Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
File: MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft (raw, json)
Hash identifier: V4Ji56DE+S2QRbCdrO+aBd2+Uo26qa3XG+OBe+xUFnY=
Subject key identifier: 24:50:67:44:68:EF:AD:BB:44:2D:EB:6A:DD:90:7A:B7:B9:13:AF:CE
Authority key identifier: 30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
Certificate issuer: /CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Certificate serial: 019A7301B5C620BA9C13C6199573F9534CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
Manifest number: 050A
Signing time: Tue 11 Nov 2025 13:01:23 +0000
Manifest this update: Tue 11 Nov 2025 13:01:23 +0000
Manifest next update: Wed 12 Nov 2025 13:01:23 +0000
Files and hashes: 1: MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl (hash: FmJGsWPR8J2Rees4TkwRivy6sv3drER7dJNZG+fvAAg=)
2: _Op4bSAp0gWDx4UfTJUc97va5qw.roa (hash: tJEKSC7Hrru5HEiTFvhI8vLaAa+FAs4tPlo2cnkUBAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b5:c6:20:ba:9c:13:c6:19:95:73:f9:53:4c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3075d87c197a0fa04da8f225358d3faf786f7d0b
Validity
Not Before: Nov 11 13:01:23 2025 GMT
Not After : Nov 12 13:01:23 2025 GMT
Subject: CN=2450674468efadbb442deb6add907ab7b913afce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:93:07:55:66:4e:0a:0e:71:c5:36:7d:23:
ec:d7:ed:f2:d8:9c:1a:b2:4b:36:eb:47:49:d8:ff:
f9:9f:d5:a8:ac:e5:0f:a1:37:30:90:c8:fc:f0:b6:
2a:bb:3b:8b:f5:ca:c9:6e:66:d0:75:de:94:24:fd:
66:43:3d:ce:40:9a:42:cd:03:27:72:9a:05:16:0f:
00:a0:67:5e:f8:63:dd:96:0f:0a:8a:9b:18:94:15:
a4:fc:df:4d:dd:3e:35:05:9c:62:6a:71:73:16:d2:
74:4c:94:35:bd:eb:eb:cb:8f:5d:f1:f6:c6:9f:e3:
2f:86:21:4c:78:03:86:b6:59:43:62:b5:07:bc:51:
e5:29:38:0d:ed:9f:f6:7d:7a:8b:83:00:77:a1:ad:
87:a8:54:2b:0a:4b:f0:7b:f6:82:43:18:06:b2:4b:
13:fd:f5:57:fd:67:3a:1a:8d:28:d6:3e:84:60:36:
95:60:2b:d8:39:df:b8:4d:37:72:97:f0:19:ef:67:
ea:9d:d8:77:6d:d6:31:c3:b1:f8:d3:64:40:c0:c4:
64:12:a2:ca:7a:2f:69:d3:ef:bb:83:ee:b9:02:a7:
44:86:26:2e:c6:b1:fa:16:69:78:97:17:14:72:58:
a3:28:08:c6:57:a3:25:d1:e9:68:27:e8:be:ad:27:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:67:44:68:EF:AD:BB:44:2D:EB:6A:DD:90:7A:B7:B9:13:AF:CE
X509v3 Authority Key Identifier:
keyid:30:75:D8:7C:19:7A:0F:A0:4D:A8:F2:25:35:8D:3F:AF:78:6F:7D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHXYfBl6D6BNqPIlNY0_r3hvfQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a400b2-bab4-4119-a3d1-89981c8f9e7b/1/MHXYfBl6D6BNqPIlNY0_r3hvfQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3a:d9:0b:09:ad:52:07:06:97:1a:b9:7f:b9:58:d6:59:75:
4e:14:4f:b6:85:af:90:73:0b:24:49:2c:3c:d7:81:74:a2:27:
3f:38:37:08:78:3b:14:c1:21:87:de:4f:01:c5:f1:9c:bf:33:
97:57:7c:d6:1d:d1:e9:81:ad:41:6b:4f:b0:6f:ed:79:51:f1:
cb:3b:21:42:7e:44:46:11:25:c3:67:4e:38:4f:b8:38:55:ce:
46:56:af:3c:aa:7e:f8:d6:4f:e4:ff:19:20:96:b6:e4:7d:e3:
9e:79:91:0f:e6:72:05:d3:1a:f3:05:08:ad:7b:57:17:91:34:
20:6f:b5:c0:bf:62:bc:3b:7c:c6:25:27:24:c2:14:76:5a:30:
20:b8:c4:e8:4d:ea:b1:fc:24:71:28:0d:33:a5:bd:18:9a:bd:
a4:58:63:60:c9:3b:e4:ce:91:5c:6a:2f:f0:01:b6:c8:8c:2a:
6d:9d:2c:84:b1:39:d2:57:7b:00:0e:66:ef:d6:b1:07:cf:4d:
28:4a:f9:5c:7c:38:84:44:d3:33:ea:02:e9:2b:ba:84:cb:f8:
41:bd:b1:b4:65:1a:f0:3e:48:8f:2b:6c:bb:a1:38:da:dd:c8:
f5:05:89:cc:12:b9:8b:c2:25:d5:a8:80:fe:99:a0:c5:bc:e7:
a4:a0:44:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAbXGILqcE8YZlXP5U0ygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzVkODdjMTk3YTBmYTA0ZGE4ZjIyNTM1OGQzZmFmNzg2
ZjdkMGIwHhcNMjUxMTExMTMwMTIzWhcNMjUxMTEyMTMwMTIzWjAzMTEwLwYDVQQD
EygyNDUwNjc0NDY4ZWZhZGJiNDQyZGViNmFkZDkwN2FiN2I5MTNhZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssqTB1VmTgoOccU2fSPs1+3y2Jwa
sks260dJ2P/5n9WorOUPoTcwkMj88LYquzuL9crJbmbQdd6UJP1mQz3OQJpCzQMn
cpoFFg8AoGde+GPdlg8KipsYlBWk/N9N3T41BZxianFzFtJ0TJQ1vevry49d8fbG
n+MvhiFMeAOGtllDYrUHvFHlKTgN7Z/2fXqLgwB3oa2HqFQrCkvwe/aCQxgGsksT
/fVX/Wc6Go0o1j6EYDaVYCvYOd+4TTdyl/AZ72fqndh3bdYxw7H402RAwMRkEqLK
ei9p0++7g+65AqdEhiYuxrH6Fml4lxcUclijKAjGV6Ml0eloJ+i+rSc8HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRQZ0Ro7627RC3rat2Qere5E6/OMB8GA1UdIwQY
MBaAFDB12HwZeg+gTajyJTWNP694b30LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEt
ODk5ODFjOGY5ZTdiLzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hNDAwYjItYmFiNC00MTE5LWEzZDEtODk5ODFjOGY5ZTdi
LzEvTUhYWWZCbDZENkJOcVBJbE5ZMF9yM2h2ZlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzrZCwmt
UgcGlxq5f7lY1ll1ThRPtoWvkHMLJEksPNeBdKInPzg3CHg7FMEhh95PAcXxnL8z
l1d81h3R6YGtQWtPsG/teVHxyzshQn5ERhElw2dOOE+4OFXORlavPKp++NZP5P8Z
IJa25H3jnnmRD+ZyBdMa8wUIrXtXF5E0IG+1wL9ivDt8xiUnJMIUdlowILjE6E3q
sfwkcSgNM6W9GJq9pFhjYMk75M6RXGov8AG2yIwqbZ0shLE50ld7AA5m79axB89N
KEr5XHw4hETTM+oC6Su6hMv4Qb2xtGUa8D5Ijytsu6E42t3I9QWJzBK5i8Il1aiA
/pmgxbznpKBEwA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:55 2025 by rpki-client