Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: NBYdS/pulwKlz/AVEKO9roT1l1AcTNNq/4pPJhe5eHI=
Subject key identifier: 67:50:68:37:4A:A7:5A:46:12:5D:CB:A9:C2:FF:68:28:84:36:E8:F5
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 019873E3AB42E6D9FE71F697A7B95040F51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:37 +0000
Manifest this update: Mon 04 Aug 2025 07:02:37 +0000
Manifest next update: Tue 05 Aug 2025 07:02:37 +0000
Files and hashes: 1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: ez1B08sXgLV4/GCD+nCEssLmuj/gTqRp1FQFUFyn5tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ab:42:e6:d9:fe:71:f6:97:a7:b9:50:40:f5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Aug 4 07:02:37 2025 GMT
Not After : Aug 5 07:02:37 2025 GMT
Subject: CN=675068374aa75a46125dcba9c2ff68288436e8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:53:58:3e:24:a6:f8:ea:a4:d2:6d:a2:de:
df:5d:53:ae:d9:f5:8e:26:bd:d6:c5:14:d4:85:b9:
ab:ef:04:df:b6:a4:3e:66:36:2e:a6:2c:c4:b1:19:
aa:ba:7c:72:e7:99:81:bd:83:e3:e7:39:9f:62:bf:
49:6f:db:e4:48:ed:58:85:cc:c4:b0:8c:7e:e6:62:
0c:31:ce:2b:33:c6:61:00:f1:69:fe:4c:9f:69:b7:
3c:bb:6f:de:05:f9:35:e2:21:66:de:d1:9d:10:a1:
2f:93:7c:42:10:d5:f5:e7:77:13:f1:8a:b8:f7:e3:
90:c2:99:8e:5c:c6:35:b8:13:95:24:23:64:d8:63:
b0:24:d4:2c:e3:18:97:fe:85:92:86:3c:61:cd:5d:
ec:5b:62:02:7c:fe:30:80:45:3e:f9:b7:ac:3f:06:
1a:ce:94:a2:e5:13:82:c7:92:30:ad:91:69:ac:31:
c4:99:63:63:df:06:8d:99:be:2e:39:49:fd:f1:74:
1c:3e:b7:26:c5:cf:1f:33:14:d2:9a:a6:42:bb:70:
e7:fa:dc:ae:30:c9:58:cc:35:e9:74:af:8f:a0:d9:
8a:3b:af:aa:3f:6c:7c:81:c0:6e:da:53:ac:ae:df:
f2:b3:68:89:56:ae:18:f9:7a:56:1e:51:db:38:ae:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:50:68:37:4A:A7:5A:46:12:5D:CB:A9:C2:FF:68:28:84:36:E8:F5
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:12:d3:e4:71:4f:fb:df:8e:7d:6d:cf:2b:4c:f9:0d:93:59:
66:79:93:80:13:29:a0:dc:eb:35:a9:08:f3:b5:de:44:fc:53:
1a:10:3d:11:06:f2:a9:a2:51:8c:1c:19:9f:0c:fa:af:d8:36:
92:00:42:f3:8d:bc:cf:8d:97:dc:a1:09:0a:35:ae:a0:c7:9e:
6d:36:0c:68:50:2f:cd:37:8f:ae:72:8c:a5:7b:c2:67:b7:3a:
a2:52:32:70:a3:f4:f6:82:e2:7c:cd:7c:6c:06:2e:d4:8f:56:
a6:63:62:02:d2:87:01:bb:6b:ad:59:b0:ea:a4:63:3c:25:a4:
7c:20:9d:dc:c4:8f:6a:5c:ab:b4:d1:7d:9e:d7:42:ad:15:a0:
5b:a5:aa:81:93:3a:56:1c:d4:37:94:d4:36:d9:47:df:32:01:
e5:4e:d7:ef:38:8b:cf:b8:38:d6:b8:ac:66:ce:1c:56:c1:0d:
30:ad:15:03:8b:65:24:3d:98:f2:b6:b6:5d:12:a8:0c:8c:d7:
f6:5f:7c:23:de:e3:87:74:b2:7f:ea:5f:9b:4b:a8:0b:a1:b8:
b8:03:52:39:cf:25:ef:fe:e8:8f:3b:00:9f:27:71:ae:56:f4:
ec:e5:be:e1:79:fd:5a:c9:90:72:84:6d:7d:53:85:45:c0:df:
b5:2f:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:26 2025 by rpki-client