Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: VC6kfU9iTA6HQrCUfpmXS65dDaA/VPMAi7JBM17foIo=
Subject key identifier: 91:2D:CA:6D:B2:CA:98:F3:FB:C7:05:84:08:9A:5F:F5:7B:31:16:27
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 019874504850CD5C64479FADE9B36CFFF2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 09BE
Signing time: Mon 04 Aug 2025 09:01:15 +0000
Manifest this update: Mon 04 Aug 2025 09:01:15 +0000
Manifest next update: Tue 05 Aug 2025 09:01:15 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: LCDTNfr2sm8Pb6mNhSFCywYehcAlx+Y8FL1YcJFDWf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:48:50:cd:5c:64:47:9f:ad:e9:b3:6c:ff:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Aug 4 09:01:15 2025 GMT
Not After : Aug 5 09:01:15 2025 GMT
Subject: CN=912dca6db2ca98f3fbc70584089a5ff57b311627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:16:67:cf:e7:a9:a4:7f:d6:f1:82:a2:da:
e0:51:4c:0a:b7:46:11:5d:6e:da:a3:81:79:6b:81:
1d:f4:19:c2:5d:0d:c7:02:0d:9b:20:1b:2e:26:9c:
b2:e0:dd:6e:6c:80:26:2a:93:aa:d9:43:67:79:32:
5c:dc:f8:05:05:23:46:59:87:ca:f7:92:bc:dc:b9:
31:ef:e5:3a:60:29:9e:54:8a:d8:58:bf:6d:15:bb:
91:91:7e:81:98:a0:d9:b2:39:eb:89:ed:e5:c2:5b:
32:aa:b0:dc:6c:89:0a:62:72:77:b1:38:39:68:b5:
04:24:be:66:b5:1f:1c:8c:30:ef:57:d7:f9:31:33:
23:6c:5a:1c:03:97:cb:0e:e7:c9:ab:bc:66:83:1a:
3e:e7:49:41:f7:dc:a1:bd:c4:de:5c:b0:dd:8e:6d:
f4:a2:14:ed:ba:58:93:1f:49:6b:2e:36:f7:0f:a6:
51:64:8b:43:2d:1a:75:6f:77:36:bd:85:c7:b8:98:
7d:74:33:4b:87:18:fb:3c:d6:f9:6d:55:3d:33:47:
c9:9c:05:15:ba:92:75:ac:7c:82:d6:0e:8a:28:51:
17:e8:32:99:0f:ea:ed:b1:6a:b4:27:44:27:d4:f9:
5b:c4:c8:7a:12:0e:be:01:c5:bc:ba:5a:34:70:fc:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:CA:6D:B2:CA:98:F3:FB:C7:05:84:08:9A:5F:F5:7B:31:16:27
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7a:b1:f1:7e:45:3a:84:de:01:d4:3c:d7:3c:58:30:80:1d:
03:36:f2:35:26:1d:ab:d1:b8:f4:30:66:00:2b:34:ef:1b:c2:
26:15:87:59:ae:a0:36:e0:a5:c6:d0:00:f9:37:58:6a:12:6a:
0f:b6:32:99:02:3b:1b:04:56:95:bd:74:05:bf:6c:32:e6:4a:
f7:50:24:97:af:9c:99:8d:f4:c4:b6:32:2c:58:f5:27:7f:ae:
f8:08:bf:42:86:0c:46:98:2f:00:ec:be:0f:9e:93:81:17:31:
1e:b3:0a:b3:0e:a1:a6:4d:84:16:d3:e1:29:92:da:29:0a:f9:
07:a6:b4:b3:23:e3:62:93:59:5d:bc:7e:76:54:72:69:f3:d0:
ec:17:08:62:13:30:91:0d:44:b8:c0:16:8f:ce:07:41:38:75:
ac:49:72:d4:f9:b7:26:1b:65:d6:aa:4a:89:b5:ad:7e:7d:33:
01:a2:79:88:38:96:1b:c0:b3:21:05:14:59:7d:3d:af:a2:3a:
f2:92:4e:85:fe:d5:79:f3:8a:1d:8a:7b:7b:3b:c3:75:c6:40:
43:d2:87:15:9b:ac:49:15:62:f9:c4:e1:dd:f8:0e:4e:60:f6:
97:45:a6:ca:3f:44:0c:7b:77:ed:c4:85:8b:58:d7:8f:46:45:
5b:40:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:20 2025 by rpki-client