
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: oyLvo9wio6cEgJEHrMnyMdKsLzLntya2zdRzMAQX+LA=
Subject key identifier: 95:38:7B:C3:8C:EF:54:9F:37:F8:FB:3C:08:5A:18:54:4C:76:FB:1B
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 0198D65F79161845F952582F8A6224E928A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: CIX+qdcBL+8PKpGmp3LCVRq+g8ApH7eVH8gbuCidD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:79:16:18:45:f9:52:58:2f:8a:62:24:e9:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=95387bc38cef549f37f8fb3c085a18544c76fb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:05:83:20:d0:55:01:e3:fe:f7:d9:62:35:
91:67:79:c0:a7:05:8d:7c:25:60:57:27:f7:70:66:
09:65:82:58:d4:28:c8:4e:ad:9b:53:f0:93:81:92:
da:50:89:e4:6f:41:3e:db:f2:0c:b1:02:2f:77:3a:
ac:f9:e8:9a:e1:0b:70:c5:a2:67:94:f8:93:da:cd:
99:22:f2:db:f6:26:d0:04:e7:6a:e2:a5:ca:9e:c9:
84:c7:1b:20:c6:97:2c:7d:43:8a:15:e3:94:6c:27:
56:af:0f:45:83:c5:ae:4e:39:66:8d:96:68:90:a8:
e2:2e:6f:cb:82:55:e7:da:8f:d3:bd:d1:82:79:21:
4a:49:4a:09:f1:78:ba:55:eb:a8:be:0a:2f:a8:ba:
5a:06:99:1d:94:9b:1a:e6:3b:1a:d0:af:2a:fd:26:
7c:d1:e1:64:76:7e:8e:c6:af:0e:93:98:9c:b7:5b:
dc:cf:9a:70:fa:8f:2d:17:35:62:a5:2b:87:e1:66:
4b:c6:aa:c9:45:80:b1:ab:1a:fe:03:97:8b:94:2c:
fe:7d:6a:29:5a:ee:44:0d:dc:24:ea:0e:b8:50:62:
e5:b0:52:4f:d5:4d:2f:75:5d:44:82:e7:b0:a2:68:
e0:2f:20:3c:f3:c6:1d:58:37:68:7b:00:1e:9e:10:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:7B:C3:8C:EF:54:9F:37:F8:FB:3C:08:5A:18:54:4C:76:FB:1B
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f5:ee:56:c3:c2:84:0a:9c:27:7d:e6:68:35:3e:ed:e8:56:
0b:6f:64:de:d3:08:73:28:b9:2e:12:a4:2f:c9:77:b8:83:a9:
9c:3a:00:f5:15:cf:ce:20:d4:85:ec:38:cb:f8:46:99:82:31:
79:a1:f1:78:7d:24:38:de:f7:45:09:08:68:27:e4:42:1c:21:
8d:ad:16:76:35:27:c0:f9:0d:0d:8d:1e:56:30:29:a2:4c:96:
3f:be:b8:af:7f:e0:b9:3d:22:91:16:fa:2f:ab:7f:75:84:d2:
6f:8c:1f:b9:1c:70:11:71:3a:cf:3c:46:52:01:6b:6b:b3:f1:
fb:d6:ef:ee:20:91:62:e8:2c:ed:f4:b5:29:aa:c1:75:8f:e8:
79:73:b6:c9:af:1b:4b:28:85:fa:f2:7a:f3:b2:a7:ee:ed:56:
63:8c:c6:d7:e6:8c:c5:ad:ea:06:17:91:cb:af:a8:89:35:7c:
be:f1:1f:f7:8a:b7:a3:4f:7d:14:eb:51:16:bb:c2:6a:45:aa:
e1:d7:9b:43:45:f6:47:1b:87:9f:74:0d:4d:50:1d:e5:27:1f:
48:a1:9a:98:f8:3b:8a:7a:33:de:98:34:dd:ff:2f:90:01:fc:
44:40:53:be:b2:c3:b8:c1:fb:79:4e:12:b8:9e:72:e0:f6:a8:
a3:2c:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:37 2025 by rpki-client