Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File: mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier: AnVdT839srP16Ri3DcaMFoJrOBj+JiFnCIznoFiDUQ8=
Subject key identifier: 85:FC:56:02:5E:57:F6:6D:61:B7:B5:13:33:EE:DB:CD:DA:12:2A:FD
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer: /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial: 019A4DAA8D8EBB59CDEB69F10D873E6547DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number: 0B70
Signing time: Tue 04 Nov 2025 07:00:14 +0000
Manifest this update: Tue 04 Nov 2025 07:00:14 +0000
Manifest next update: Wed 05 Nov 2025 07:00:14 +0000
Files and hashes: 1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: keHqopll3L0zq0oTYmNt05HyDLhTuFd2yPONcAkj8rU=)
2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8d:8e:bb:59:cd:eb:69:f1:0d:87:3e:65:47:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Validity
Not Before: Nov 4 07:00:14 2025 GMT
Not After : Nov 5 07:00:14 2025 GMT
Subject: CN=85fc56025e57f66d61b7b51333eedbcdda122afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:b2:f7:00:8d:33:b5:ed:84:59:40:be:09:
5f:68:d0:77:8b:15:da:76:f5:81:24:47:df:43:5b:
a7:f0:fc:0c:7e:82:30:83:1e:a2:02:df:1f:c9:63:
3f:b9:cf:d4:c7:0b:25:b0:1f:a2:57:e3:2f:33:c8:
04:03:95:0a:f1:ab:05:50:22:ca:81:09:34:63:22:
b8:f9:28:cc:de:28:0c:0f:55:a6:d2:62:ea:b1:67:
03:b9:9e:ee:b6:16:73:21:3f:ad:58:8b:c9:c5:4a:
ef:0c:0f:a7:14:bd:13:d3:62:bb:a7:74:a4:6e:16:
21:ed:44:1c:18:5a:78:e1:29:d7:5e:ae:e4:93:92:
ba:e5:68:c6:f0:c3:ed:bb:29:ad:b4:e5:ef:72:8e:
95:8f:91:15:c9:3f:b1:52:a6:65:d6:84:96:a8:4d:
ad:a5:02:c9:bb:56:d6:b2:43:0e:0e:af:6e:8a:95:
b4:8e:62:8e:3f:eb:8f:62:5e:f7:61:aa:52:fa:7d:
4d:b6:36:87:c4:67:6b:ce:b1:bf:6f:4a:a9:c1:4d:
a5:89:65:0a:e6:e0:97:53:43:96:14:1e:86:c8:48:
ae:02:87:d4:f5:30:f9:79:de:ba:a5:b0:86:ab:2f:
e6:70:25:05:65:f5:53:ef:ea:f4:b4:14:55:ed:12:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FC:56:02:5E:57:F6:6D:61:B7:B5:13:33:EE:DB:CD:DA:12:2A:FD
X509v3 Authority Key Identifier:
keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5c:f6:48:03:ed:a6:d5:22:c7:88:e8:39:70:0a:32:68:e9:
5a:a9:76:e4:9a:23:9d:4a:dd:9a:21:8e:8a:7e:60:95:de:77:
1f:55:48:cc:80:40:13:0a:98:52:57:56:57:62:cc:e6:34:ea:
bd:33:41:6b:77:4a:89:a0:3d:20:81:9b:61:6b:ab:1f:09:b2:
15:6e:2f:0d:60:ed:f7:d4:42:5d:aa:c2:79:69:1e:7d:8e:95:
33:27:eb:18:42:b1:e6:11:a4:a4:3e:71:66:97:b1:f3:03:ae:
ea:9a:cd:2d:e1:95:2a:88:ca:04:37:d6:f5:fb:fa:29:4b:91:
58:69:3c:ae:21:a3:f2:5e:01:8d:14:b5:63:74:e0:86:d4:59:
3e:4d:0e:47:40:07:88:12:8b:0d:f3:e7:80:5d:60:21:bd:cf:
f5:60:e0:23:81:97:ab:c4:6c:84:c0:d2:93:d4:23:39:e1:8d:
b1:15:4c:58:cb:04:08:94:00:1f:49:c4:10:49:6b:7c:cd:d2:
d7:3f:31:7a:07:6b:ea:ec:0b:93:7f:6d:1e:97:36:b2:8c:73:
b1:96:99:ba:2e:84:e7:77:a3:28:98:5e:12:f9:6e:84:11:41:
dc:cc:8e:e3:46:55:47:84:6d:0a:52:c9:d7:81:b1:f5:dd:02:
62:4d:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:52 2025 by rpki-client