Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: mXDHrZG+2WHVXx+YllXWAAEENevR0peu/Sl4L49gMxo=
Subject key identifier: AA:DA:1C:26:F5:7F:ED:11:F0:5C:BA:1B:63:37:16:53:F3:A4:79:FD
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 01987CE55FCEE133513821A8325E399A07C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 15AF
Signing time: Wed 06 Aug 2025 01:01:03 +0000
Manifest this update: Wed 06 Aug 2025 01:01:03 +0000
Manifest next update: Thu 07 Aug 2025 01:01:03 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: QY6xaa2PWr2z7mftqaHufE8xH6vZfdLOw7LVlT9Yg5Q=)
2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:5f:ce:e1:33:51:38:21:a8:32:5e:39:9a:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Aug 6 01:01:03 2025 GMT
Not After : Aug 7 01:01:03 2025 GMT
Subject: CN=aada1c26f57fed11f05cba1b63371653f3a479fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:b6:c4:52:e2:8a:95:d4:5e:89:ad:d2:ee:
57:ab:9b:57:28:cc:5f:15:ec:1e:49:e3:d9:ed:fa:
0d:00:cc:92:f9:ab:2a:77:cf:56:fd:2f:b0:0d:0c:
c6:15:4b:ac:2b:f9:cd:23:b1:21:19:43:cd:02:9d:
73:89:a6:c1:91:66:2e:dd:02:a3:3c:44:d3:a9:96:
6c:36:2e:17:29:90:80:db:bf:1f:56:ce:f1:15:80:
26:ca:01:aa:6b:d5:d8:dc:76:ac:14:fe:38:c5:32:
8a:1c:e7:59:99:99:a7:c3:3c:b2:bf:47:ec:51:65:
b2:f8:a2:d9:ff:35:7b:12:8f:c6:d0:35:10:2a:80:
3c:f2:fb:f8:52:89:3b:c5:c3:7a:36:d4:a6:b0:9b:
4a:6b:e2:3e:20:9b:a4:22:d4:ec:d1:fd:3f:2d:8d:
a3:2c:70:e6:b7:dd:5a:06:db:69:33:f7:57:cc:84:
11:f0:99:01:23:eb:35:d0:9f:3d:d6:7a:b8:5d:34:
05:fb:5f:c9:52:c6:0a:47:e4:a5:2b:d9:9a:08:0d:
9b:da:72:89:8d:36:82:0c:e9:c7:4f:6b:37:bd:9d:
c5:64:8c:3e:74:b7:bc:4f:c9:6a:ed:1d:06:c4:9f:
70:ef:61:c3:4b:0c:b8:1b:bb:1a:61:a2:59:c4:96:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:1C:26:F5:7F:ED:11:F0:5C:BA:1B:63:37:16:53:F3:A4:79:FD
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:89:de:d8:bc:91:28:ef:a6:e7:78:d7:73:64:67:61:ae:95:
40:bd:fe:ce:6d:4a:46:63:f7:4d:d8:d6:b7:fa:07:00:2a:6b:
0f:f2:fe:ed:cb:e5:2b:db:4a:8d:83:48:e3:a4:b1:c0:44:4c:
98:89:51:54:28:b1:1e:50:88:c3:62:1f:e6:be:ed:0b:18:bb:
c0:3b:1b:b9:9f:ad:d5:04:f3:a3:3a:f9:dc:29:b2:90:23:3f:
c2:49:45:77:6a:1e:cf:88:7e:81:e2:24:d3:a9:57:0e:ec:6b:
be:68:1b:e1:35:9f:48:1c:53:08:b0:71:28:41:ba:0c:a3:2d:
44:f2:5f:41:6c:12:d4:67:12:7f:fc:4d:ce:a8:b4:0e:c7:9f:
bd:37:e6:fc:0a:d0:e7:1a:ba:fc:8b:93:5f:a8:84:14:e5:56:
d2:4a:75:51:d5:c7:f9:8c:53:3d:e7:52:0e:8c:df:f4:18:85:
44:f3:86:61:0b:fc:00:2a:50:a4:44:6d:03:2c:0e:9d:04:f6:
f0:87:5e:00:4c:ce:10:34:31:c2:be:55:3b:36:bf:9d:4f:3f:
43:99:07:b0:90:9b:b1:60:34:58:ea:0f:0b:43:5f:a3:85:1e:
e5:0e:9a:e9:ce:98:49:71:c7:af:43:e3:5c:9d:a3:c5:2f:a9:
6e:ad:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:46 2025 by rpki-client