Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: sydXMJ1NXYRT6a9fM8Ey+H5V0GDMQ/HK29hRy5+0EFU=
Subject key identifier: 18:35:BE:D4:98:2A:9A:48:8C:32:D7:32:02:79:CC:B5:35:D5:B9:42
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019A2A43E1F9976AA61B281C4BF71C278D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0DE0
Signing time: Tue 28 Oct 2025 10:01:23 +0000
Manifest this update: Tue 28 Oct 2025 10:01:23 +0000
Manifest next update: Wed 29 Oct 2025 10:01:23 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: ADNw70cbRJbJFvHNx82HKEuAE5UJTXD9EcZpbL6iSjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:e1:f9:97:6a:a6:1b:28:1c:4b:f7:1c:27:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Oct 28 10:01:23 2025 GMT
Not After : Oct 29 10:01:23 2025 GMT
Subject: CN=1835bed4982a9a488c32d7320279ccb535d5b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:24:a3:d7:7d:b8:ad:bd:a9:79:9f:00:35:
3d:5c:f2:21:63:60:44:e8:17:8b:eb:f0:f2:42:db:
13:de:9e:d7:2f:17:ad:ed:46:ec:51:58:92:c7:f9:
90:bd:1e:76:bb:3b:35:c3:a3:51:35:ee:e7:12:06:
15:93:22:f1:25:8a:ff:cb:3c:2b:1b:49:5e:79:62:
b8:2d:69:18:e6:00:83:a3:fb:86:b2:37:dd:f5:37:
1b:7a:53:87:70:54:eb:b7:ca:92:c4:f2:27:83:8d:
02:48:e7:06:a6:95:95:9b:49:51:a4:e7:af:bb:a9:
af:ab:ab:52:6a:19:37:ef:9e:79:c8:08:4c:1c:59:
80:f5:14:19:dd:cd:75:77:85:14:35:dd:f4:fa:87:
16:5c:2d:43:33:e0:14:ba:e4:0f:31:30:90:72:7a:
c1:87:3d:12:fa:4b:65:51:7f:3e:49:7d:06:f5:d3:
51:20:de:0b:d7:9b:bc:81:fc:52:d1:f1:5a:f0:78:
53:f9:cf:9b:c9:6e:75:2a:53:8b:30:2c:c4:0f:8a:
83:c8:18:03:42:6c:db:05:f2:31:7a:c0:e8:b2:e1:
5a:fe:99:23:15:2c:4c:c7:e0:ef:77:c6:7a:57:ce:
3e:18:4d:a1:32:4f:d6:c6:73:62:51:61:4c:26:9d:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:BE:D4:98:2A:9A:48:8C:32:D7:32:02:79:CC:B5:35:D5:B9:42
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:98:00:c4:2e:99:8b:ec:a3:f8:af:3e:ac:59:4f:cf:87:76:
ad:0d:4b:7e:30:b1:6b:88:c8:5b:0c:9c:d4:98:6b:54:3c:ff:
5d:1b:19:38:23:b4:9c:e1:a8:c4:31:ef:e3:c7:d9:2f:8b:00:
32:62:4a:b4:af:b8:ca:5f:28:02:3b:72:e5:7e:f1:7d:45:66:
3a:32:16:29:9b:2b:75:f4:df:32:68:ca:7a:5c:cb:0a:b7:1a:
f2:ea:26:a8:e0:48:88:51:b4:66:5f:24:95:6d:49:d6:08:23:
0d:04:65:dd:35:49:d9:f3:48:54:cb:65:16:d1:73:e9:d2:56:
3a:08:5d:b6:db:d8:11:9e:a6:cc:71:53:03:fc:eb:6d:b1:28:
27:25:3c:bc:21:8c:d1:ce:40:4d:bd:93:0d:83:69:09:0c:a3:
20:2f:1c:0c:78:c9:db:e7:b1:5e:91:45:d5:9a:55:a8:a5:cc:
62:d8:2c:e9:66:93:0c:41:76:d5:77:c7:70:d0:b1:7e:85:0d:
84:04:2e:49:34:aa:01:8b:2a:32:78:3c:27:da:ef:13:8d:94:
e1:81:31:91:c0:ec:de:7d:f3:ba:4f:5b:32:8e:5a:b4:fa:04:
61:c1:55:b1:fc:90:c0:26:0c:6b:ba:47:c9:2b:16:b3:af:6d:
0b:74:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:17:52 2025 by rpki-client