Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File: mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier: foBa6oCXs+HMU0wd07hfsognIkVxbItYFiz7pXDsLog=
Subject key identifier: 12:68:B7:67:DB:D2:1A:BD:C1:AF:F7:04:C5:83:87:E6:D8:E0:6B:89
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer: /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial: 019A4D73A102AACE792A982829F88C5EEFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: 6VEj8hFX83dP4cTfcpFmDeB3WK4.roa (hash: 9iNEtr8XsCFGn75dg2M+2IpdUdlrA9H+OLDn6Iw/O78=)
2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: kgfxKjdA8WgqkJvBLfB3KxpqWfgja5I6dNv/eASIPgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a1:02:aa:ce:79:2a:98:28:29:f8:8c:5e:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=1268b767dbd21abdc1aff704c58387e6d8e06b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:52:de:d4:3b:1c:32:55:cc:89:c2:b8:fb:
9b:f8:9f:82:04:90:2a:98:b6:59:96:32:8a:c5:43:
0d:0c:bf:17:87:e6:c3:18:a3:76:45:d9:40:8f:be:
bc:9c:4a:22:c4:fb:43:13:69:c3:96:be:2d:73:a1:
47:83:19:89:3b:91:3d:d3:7e:ec:33:fe:27:4b:18:
fd:cc:ee:0f:e5:23:62:99:e4:f9:bc:21:ad:85:b9:
fe:0a:c7:26:22:8b:dc:30:49:ac:e4:18:60:18:3f:
73:90:bf:78:ca:88:4a:df:73:e4:48:38:d9:22:96:
17:70:b7:ea:72:81:4e:9e:cc:5e:ca:58:99:bc:7f:
66:da:67:bb:b9:d4:ca:83:48:c2:15:f8:4c:30:a7:
24:5f:52:c0:56:6b:1a:c9:b4:e1:6d:a8:7b:fc:d4:
46:7d:75:06:1d:02:ed:1f:05:16:36:49:d9:f1:fe:
7f:82:b5:2d:a0:0a:bb:89:5e:bb:b1:16:dc:32:b4:
dd:54:b1:79:39:24:a1:1f:90:1b:82:60:3d:68:b7:
8f:c3:fb:ac:83:9d:fb:8f:14:12:79:3a:54:2e:cd:
16:45:2b:11:34:c0:f7:56:6e:df:be:0f:f6:95:8c:
70:ca:77:67:a8:72:52:ed:70:7c:20:f9:90:f5:94:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:B7:67:DB:D2:1A:BD:C1:AF:F7:04:C5:83:87:E6:D8:E0:6B:89
X509v3 Authority Key Identifier:
keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:0f:74:b3:84:14:3d:7e:a3:94:f8:ae:71:a1:bb:61:7f:
3d:a9:f8:d6:00:b0:f8:53:95:73:3e:1b:76:33:c8:e8:b5:d6:
91:69:c8:74:9b:6b:8f:24:37:86:8a:43:3a:83:46:15:8c:25:
0d:4a:ba:62:92:c3:2c:de:6a:3b:ad:a8:a8:bc:89:45:00:8d:
c6:3b:88:db:22:6e:36:9b:0e:dd:65:84:16:28:ef:1e:b4:e8:
66:07:70:36:05:bf:80:54:93:aa:da:64:49:d4:20:d3:a6:56:
67:96:dc:13:cd:03:ef:30:d4:8e:2d:ee:d8:70:e9:c9:2c:ec:
b5:6c:9b:fa:ed:07:0b:d3:e8:6e:d4:db:01:84:2a:88:a0:19:
06:b2:cb:c2:6b:da:f0:5a:41:ac:cb:ad:64:6e:f7:1e:6c:85:
75:ac:b2:72:51:61:d7:ee:62:16:61:5b:d8:8d:2a:5c:1b:24:
14:68:27:7e:80:39:87:bf:1b:c2:38:4c:39:f0:f1:9e:5b:31:
f2:be:b9:48:61:78:f3:65:df:46:c0:4c:c6:1a:ce:28:18:dc:
e1:60:ad:4b:60:8e:47:85:74:33:32:ad:69:e0:b9:40:c8:20:
f5:50:27:6c:35:2b:17:f4:4a:85:05:60:f1:01:90:1e:10:ce:
a0:32:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:36 2025 by rpki-client