Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: i9uga/qCjS61nIt+nmI73PfvlUEEbfx0HTn7CcIICD0=
Subject key identifier: D2:D1:D2:FC:09:F1:7E:54:8A:B8:61:5B:2F:13:0C:55:7B:1A:69:75
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 019873E30FB7AB6DB35B8AB5CD6AEB5B6AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: 6a7mWQ0H1nBO4rwq9eRUEwRvB0yqLeKUOmSMsECRRjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0f:b7:ab:6d:b3:5b:8a:b5:cd:6a:eb:5b:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=d2d1d2fc09f17e548ab8615b2f130c557b1a6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:39:31:ea:41:33:23:91:94:97:2e:6d:4a:
6f:7d:49:fe:11:42:1a:7b:9f:b0:1b:76:1c:b2:95:
f1:2b:fb:6b:5e:96:82:7b:71:85:01:49:d5:03:30:
de:8e:48:ee:13:5a:b3:e2:bb:73:c2:ad:b1:07:3e:
ac:1d:cc:e1:84:70:77:e8:1b:73:9f:e8:76:93:8c:
76:c7:cd:17:1d:3a:50:53:d2:06:46:4d:b9:a5:9d:
77:27:0f:37:cc:17:ed:b4:1c:55:17:87:7e:20:2e:
60:a0:07:af:b2:f3:2a:a0:67:a9:2b:12:b3:70:d9:
28:40:49:26:d5:6b:3d:74:05:fd:23:29:22:b0:a8:
21:1f:94:e3:5f:b4:e8:f5:fc:6d:c3:9f:74:9a:16:
77:2c:e3:19:d8:89:68:9a:7a:37:7f:c8:c1:fd:32:
0c:a9:b5:78:8d:eb:34:d0:9d:ba:9e:9d:26:a7:37:
34:a7:06:2d:49:de:46:89:40:8c:58:8c:49:85:a8:
ef:1c:9b:26:f2:fb:9f:32:9f:f3:54:09:98:1e:b2:
34:da:5c:95:60:0d:bb:1b:54:27:a8:fb:27:3f:9b:
8c:7b:29:40:1e:11:3c:6d:0d:69:4c:03:79:b8:25:
26:0d:8e:bf:f0:44:f2:34:ba:85:5f:b0:60:b8:df:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D1:D2:FC:09:F1:7E:54:8A:B8:61:5B:2F:13:0C:55:7B:1A:69:75
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:90:ea:8e:64:3b:66:d1:6c:ae:42:22:cd:27:16:73:d5:00:
40:2c:ed:cf:93:5a:8f:5d:f7:a4:fa:33:73:77:97:eb:0d:ab:
a6:6a:05:8e:9f:34:e5:92:27:c5:75:02:e2:bf:58:74:f0:a1:
9c:11:77:74:f8:c8:64:13:ba:f5:8c:40:f9:72:57:98:c4:9d:
ec:97:8d:6c:b0:98:4d:66:9a:69:14:33:6b:e8:89:dd:67:c5:
e8:58:e4:5f:a1:af:78:7f:06:1c:c5:c6:9a:19:d0:c4:4a:21:
50:96:c7:78:4c:40:09:b3:5a:b6:c5:28:05:66:6c:d5:dc:ab:
1f:02:23:0f:36:ab:c9:c7:a4:a2:90:aa:72:16:20:fb:fc:d2:
06:ea:7a:15:a5:59:5a:5a:31:b1:44:e1:0d:92:b7:58:e4:c5:
02:67:a8:a6:48:0f:ea:c3:3e:f0:a3:6a:da:ef:f9:cd:7a:17:
54:0d:a8:5e:46:d1:6f:ef:f4:01:42:80:95:b4:42:a6:ee:85:
59:22:78:d0:e9:e0:fd:d1:af:34:4b:26:11:0f:f1:61:af:42:
23:bf:58:f5:a3:b5:5e:15:1c:7c:60:2f:61:a1:95:8d:bc:3a:
f2:11:17:06:6e:3a:7f:0c:3c:48:93:ec:a4:61:41:4a:26:8a:
e2:3b:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:21 2025 by rpki-client