Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier: AH5x4y/PjST2Z9QIF2IMhC45mNawDdP7cggPAFHBCuA=
Subject key identifier: 17:26:F7:A1:29:DD:7E:01:59:12:5C:B0:1F:43:72:7F:34:C2:90:39
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 01987A1BCBC3890DABCA6016646BB3E5BB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number: 04CF
Signing time: Tue 05 Aug 2025 12:01:38 +0000
Manifest this update: Tue 05 Aug 2025 12:01:38 +0000
Manifest next update: Wed 06 Aug 2025 12:01:38 +0000
Files and hashes: 1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=)
2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: omM2PL6fAkSho7WWld6bVSP5BvP13uzkgg+Y/WYTcTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:cb:c3:89:0d:ab:ca:60:16:64:6b:b3:e5:bb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Aug 5 12:01:38 2025 GMT
Not After : Aug 6 12:01:38 2025 GMT
Subject: CN=1726f7a129dd7e0159125cb01f43727f34c29039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:05:30:a3:20:db:bd:5d:8f:38:d2:03:ce:
85:d9:e9:1f:02:97:a8:23:99:bf:23:17:df:00:14:
bd:98:54:d5:64:1a:3e:94:5f:b9:96:cd:dd:c1:8b:
f4:6c:8f:b2:9a:4f:62:b5:2f:22:60:c5:2b:d8:2f:
46:a7:fc:fa:32:13:21:dd:e7:f8:28:88:81:12:38:
65:94:c7:65:27:13:47:80:81:47:69:27:46:82:c4:
9b:f0:0d:c1:ad:b7:ab:c4:6d:da:08:2b:c4:bb:9b:
4a:19:eb:c9:4d:8d:59:1c:ed:49:c1:2c:3c:61:51:
7c:cd:1e:e2:ba:43:eb:01:49:9b:75:bc:7d:0d:df:
16:ab:d6:8b:31:61:53:f6:66:ff:a2:31:7c:50:5f:
ff:0f:6e:9b:3f:b8:dd:e3:5d:3d:07:a8:9d:94:72:
00:eb:1f:4b:c5:c3:43:8b:80:dc:5b:2a:5e:13:cf:
16:1a:03:be:1b:b5:0b:3b:d2:f4:4b:ad:28:59:cc:
bc:f9:88:c4:63:e5:94:ad:52:6f:e7:17:64:aa:4a:
90:ea:3b:65:ae:24:c4:37:24:af:7a:5f:1e:ab:e1:
94:ce:6a:fb:27:82:7c:66:7d:0d:35:1e:2c:b8:d9:
87:1c:bd:b9:94:58:44:f5:8b:c4:85:22:01:79:8f:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:F7:A1:29:DD:7E:01:59:12:5C:B0:1F:43:72:7F:34:C2:90:39
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:86:88:5b:be:b3:95:ea:aa:f0:7a:67:17:aa:a8:3d:77:99:
59:27:2d:58:27:67:26:3c:77:c3:33:db:1f:d4:a6:db:5b:aa:
20:72:ba:77:ff:d9:0d:bf:c4:2d:b8:07:8b:a2:2d:46:f5:f9:
a3:ee:46:03:95:57:17:f3:a1:a4:b0:e1:06:31:08:52:66:43:
f7:60:68:71:b1:f1:c9:c0:57:c7:e2:a8:3a:24:97:e6:f5:89:
9b:21:39:45:28:89:2d:6d:89:5a:50:74:e2:f4:4a:7c:89:69:
ac:b0:04:af:e6:2b:71:1a:62:b3:a5:15:bf:d8:61:90:3e:7e:
f4:85:bb:10:5b:6d:38:d6:cf:a4:41:b7:02:d4:98:45:8b:d0:
bf:48:3a:cd:fc:24:0a:78:4f:7c:69:c4:80:58:82:00:73:f0:
48:19:46:1d:40:28:44:6f:f8:0e:c9:bc:e9:bf:34:c4:c3:bf:
38:9e:c7:fd:f4:10:02:f3:bd:da:10:a9:e7:62:06:17:1b:0d:
98:77:8f:47:97:cc:b2:cf:0e:2d:e2:a2:28:ad:9c:d2:66:52:
35:43:a2:25:51:b8:3c:38:21:1b:a1:72:3d:d0:58:6f:03:e8:
7f:d1:ef:53:6e:1f:a1:f5:e2:80:78:53:19:9a:3f:4f:17:3a:
53:18:5f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:59 2025 by rpki-client