Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json)
Hash identifier: v5+lN3pAO0yh6AfiQJvchkLSW5mjfWDCV1e5z/tMuU4=
Subject key identifier: F8:93:62:93:48:A6:D3:91:20:E0:96:8C:BE:3B:27:7C:72:8B:55:88
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019849D3715833C493A534BD15B1470AB70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
Manifest number: 01A6
Signing time: Sun 27 Jul 2025 03:00:50 +0000
Manifest this update: Sun 27 Jul 2025 03:00:50 +0000
Manifest next update: Mon 28 Jul 2025 03:00:50 +0000
Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: RP3UmG0Nao4lE1xnJ4pArsQf5dx3T1sxX8EDFMUmTTo=)
2: n-uGHXU9mK8VqWn_-PLqMRGS8Ts.roa (hash: ygEEJ097SaCUzOmNUISceDFVrT5Qf+Tcg4RtFktgRHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:71:58:33:c4:93:a5:34:bd:15:b1:47:0a:b7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Jul 27 03:00:50 2025 GMT
Not After : Jul 28 03:00:50 2025 GMT
Subject: CN=f893629348a6d39120e0968cbe3b277c728b5588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:e5:a1:4f:41:f6:57:7f:e6:c5:99:56:6e:
61:47:43:7d:c2:a1:e4:54:d9:a4:7a:6d:c4:de:fa:
2b:18:10:f0:94:4c:41:25:ec:20:40:b3:76:f5:77:
0e:57:5d:01:23:a6:9c:f4:e3:00:db:fc:eb:46:20:
5f:16:74:22:cc:a4:78:1e:47:84:4b:ac:28:e9:94:
0e:b4:61:fc:bc:99:04:b4:bd:76:92:b1:f6:fa:57:
4a:e7:53:b1:4f:3a:5e:a3:1c:e2:d0:a4:89:17:ac:
7d:2c:ea:5b:04:7b:14:b9:84:ee:e1:0d:ee:60:e8:
c4:8e:2a:b4:b8:b4:c2:04:fc:ef:ad:b0:ce:9e:b4:
80:d7:d3:fc:62:e2:c5:24:c5:55:30:e9:d3:8b:a1:
c5:ca:8d:9a:95:c1:d8:c3:f0:ed:53:37:a6:79:1d:
24:24:45:11:24:b2:6b:9b:e4:f7:86:6b:0c:88:c2:
62:ae:d6:41:60:52:e7:50:4d:30:bd:d0:cf:8a:af:
0a:14:54:46:c2:46:35:57:a8:5c:c4:22:c9:cc:1b:
47:f3:1b:1f:60:87:34:e7:1d:16:25:be:0c:48:9c:
fc:09:dd:62:d3:71:8e:7d:6a:57:0f:5a:de:11:ac:
90:1c:ad:a7:3e:70:4f:a8:c9:68:8f:3f:35:5a:fe:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:93:62:93:48:A6:D3:91:20:E0:96:8C:BE:3B:27:7C:72:8B:55:88
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0f:fa:3c:87:c5:a6:69:f4:c2:d5:87:fd:87:40:bd:b6:91:
01:be:50:8a:1f:4f:3d:c3:03:20:2e:05:33:5e:a7:75:a1:6f:
bb:30:da:92:85:5d:80:f8:5f:90:74:f6:29:98:4b:43:69:cb:
dd:64:62:82:ec:9c:06:d6:34:3b:ae:3c:6b:30:0b:85:76:dc:
ce:32:d7:69:db:3d:32:50:a3:8c:0f:cf:bc:18:c6:aa:51:f8:
c0:28:2b:ce:23:4e:52:15:cc:31:fd:96:32:23:ac:0c:70:ad:
b1:bd:5c:e2:36:d6:c2:c4:2e:00:58:e8:4c:10:dc:62:79:6c:
77:3a:3b:0c:9a:98:87:10:b4:71:46:dc:44:dc:2d:b0:9e:c6:
ac:85:19:6c:3b:39:38:b0:ad:7a:f5:d2:eb:3b:a9:3d:e4:60:
6d:b0:85:77:6f:8a:b3:75:e6:5b:d5:8e:2a:88:95:69:71:92:
d7:d9:20:06:73:d2:a7:0a:cd:83:0b:6b:26:d5:0b:27:19:92:
7f:a2:92:30:71:c8:59:29:4b:74:1a:58:37:86:0c:ce:29:05:
64:f4:4e:60:3c:ca:43:8d:08:ea:35:4f:7f:8a:af:76:09:93:
0e:13:c7:82:c0:9a:b2:da:9b:4f:7b:d1:37:dc:cd:f5:db:f6:
ec:02:04:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ03FYM8STpTS9FbFHCrcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm
YzU5NzMwHhcNMjUwNzI3MDMwMDUwWhcNMjUwNzI4MDMwMDUwWjAzMTEwLwYDVQQD
EyhmODkzNjI5MzQ4YTZkMzkxMjBlMDk2OGNiZTNiMjc3YzcyOGI1NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTPloU9B9ld/5sWZVm5hR0N9wqHk
VNmkem3E3vorGBDwlExBJewgQLN29XcOV10BI6ac9OMA2/zrRiBfFnQizKR4HkeE
S6wo6ZQOtGH8vJkEtL12krH2+ldK51OxTzpeoxzi0KSJF6x9LOpbBHsUuYTu4Q3u
YOjEjiq0uLTCBPzvrbDOnrSA19P8YuLFJMVVMOnTi6HFyo2alcHYw/DtUzemeR0k
JEURJLJrm+T3hmsMiMJirtZBYFLnUE0wvdDPiq8KFFRGwkY1V6hcxCLJzBtH8xsf
YIc05x0WJb4MSJz8Cd1i03GOfWpXD1reEayQHK2nPnBPqMlojz81Wv6WMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiTYpNIptORIOCWjL47J3xyi1WIMB8GA1UdIwQY
MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt
OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3
LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw/6PIfF
pmn0wtWH/YdAvbaRAb5Qih9PPcMDIC4FM16ndaFvuzDakoVdgPhfkHT2KZhLQ2nL
3WRiguycBtY0O648azALhXbczjLXads9MlCjjA/PvBjGqlH4wCgrziNOUhXMMf2W
MiOsDHCtsb1c4jbWwsQuAFjoTBDcYnlsdzo7DJqYhxC0cUbcRNwtsJ7GrIUZbDs5
OLCtevXS6zupPeRgbbCFd2+Ks3XmW9WOKoiVaXGS19kgBnPSpwrNgwtrJtULJxmS
f6KSMHHIWSlLdBpYN4YMzikFZPROYDzKQ40I6jVPf4qvdgmTDhPHgsCastqbT3vR
N9zN9dv27AIEKg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:31:28 2025 by rpki-client