Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: gFBRgiWyu/b5Q2OPyTmGal1+AdgAegpPIBBSscap2RE=
Subject key identifier: 8C:4B:E5:96:9E:1C:E4:E5:BD:33:23:D8:C8:A7:5A:33:00:51:02:99
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 0198861EF74F85E0C5D0C977F0B25A76410C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 151F
Signing time: Thu 07 Aug 2025 20:00:32 +0000
Manifest this update: Thu 07 Aug 2025 20:00:32 +0000
Manifest next update: Fri 08 Aug 2025 20:00:32 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: YRO0mrqEteuuBai2L4DTtJVouj2FW61GyZuBtIchc7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1e:f7:4f:85:e0:c5:d0:c9:77:f0:b2:5a:76:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Aug 7 20:00:32 2025 GMT
Not After : Aug 8 20:00:32 2025 GMT
Subject: CN=8c4be5969e1ce4e5bd3323d8c8a75a3300510299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:75:b7:a4:65:f1:c5:be:52:84:6b:05:de:
78:aa:5e:d4:09:96:4c:65:9f:0e:46:a3:2e:49:53:
9d:69:e5:f0:b3:76:fd:3e:0e:c5:fd:51:4d:dd:64:
fd:43:45:68:8e:48:6a:74:df:5f:92:3a:cd:7d:9a:
15:7a:25:6a:7c:9e:7a:3d:f3:94:6a:26:d7:1c:90:
62:3a:03:9c:24:ac:c2:c2:aa:68:65:0a:62:8a:97:
82:27:01:e4:ba:47:72:4e:4e:fd:40:c9:a1:d5:94:
de:16:f2:51:de:23:fb:e9:a9:5c:80:ef:b7:e5:51:
54:a7:99:1f:6c:68:39:c0:ab:e8:e9:a0:f7:53:2a:
f0:21:26:11:d9:11:dc:a3:fc:43:6a:40:59:e2:da:
37:19:c2:09:27:4c:b1:9d:ee:0f:35:19:00:6b:05:
04:93:48:48:d3:78:f8:6a:9d:aa:04:50:45:c7:98:
eb:04:1f:08:9c:66:07:66:73:2d:92:cc:ca:ee:ac:
2f:9c:44:06:84:c2:78:fc:eb:74:81:a5:41:f0:c1:
35:aa:33:03:ad:0b:04:e2:58:8f:cc:7d:81:f9:7f:
d0:83:79:8b:d4:aa:16:5c:7c:c5:53:56:27:64:a7:
fd:a2:a2:f1:72:51:9b:c2:2e:18:7d:fd:62:3f:3e:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4B:E5:96:9E:1C:E4:E5:BD:33:23:D8:C8:A7:5A:33:00:51:02:99
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:e2:14:e0:84:b6:af:86:99:b2:1b:9d:f5:dc:86:cf:cb:
47:99:4c:61:e0:96:c9:8c:2c:c9:6c:9c:2a:e9:cd:93:c7:5d:
f2:0b:d9:e4:8c:16:d6:a9:0c:63:16:82:79:38:8f:8e:6e:e2:
57:47:04:93:41:d4:71:96:9e:e1:eb:90:92:40:37:11:2e:8a:
b8:22:79:2c:ef:03:a7:89:34:63:2d:88:89:5a:44:64:ce:e1:
90:55:00:a9:b6:ab:f1:2f:a0:36:9c:6a:8a:99:d3:7d:6d:3f:
4f:d8:8f:8e:76:57:49:a5:55:4a:c9:45:52:bf:38:33:15:cd:
ff:1e:04:7b:d4:d7:36:f5:26:9f:79:83:30:3b:c7:90:81:dc:
a6:1c:99:0f:86:68:c7:a6:9b:6c:ab:ba:04:b2:5c:9b:a3:b8:
11:75:d5:53:fc:b1:74:88:44:26:de:b6:21:48:56:16:70:f8:
bf:39:25:ee:40:9f:f4:77:2e:72:4f:f8:8a:54:d1:a9:67:7e:
67:bc:ff:08:0b:24:59:f4:cb:6a:22:a3:29:96:40:59:8d:88:
6c:01:25:e3:8e:94:e4:47:36:f5:c4:7e:c0:0c:2f:bf:37:3e:
a3:b2:64:0a:19:83:73:14:1b:9e:c8:fc:c3:e0:3c:ed:34:0e:
df:45:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:49 2025 by rpki-client