Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
File: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft (raw, json)
Hash identifier: 1DNkZTWpemXFDOMQ1n7W3tKT2PWT89Z8FOjWxP6/zRo=
Subject key identifier: C4:4A:10:D9:69:F8:AF:6E:3D:9D:2D:DF:2F:7B:10:7D:04:03:EE:00
Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Certificate serial: 0197B6A0FB11B7E4F4E921FAFC3124B53C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: 9iuKUiRNNk0yJqP9x1MG2I_7d9s.roa (hash: OJC+CIaFp/mpbSmO0wI1lGEv8Ek7U6QE2MP4Wm3PDaM=)
2: MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl (hash: lz6mK+pA3sTKiDNfw+gILeAl3rOrvc8zpe6usvgS9ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fb:11:b7:e4:f4:e9:21:fa:fc:31:24:b5:3c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=c44a10d969f8af6e3d9d2ddf2f7b107d0403ee00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:1d:a4:a3:e3:9a:e7:cd:b6:92:a1:99:83:
05:38:5a:19:fb:39:69:20:5e:48:0a:6c:4e:bd:32:
ef:bd:cb:13:32:fa:aa:e6:bf:4a:5b:bb:60:43:8f:
5c:73:4b:2d:71:d6:67:34:71:e3:13:e3:17:53:c8:
64:a8:99:91:6e:c9:b3:23:6e:bb:ea:03:0e:3a:27:
90:11:60:95:b3:0d:38:f2:6e:b8:31:4d:5a:2d:0e:
1f:62:2f:8a:ed:34:1e:02:96:50:73:b1:77:42:b4:
a9:84:69:85:3d:66:a6:00:02:03:d1:9e:2d:74:3f:
b7:3d:a7:f7:a8:08:cd:68:6c:9b:96:99:7c:1c:03:
3d:e9:8a:d1:d6:9f:a5:e7:5c:a4:7a:c7:1b:c3:45:
c5:5f:1a:53:ed:10:5d:9d:bb:e7:5e:aa:c1:db:5b:
b5:f4:3c:1d:e3:5e:ea:5f:39:5b:11:8d:5b:71:8c:
16:cf:d3:35:9d:46:79:bf:d1:74:6a:fd:40:9b:e2:
26:48:00:dd:b4:8e:b8:1b:04:4e:4c:d4:80:de:3a:
bb:fc:ac:79:61:5c:2a:d2:8e:bc:c6:a9:fc:04:e6:
47:21:1a:5a:20:83:c9:a1:5d:6a:8f:43:05:f6:08:
1a:33:31:89:34:7d:a6:72:5d:41:53:a5:ea:44:e1:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:10:D9:69:F8:AF:6E:3D:9D:2D:DF:2F:7B:10:7D:04:03:EE:00
X509v3 Authority Key Identifier:
keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2e:0c:2f:49:17:47:f5:22:df:ed:53:fb:d1:1d:ee:5b:d0:
54:4f:e7:d1:04:eb:14:94:4d:23:16:7d:31:38:b6:5c:ff:7e:
a7:40:05:ed:19:d8:f1:e7:e7:08:29:dc:63:05:99:8f:9c:53:
8e:5d:1b:bd:4c:3d:d7:ff:99:fa:14:a1:6d:03:22:f4:e3:96:
75:a9:e3:ca:f1:a1:55:10:c3:46:86:54:5f:90:fb:08:6d:b1:
26:c6:9f:90:7b:1f:b8:06:1a:9c:56:ab:d8:a7:56:a5:a6:3f:
41:c0:2d:ac:04:10:42:52:44:60:cd:db:eb:78:25:2d:7a:90:
42:ec:c7:72:0f:7b:0d:ba:a0:85:08:24:65:d4:b1:e1:5a:20:
f4:be:f1:2e:8a:bc:09:cb:3e:39:f8:45:84:14:da:6b:25:72:
55:c3:b4:8b:7e:11:98:fd:b3:07:6e:e6:fe:f6:d5:8b:4b:47:
7c:02:8f:c3:d7:34:74:35:a1:b6:c5:e6:f1:af:83:86:d0:99:
8a:73:5f:14:23:df:35:ee:4b:94:45:f4:35:6e:a8:9d:f2:fe:
d5:65:fd:e1:4e:b4:3c:1b:92:2a:9e:4a:a4:75:74:d6:18:c0:
de:bd:d1:bd:a6:88:76:81:ba:e3:08:b3:10:14:cf:f3:e0:e6:
65:99:80:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPsRt+T06SH6/DEktTxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjkwZDI1MjBhZDYxOWFjMzA2MGIzOWZiZDJjMjA0ZTI5
YTJhMTQwHhcNMjUwNjI4MTMwMTMyWhcNMjUwNjI5MTMwMTMyWjAzMTEwLwYDVQQD
EyhjNDRhMTBkOTY5ZjhhZjZlM2Q5ZDJkZGYyZjdiMTA3ZDA0MDNlZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGAdpKPjmufNtpKhmYMFOFoZ+zlp
IF5ICmxOvTLvvcsTMvqq5r9KW7tgQ49cc0stcdZnNHHjE+MXU8hkqJmRbsmzI267
6gMOOieQEWCVsw048m64MU1aLQ4fYi+K7TQeApZQc7F3QrSphGmFPWamAAID0Z4t
dD+3Paf3qAjNaGyblpl8HAM96YrR1p+l51ykescbw0XFXxpT7RBdnbvnXqrB21u1
9Dwd417qXzlbEY1bcYwWz9M1nUZ5v9F0av1Am+ImSADdtI64GwROTNSA3jq7/Kx5
YVwq0o68xqn8BOZHIRpaIIPJoV1qj0MF9ggaMzGJNH2mcl1BU6XqROFSHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRKENlp+K9uPZ0t3y97EH0EA+4AMB8GA1UdIwQY
MBaAFDD5DSUgrWGawwYLOfvSwgTimioUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWIt
NjU3YjNhN2Q5Njc2LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWItNjU3YjNhN2Q5Njc2
LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALS4ML0kX
R/Ui3+1T+9Ed7lvQVE/n0QTrFJRNIxZ9MTi2XP9+p0AF7RnY8efnCCncYwWZj5xT
jl0bvUw91/+Z+hShbQMi9OOWdanjyvGhVRDDRoZUX5D7CG2xJsafkHsfuAYanFar
2KdWpaY/QcAtrAQQQlJEYM3b63glLXqQQuzHcg97DbqghQgkZdSx4Vog9L7xLoq8
Ccs+OfhFhBTaayVyVcO0i34RmP2zB27m/vbVi0tHfAKPw9c0dDWhtsXm8a+DhtCZ
inNfFCPfNe5LlEX0NW6onfL+1WX94U60PBuSKp5KpHV01hjA3r3RvaaIdoG64wiz
EBTP8+DmZZmAnA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:52 2025 by rpki-client