Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File: MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier: zHcwqY5Zu/oJIhD8M1Dqo5WHzU8sot8ko/7G7G0XNnw=
Subject key identifier: F8:44:02:59:64:A0:84:BF:C1:47:70:3C:56:81:91:49:5D:A5:DC:DF
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer: /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial: 019A71B87D610AD0130B7B405489EBFED299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: g8lEuCobqQdtURwOXW3jKZ2X0ZmgnGjENr47TWuUAvs=)
2: b8DnJoN74NTsPD_KGnBCEwfyzvU.roa (hash: JBZGJZ01ohgzrq8TQqKGft4IChiGkf6cao8eWeUn8y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7d:61:0a:d0:13:0b:7b:40:54:89:eb:fe:d2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=f844025964a084bfc147703c568191495da5dcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:48:31:90:ae:3b:18:9f:d7:38:4e:ec:23:
82:f7:90:8f:c8:79:bc:9d:90:1d:a1:eb:3d:97:b3:
13:db:d1:f2:1f:d2:dc:07:93:d8:3d:c9:3e:02:54:
52:eb:04:9e:e8:d0:13:63:3e:f7:4c:38:70:b6:0d:
11:6e:16:0b:ea:35:7e:36:36:97:83:fd:35:e8:57:
63:55:4c:6b:54:17:4f:7e:5f:4e:0c:68:29:e8:fa:
0a:9c:19:cb:f9:65:41:ec:87:e2:fe:d4:54:1b:9e:
9e:85:ff:b1:73:f6:a5:4b:3b:e4:c3:2d:ce:9a:44:
27:43:1c:ae:a0:8b:c4:dc:39:1b:7c:81:81:79:87:
9b:a7:35:5e:b7:a2:09:df:0d:20:b5:3b:42:e7:f7:
b5:9d:c3:6e:1d:cf:f1:5d:21:e3:19:33:cd:31:0c:
2f:e6:9f:c8:6a:fa:1e:7d:ad:06:56:af:cc:8d:f8:
83:7a:50:5d:69:5a:05:32:4b:3b:8a:84:30:4c:c1:
af:a6:ef:63:aa:94:bc:c9:5a:cb:f0:b9:a8:b8:72:
e4:48:32:13:96:d9:7d:ae:de:2b:83:94:97:12:42:
89:d8:f7:2d:22:59:98:66:9c:a9:d6:d5:c7:1c:d6:
87:65:6f:83:3c:40:68:01:77:f5:b4:c9:09:26:eb:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:44:02:59:64:A0:84:BF:C1:47:70:3C:56:81:91:49:5D:A5:DC:DF
X509v3 Authority Key Identifier:
keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:c9:32:6a:5c:64:e3:69:3f:1f:e6:00:ac:98:02:28:80:
ec:64:e9:9c:f7:20:b1:ea:83:f6:03:3d:83:a1:03:3f:25:4e:
99:75:5a:8f:cf:a5:a2:aa:c5:e9:83:06:44:b3:aa:c2:96:59:
14:d0:f5:ad:2e:58:a7:b5:1b:d3:e6:c2:19:7e:da:84:ad:49:
b7:d4:6c:e4:d2:a2:7b:34:fb:31:34:a0:ea:ef:0b:7a:d4:8b:
7b:00:ee:2f:18:2b:d6:35:68:41:a3:53:c1:a2:e9:11:93:00:
47:b2:32:fe:4b:dc:1b:e0:25:70:ba:3b:45:a2:3d:43:9e:67:
d7:0f:0d:e3:0c:4d:d0:59:ee:b8:c5:91:e3:21:fa:c5:ee:7c:
9e:7c:f4:ea:67:4d:82:77:41:19:3e:df:1e:0d:b6:16:c2:47:
aa:87:d5:7e:b6:0d:94:ce:0f:b0:53:b7:20:4d:bd:5f:84:9f:
05:4d:3c:7a:18:d8:67:58:a9:37:37:fc:b6:34:91:14:e3:cb:
05:41:78:fc:35:96:a4:7d:6b:5b:35:f1:c7:ca:c8:d2:1e:1a:
d2:22:0a:49:5c:16:dd:29:a1:1c:f1:f3:29:f5:8a:14:f0:68:
5b:ec:e1:a0:41:46:d8:a8:f5:98:f2:b3:3e:b1:a9:a0:27:8c:
30:64:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:37 2025 by rpki-client