Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json)
Hash identifier: GxgyOGKSTRnYIIJeBzfG0nQRJPX46PbqRBZDYc9Pr4o=
Subject key identifier: 5F:D9:99:E6:11:5B:58:C1:14:06:88:43:40:44:BA:DE:40:34:96:21
Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Certificate serial: 01994B890B8EADE128E108EBD5C0AFA9A1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
Manifest number: 0379
Signing time: Mon 15 Sep 2025 04:01:36 +0000
Manifest this update: Mon 15 Sep 2025 04:01:36 +0000
Manifest next update: Tue 16 Sep 2025 04:01:36 +0000
Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=)
2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=)
3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: bc8+1UalrETRsxOma3+cmQ88RtZdjLaCXf29KiZEK64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4b:89:0b:8e:ad:e1:28:e1:08:eb:d5:c0:af:a9:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5
Validity
Not Before: Sep 15 04:01:36 2025 GMT
Not After : Sep 16 04:01:36 2025 GMT
Subject: CN=5fd999e6115b58c1140688434044bade40349621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:c1:85:34:64:37:77:eb:c9:06:7f:98:6f:
66:4d:8c:f3:b1:c0:ba:98:f2:a3:a4:87:c9:0b:c3:
71:64:b8:8d:d5:39:3f:77:ac:f4:c8:4d:4c:b9:fe:
d3:70:85:cc:0d:40:ec:5f:f4:0b:fd:27:f6:70:c6:
12:cd:c9:fc:99:1d:7c:5b:15:08:28:71:d3:7b:d3:
a8:08:eb:3b:54:3a:cd:5c:51:21:28:28:c0:ca:e9:
d4:70:1a:19:6c:f4:80:9a:77:9c:cc:ab:d6:d5:37:
6a:22:4d:63:0e:85:f5:a2:fe:ce:70:6d:80:fd:4b:
0f:66:c4:4c:b5:48:d0:cc:51:38:48:fc:b0:63:f1:
2d:17:6f:58:2e:60:41:f3:2f:0c:e5:1e:b0:9a:b5:
b6:1e:45:48:e7:bd:e9:e6:db:06:8b:26:ec:40:6c:
05:65:3e:9b:49:ad:dc:eb:a9:69:f9:50:57:9c:0d:
74:41:dc:22:87:9c:b7:db:f8:90:e3:64:81:13:82:
95:52:cf:ee:af:37:e9:ad:b7:76:4a:9e:e3:0d:93:
5e:ec:4f:c9:49:4e:8b:ec:c6:e0:e8:a0:1a:1d:5b:
25:92:61:a9:6c:d4:68:10:f6:fe:4c:e3:bd:9f:cd:
75:4f:fc:40:8a:3b:3b:d2:58:47:37:a2:80:17:8b:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:99:E6:11:5B:58:C1:14:06:88:43:40:44:BA:DE:40:34:96:21
X509v3 Authority Key Identifier:
keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1f:9c:9c:0d:1e:aa:eb:ee:bf:42:7d:23:01:fb:64:4b:d3:
f3:f3:86:f1:2f:68:a8:2f:7f:b8:6a:2c:81:37:0b:24:3b:36:
6d:f7:90:83:ac:7f:1f:dd:9a:f6:78:27:3d:cf:22:a4:62:5d:
df:9a:68:e9:2a:69:0b:5a:bb:46:97:2d:a1:9e:3a:c7:54:41:
67:b1:cc:f7:ff:18:70:1a:30:79:da:de:00:e0:cf:a8:b6:f2:
42:53:7a:a1:de:41:b4:d1:c6:41:a0:49:1f:42:d4:af:c1:80:
e4:e3:33:ae:51:f0:15:6d:de:38:0f:96:98:a0:f4:77:c2:a0:
25:0a:29:75:aa:c8:11:4c:93:ab:23:5a:10:62:39:88:67:fa:
af:57:22:da:77:2e:55:4a:f6:35:c0:af:7f:ec:14:0e:28:e1:
52:09:fb:81:ce:29:50:a5:41:a5:b0:56:8c:a9:99:68:b9:ee:
67:fb:2c:8d:ba:35:a7:e4:6f:89:f0:4a:63:f7:c0:a0:57:65:
cf:bb:bb:f7:09:6f:f6:af:a6:1e:6a:0f:93:06:2b:0d:64:e4:
c5:5b:01:43:5b:dd:5d:e8:03:51:47:d0:c1:4f:aa:f7:e8:cd:
3a:94:28:76:4c:d3:65:0d:72:eb:3c:09:0c:74:42:ca:3b:16:
d6:13:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 11:53:32 2025 by rpki-client