Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: X2lqiAVUzwbtkgSLymngxZyqfRTs1FbQbuDoNljbRNU=
Subject key identifier: 22:27:80:B7:D7:97:D6:E2:90:11:AD:F8:E7:7C:84:3F:C9:B3:58:DB
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 019A71B83A47E20C84AC9D006892A525554E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: edSCAaLLL7nzA/WdB9GlzhwGo4P4jU0Tvs60AxBG838=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3a:47:e2:0c:84:ac:9d:00:68:92:a5:25:55:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=222780b7d797d6e29011adf8e77c843fc9b358db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:08:46:33:1b:72:6c:aa:64:b5:03:1f:90:
33:cd:75:0f:d8:56:01:5f:31:1f:7b:35:62:9e:73:
5e:d6:ad:ac:87:82:d1:9d:cf:1f:ea:31:50:9c:73:
32:1f:84:0e:48:18:08:f1:9e:e1:8b:9a:81:2c:b5:
3e:58:3a:9d:c7:bf:07:c5:b7:a3:21:3e:0a:d7:ff:
8d:94:11:4a:b2:d8:c8:e0:74:5b:62:78:f2:35:d9:
ef:98:f5:4f:61:81:fe:a6:49:d1:58:60:0a:3d:4e:
8d:dc:dc:7f:89:89:76:c8:44:3d:92:63:e0:ce:b1:
d5:6d:e4:a6:07:43:0b:21:09:6c:78:77:67:25:ac:
0a:88:17:95:15:3d:e9:66:17:ce:d6:c6:06:14:ed:
d2:f5:00:93:f3:2b:a3:bc:e2:be:f6:e7:2b:23:50:
50:95:7b:e3:6d:b8:e9:6a:03:71:06:5c:59:05:39:
03:0f:b8:4f:a9:77:23:84:e3:e4:ea:1f:f5:66:5e:
25:1f:17:a5:23:b8:40:8f:42:e3:c6:bc:2c:ab:b2:
97:c4:02:bc:df:1b:2c:32:17:00:78:80:f3:72:cb:
25:b3:16:a9:19:1b:7a:10:4f:f7:79:d7:de:c3:7e:
eb:6a:e1:fd:6b:74:4c:91:2c:79:f3:e6:85:da:35:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:27:80:B7:D7:97:D6:E2:90:11:AD:F8:E7:7C:84:3F:C9:B3:58:DB
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b6:9b:a3:02:49:16:63:d8:75:56:fc:9c:9b:fd:e1:f5:e1:
a5:e3:e9:7e:a6:85:70:86:76:09:71:62:dc:7d:b7:d1:e7:e3:
38:bc:a2:c4:24:da:38:79:01:ae:e3:8f:a1:ac:0d:df:7a:83:
ff:26:66:27:c7:84:68:21:0e:07:b8:07:4d:26:9c:1b:5f:a7:
e3:6d:c7:08:0a:da:94:f9:7b:8c:67:aa:4d:eb:32:db:b3:d3:
7e:6d:fb:b0:40:61:1b:10:f2:ed:b7:78:f6:d3:61:10:62:92:
01:7c:d1:5a:43:aa:58:40:34:fc:15:1e:b7:5a:cf:d2:81:b4:
4f:10:df:7c:4c:8b:23:8b:f0:d1:36:f8:12:f9:18:2d:ac:88:
10:1f:cb:92:b2:13:6c:1d:52:b2:43:2a:ff:bc:55:91:86:28:
40:50:bf:80:2a:13:e6:b9:14:60:21:04:db:15:5c:b0:9e:f6:
81:60:b4:29:00:a3:b6:19:e4:c2:a1:a5:bb:97:22:74:d1:04:
2c:ed:b6:2f:90:ce:f9:89:63:11:b1:21:fe:de:c4:49:27:84:
d9:3f:cd:a9:70:c5:ea:3e:18:56:ce:8e:6f:27:0a:e2:0e:a4:
0b:74:52:92:be:0d:b9:a2:07:6e:0f:09:42:cf:8c:a0:7b:92:
68:7f:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:45 2025 by rpki-client