Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: aA8Sy8FzRrq9+Mh24lUjftAC6pP5CI0TBOaYxTFYsa0=
Subject key identifier: DA:3F:0A:65:45:17:92:DD:21:52:4E:3B:43:58:80:AB:38:08:C6:D6
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 019A71132F8D066B2B7A6BF4B7CF98375253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 0411
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=)
2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: YQQfpCNFTPJDkFM0kx0U0gl+9B8jC/zk7KKOnam08xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2f:8d:06:6b:2b:7a:6b:f4:b7:cf:98:37:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=da3f0a65451792dd21524e3b435880ab3808c6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:f6:3e:5f:3b:37:09:ca:b3:9b:9b:f1:6d:
bb:16:10:a8:bc:11:84:f9:65:5e:7e:bc:77:d6:9b:
22:0e:05:c7:8c:38:ef:51:2f:73:51:1f:b2:5f:1d:
5a:be:9b:d2:0f:f7:4b:17:9d:2d:c5:a9:90:7e:83:
c6:28:d1:a7:8f:70:54:1e:7b:c8:11:31:67:73:81:
07:8d:82:79:6d:0e:15:b6:34:7e:89:3d:c3:7b:14:
b8:ff:cb:b5:e9:eb:6e:31:f3:8d:ce:bd:23:05:69:
00:21:12:e6:c8:05:71:aa:49:ba:f5:a2:5e:9a:86:
98:88:5d:aa:cb:f8:4c:4d:2f:b9:9f:91:45:44:5f:
00:5f:3b:bc:5c:67:cf:4b:c4:ba:01:d3:47:70:56:
a7:29:e8:38:59:ba:43:ef:ed:12:9f:dc:23:c1:23:
b6:dd:ef:7b:dd:40:2c:c8:69:fd:e3:cb:7c:d6:55:
67:32:75:37:7e:79:9b:43:d0:dd:a8:99:48:97:aa:
cd:15:e3:5a:26:2c:22:05:cd:cc:ef:0e:93:5c:56:
ef:d7:55:eb:cf:dc:75:cc:27:4e:24:12:fe:ae:c5:
3c:71:f8:ee:76:d9:ae:8a:46:4f:c0:92:8c:0c:3a:
9f:5d:f1:13:d8:48:7c:a5:0e:b2:71:e2:85:74:9e:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:0A:65:45:17:92:DD:21:52:4E:3B:43:58:80:AB:38:08:C6:D6
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:43:79:d5:d3:fb:ff:db:61:7a:a5:ed:0e:38:f4:e2:bf:19:
c5:63:d2:fb:88:53:72:d7:57:43:a1:8a:88:d5:2e:6a:0c:9b:
14:31:8c:73:6b:a9:64:cd:d5:d5:5d:f9:7f:86:c0:a2:d0:de:
42:72:54:b3:08:89:ff:95:05:26:c2:27:53:bf:ae:82:d0:4f:
83:c5:89:8d:74:0c:fd:d3:9a:f4:13:19:e7:62:a2:b4:eb:2c:
26:1d:91:ea:3b:7d:94:f5:c3:89:9a:fd:cd:90:ca:7e:93:4e:
61:a4:bc:fd:f9:33:0d:78:b4:23:3e:ce:80:27:44:23:fd:e2:
5c:1c:94:a0:97:1f:ef:44:f0:5c:00:19:87:e2:a9:66:84:ff:
f7:c5:52:96:81:81:3c:c6:6c:7c:42:b9:19:f2:d9:f6:c7:4a:
f4:c6:8f:dd:1c:ac:63:56:dd:70:25:bb:b2:96:e2:36:6f:84:
9e:f6:ea:1b:1e:77:dc:19:e2:7e:a1:2e:2e:60:9c:f5:96:ac:
0b:d7:5a:f6:95:8b:95:04:9b:a0:6d:a4:a0:3a:1e:48:5b:e6:
6c:47:98:a4:42:87:cf:78:eb:24:16:1c:42:8f:0c:26:22:4a:
bf:70:52:77:4e:7a:00:a1:cb:a3:04:ef:c1:45:db:3c:e3:be:
42:6d:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client