05:f1:
fd:a9:d2:0c:19:1f:14:31:df:80:05:62:e0:87:ed:
f1:de:ce:a1:f8:c5:1e:6c:fe:a8:6b:56:e1:e6:66:
52:e4:d9:54:ce:ca:97:3b:67:3c:58:4f:52:e6:5e:
37:b2:e9:2b:94:11:b0:52:8d:fb:7a:03:c1:64:f8:
6b:41:5c:48:3b:be:a1:ab:52:56:db:04:96:2b:27:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:10:27:8D:F9:BF:CF:64:28:95:B9:B9:67:D7:8C:67:EE:36:D7
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:58:ae:86:76:f3:7b:8b:3d:ab:1b:f2:1c:88:02:7d:1d:fb:
66:4d:68:4d:6b:9b:ae:6c:b3:0a:54:0c:d8:42:0e:47:d5:3b:
84:d3:19:72:1f:a0:b7:3d:13:e2:ee:b4:62:8a:c6:e5:71:3f:
9b:df:09:5e:46:cb:e1:88:86:80:15:66:eb:41:b2:03:fd:39:
ac:fd:9a:ea:b9:87:52:a3:bd:dc:f6:16:a5:da:9f:b4:40:e6:
90:4a:d6:e8:60:52:ad:3f:5f:dd:cb:15:a0:a4:1d:f7:bc:0f:
c5:1e:96:13:70:91:df:f7:2e:f2:02:f7:6b:64:ec:4c:a5:2c:
32:b1:14:8a:54:23:e9:ec:d4:b4:ad:fe:90:fa:e7:86:2a:aa:
e9:89:7c:44:a9:1b:fb:51:e0:ee:32:d4:53:6f:d2:36:fd:64:
26:25:01:d4:e9:13:91:07:6a:ec:f8:fb:45:f7:e2:0b:a6:c8:
a9:d2:48:aa:b7:fc:06:7d:a1:51:c0:3a:d8:c9:67:ab:51:1e:
ff:aa:50:ca:92:dc:70:be:0b:c2:3a:1d:41:38:9d:86:56:be:
17:d5:cd:25:6d:34:38:08:e2:12:80:66:ab:b3:a0:91:42:7e:
8e:0f:b8:8c:0b:31:54:61:19:ee:35:d2:90:25:63:ae:5b:55:
67:6b:16:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEV3ygWwlSuyPluzD+hw8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1
ODY5ZTIwHhcNMjUxMDA4MTUwMTMxWhcNMjUxMDA5MTUwMTMxWjAzMTEwLwYDVQQD
EygwNzYyMTAyNzhkZjliZmNmNjQyODk1YjliOTY3ZDc4YzY3ZWUzNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp+8fO/zcD6/tsuSFby/HkXeow82
I4LiJGHGi1eInM0ja30XBo8ZEEiC5xzzM7vwlG11x08eRL6bKf6JXhRBPDsI8jTR
aEC4pc6h4iuWcsu9ARASl20hMD8bp+hTjgWFauTHkiRcdCEQf8xl36US7YsG026Y
4e6VYBWGCqsEwVTCbsrEKe0Ve9GYHkmo06c/z9xS0R/H935hcHybDddx2B7BrbNs
eqikQ+/mxg7hnPE0BfH9qdIMGR8UMd+ABWLgh+3x3s6h+MUebP6oa1bh5mZS5NlU
zsqXO2c8WE9S5l43sukrlBGwUo37egPBZPhrQVxIO76hq1JW2wSWKyfwNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdiECeN+b/PZCiVubln14xn7jbXMB8GA1UdIwQY
MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct
ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1
LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFiuhnbz
e4s9qxvyHIgCfR37Zk1oTWubrmyzClQM2EIOR9U7hNMZch+gtz0T4u60YorG5XE/
m98JXkbL4YiGgBVm60GyA/05rP2a6rmHUqO93PYWpdqftEDmkErW6GBSrT9f3csV
oKQd97wPxR6WE3CR3/cu8gL3a2TsTKUsMrEUilQj6ezUtK3+kPrnhiqq6Yl8RKkb
+1Hg7jLUU2/SNv1kJiUB1OkTkQdq7Pj7RffiC6bIqdJIqrf8Bn2hUcA62Mlnq1Ee
/6pQypLccL4LwjodQTidhla+F9XNJW00OAjiEoBmq7OgkUJ+jg+4jAsxVGEZ7jXS
kCVjrltVZ2sWsw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:22 2025 by rpki-client