Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier: VrYKU/ZHH5wdMM+sGAZDRhdmRTSmdtsl30sCcsrsAzY=
Subject key identifier: 28:2B:BE:46:35:4D:D2:61:27:41:5B:63:07:7E:F8:BC:18:F2:DF:24
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 019A70DC4D9042B5A0864E20987581060686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number: 058E
Signing time: Tue 11 Nov 2025 03:01:17 +0000
Manifest this update: Tue 11 Nov 2025 03:01:17 +0000
Manifest next update: Wed 12 Nov 2025 03:01:17 +0000
Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: H+g4EfIoyzHqqQNLppnTI3Us/A7od+kU2YgjfW9F/lY=)
2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4d:90:42:b5:a0:86:4e:20:98:75:81:06:06:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: Nov 11 03:01:17 2025 GMT
Not After : Nov 12 03:01:17 2025 GMT
Subject: CN=282bbe46354dd26127415b63077ef8bc18f2df24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:7b:d2:23:1e:c1:d2:2c:93:87:26:e9:e0:
f1:7e:a1:b6:ea:15:45:7b:4a:47:89:7d:4e:b1:01:
bd:31:c0:4e:1d:aa:6f:db:e3:e7:cb:e7:9e:b6:9e:
cf:f7:74:e6:c3:e7:62:8d:83:f1:81:ab:e8:bf:6b:
72:24:56:86:35:81:10:ce:5d:7f:96:07:36:03:e4:
59:c0:32:79:17:09:34:8b:4f:45:c3:16:65:4d:5e:
22:46:32:fd:47:2e:03:6a:1f:77:41:8d:2a:9a:f7:
2d:20:31:94:ee:ca:30:15:20:8f:93:8f:73:3e:d2:
03:ac:82:35:b4:23:6f:84:99:20:db:b8:6e:28:b1:
55:94:98:16:2f:3f:4c:9e:3e:47:9a:a9:fd:d4:96:
9a:d7:c5:ff:93:41:3b:f9:25:60:bd:29:8e:62:3e:
b8:78:98:b2:a5:8c:6a:91:e1:63:1e:d4:5b:86:56:
b0:72:c0:51:d8:77:20:73:3d:4f:40:2a:56:53:47:
32:9c:54:85:7b:ea:c9:59:ce:d9:5b:69:07:19:30:
77:c1:7b:9d:4f:b8:9c:d7:70:db:3a:fc:a3:9a:53:
5f:1c:d0:a7:cb:64:00:aa:0c:10:c8:c4:61:94:66:
c3:8d:ee:16:76:8f:cb:17:2d:37:c2:20:3c:3c:2e:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:BE:46:35:4D:D2:61:27:41:5B:63:07:7E:F8:BC:18:F2:DF:24
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1f:87:9e:6a:d9:4f:c4:62:79:c7:11:ae:e2:7d:ac:2b:7b:
f2:bd:f1:93:0a:22:31:b8:72:a8:b2:cf:e7:da:f8:54:7a:59:
e1:45:5c:78:d1:d7:ba:70:a5:bc:aa:b9:b8:a7:9b:44:a4:d0:
7a:98:81:cb:63:1b:67:b5:61:63:d4:4b:11:e8:77:a3:a2:1f:
e7:aa:73:8a:63:ab:5c:4a:3a:e0:b9:19:8b:be:51:43:5e:b3:
e4:b1:61:5c:b4:a6:49:fb:da:c6:bd:a1:5b:e2:db:76:91:8f:
ec:0b:5c:41:90:dd:0d:54:02:89:9f:43:23:f5:05:d8:ed:a1:
7b:11:cc:8b:36:1e:c9:d4:08:67:b5:51:93:48:83:ab:da:34:
96:dc:2a:72:80:9c:a1:93:50:49:e6:ab:ba:e1:27:8d:14:90:
4d:0e:ea:07:86:a8:78:43:2a:fe:35:16:61:ab:d1:9a:1f:b7:
c9:dd:1a:61:ec:ac:1d:ce:77:20:88:7b:d5:bf:e6:fc:58:b8:
c0:da:66:79:9f:0e:d3:d0:dc:8c:19:2a:86:0a:40:45:3b:5a:
66:39:7e:58:ba:d5:0e:c4:c6:d3:f1:6f:e0:a0:46:0b:34:18:
f3:3d:dd:73:f0:a6:73:71:a2:40:cd:c7:4c:60:bd:25:74:c5:
24:09:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:54 2025 by rpki-client