
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: Ome5R1HJBkW4G4EzKslLNSIDh5/Eh4C21VtlP4EYuJY=
Subject key identifier: 18:92:8A:58:8B:D3:75:F4:9A:43:2D:0D:8B:A9:DC:F0:60:7E:6A:3A
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 01987BD2922ADE18F7574FCAE53A4AF4B5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 20:00:54 +0000
Manifest this update: Tue 05 Aug 2025 20:00:54 +0000
Manifest next update: Wed 06 Aug 2025 20:00:54 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: jeH0WIyWhpFKJ1+Pmib6ZsuEuVfvlBWaCWZRefflqEU=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:92:2a:de:18:f7:57:4f:ca:e5:3a:4a:f4:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Aug 5 20:00:54 2025 GMT
Not After : Aug 6 20:00:54 2025 GMT
Subject: CN=18928a588bd375f49a432d0d8ba9dcf0607e6a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:d7:18:1b:63:19:b8:51:fb:a7:0e:e1:10:
0f:22:bf:83:16:3f:e6:0c:d0:f5:4b:be:8e:a0:32:
6e:4d:fb:12:da:c6:2a:27:9c:e0:02:e4:7e:bd:0c:
33:3c:87:c4:37:4d:6d:ab:af:5a:09:ab:aa:19:04:
a5:c7:dc:c8:10:40:7c:78:2d:ff:05:25:74:c6:6c:
a5:ae:1d:0c:3c:7e:8c:f3:90:d3:2c:cd:a7:bb:a8:
97:32:d8:81:8b:27:b3:26:29:99:1a:38:0c:ed:0e:
b6:c7:85:27:d9:56:53:d5:0c:c2:59:be:05:c3:4b:
53:d6:d4:95:14:c6:4c:78:72:e9:ef:e6:dc:c2:ec:
3d:c7:f7:8f:55:62:2f:ee:6d:ad:67:af:a2:69:69:
82:95:6a:42:5a:f0:d8:e5:73:41:3c:31:8f:e1:48:
cd:1b:e4:28:d5:28:17:b3:97:c7:ac:1c:2e:c7:c8:
f9:e1:a4:14:f6:8f:b9:e2:a5:34:17:1a:41:1e:6f:
a2:5f:8b:cc:b7:96:c3:be:72:d6:c2:ee:0a:b0:95:
5d:1a:2f:79:f6:94:64:b5:26:51:b3:40:ef:12:fa:
56:2e:e1:4b:bb:2a:ea:ff:70:14:74:8d:77:10:89:
85:a1:d4:97:53:e4:3b:c8:84:b4:a3:dc:9a:20:3b:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:8A:58:8B:D3:75:F4:9A:43:2D:0D:8B:A9:DC:F0:60:7E:6A:3A
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:41:bb:77:57:f4:02:1c:f3:6b:59:d6:28:c8:61:3a:e9:
80:e1:87:60:d4:b1:4a:c5:21:3c:8f:c9:cd:8f:66:35:69:46:
23:09:3e:8c:41:4b:ac:34:82:1f:a2:fd:05:e6:83:e1:92:44:
93:a8:43:64:0d:8f:10:df:f5:7c:2e:90:d0:43:4a:4f:be:01:
67:b5:57:6a:61:8d:8d:13:71:8e:7d:ad:37:2e:d7:c8:9d:f3:
49:c0:3f:34:07:b9:b6:05:22:87:8f:2c:cc:1b:8a:90:96:91:
a0:f3:61:28:a1:02:7c:bd:9c:28:1d:c2:a7:bd:4e:13:9c:13:
1e:2d:fb:91:0f:cc:e7:ee:75:05:ff:3f:c2:33:24:3e:55:23:
25:7f:6d:5b:88:4d:bb:e4:cf:00:70:94:48:b2:0d:3d:ab:22:
7d:01:b4:03:ac:b5:4a:a9:94:14:68:df:7c:21:fa:26:01:c2:
8d:5e:11:13:b5:09:f0:1b:4a:5f:03:b1:10:ef:51:a4:f1:39:
7f:c4:86:94:08:a4:b2:12:1b:54:a5:b8:ce:89:0e:10:ce:3d:
28:8a:e9:b7:ea:f8:5d:0f:60:fb:e8:57:2e:e7:12:e6:8a:9d:
af:31:e0:5d:32:a9:d6:5a:c8:23:23:1c:ec:65:92:f5:80:f1:
93:cc:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:58:39 2025 by rpki-client