Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: DhbAp1ZVPsf9qsfhYsM4K8OYgAZ+dMdHlNTOa4zzq6U=
Subject key identifier: EA:61:8C:A6:49:1D:71:8E:9E:84:13:B5:4C:D5:51:C8:14:B9:51:5F
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 019A4EF458BCF22545DD96A88FEE02DA07E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: GqDCrqRJyBXgdRtCDroUCJhXrkb4hbocyM+iJccXQ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:58:bc:f2:25:45:dd:96:a8:8f:ee:02:da:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=ea618ca6491d718e9e8413b54cd551c814b9515f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:bd:4e:b9:16:cc:7d:ab:98:20:cc:45:cb:
a0:61:28:c8:08:4a:3f:3d:e9:90:08:7c:8c:73:33:
db:a8:11:0e:a3:77:de:58:c1:78:69:b0:6f:ef:b9:
39:98:6a:f4:ff:7e:a2:03:6d:d9:39:c6:7d:0a:03:
f0:00:a6:1b:09:13:68:b9:e8:71:95:d6:36:b2:ea:
9b:aa:be:b3:70:28:66:7f:94:7f:49:b6:97:75:13:
eb:d1:10:8d:3c:c1:40:bc:ef:62:6c:b7:b3:24:17:
30:52:db:13:cf:fb:21:11:13:3e:f0:1b:b2:1f:93:
e9:0f:06:29:36:94:cf:45:08:71:78:5b:cf:09:c4:
a9:22:b0:d7:8c:8e:28:21:8f:69:7b:63:53:2f:9c:
eb:d3:66:54:f2:cc:ad:02:03:ad:fe:7f:54:25:10:
39:58:64:b1:b7:17:8e:f9:52:f2:1b:9a:53:30:a8:
3f:ed:df:b1:bc:a5:14:af:85:e0:bf:ae:06:68:53:
9f:5b:7f:29:06:60:e2:64:41:81:73:39:68:98:94:
93:55:0b:2b:1b:98:6a:ae:62:cd:27:73:1c:30:57:
0a:52:32:ad:9c:c9:86:22:5c:5c:a5:02:21:01:41:
7a:a0:f6:94:de:c3:18:38:2f:02:b7:63:08:1e:08:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:8C:A6:49:1D:71:8E:9E:84:13:B5:4C:D5:51:C8:14:B9:51:5F
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:03:78:33:54:6b:2d:12:54:1a:a0:56:27:92:ca:ae:64:6a:
fc:1e:b3:a8:2f:99:7c:de:b6:99:06:6a:4a:db:bf:01:64:92:
c8:0f:c9:5b:ad:96:b0:d8:45:1a:d3:27:ea:df:0b:28:5b:47:
6b:7e:eb:be:aa:37:29:5a:7d:41:9c:8c:37:86:f2:30:8b:11:
5c:bb:89:42:54:f9:6c:7d:1b:a5:d0:e5:9b:52:7f:f0:51:1a:
ea:7a:f5:31:2a:6d:18:4f:36:e8:a2:ab:e9:3f:7d:bf:29:09:
f1:92:9d:89:6a:1c:05:27:20:97:b4:1d:0c:52:19:72:7a:2b:
73:f0:16:12:40:81:82:20:47:49:5a:56:67:ae:7c:65:b7:02:
06:5b:63:8b:ea:1a:12:da:34:ab:d5:9f:c9:52:c8:0b:6e:0e:
b4:42:3f:ce:4c:b4:f2:f0:81:59:2a:4d:1d:f9:5f:d9:6b:16:
56:eb:45:2e:b6:30:e4:c1:07:23:82:d0:2f:e7:11:23:5d:05:
d6:c1:50:a4:46:4e:17:f5:56:5f:37:30:e1:5f:67:b6:aa:39:
5a:2f:5b:27:91:4e:11:ad:e8:ce:90:0d:e8:b2:28:fe:e8:0d:
56:c7:4b:fb:85:66:24:9f:e2:13:c1:c1:ef:30:a8:44:71:24:
23:0f:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:00 2025 by rpki-client