Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: sKPZ1tp2bCEl6m9tN8/z6DOqj24bPwz28WJsdfRGFRc=
Subject key identifier: 11:98:AF:CA:34:33:35:A8:34:EA:5D:01:AC:14:99:04:66:FE:DD:59
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 0199FC21831DAC5D18B68CF1A759B5A825FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 13F0
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: C+ngYBgJBfZBrDdyDu0JQF0Aiwuvm/ZkCdyPKj8usSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:83:1d:ac:5d:18:b6:8c:f1:a7:59:b5:a8:25:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=1198afca343335a834ea5d01ac14990466fedd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:15:f4:df:f9:28:36:15:b3:ea:72:c9:53:
cc:86:47:6d:be:7a:fa:9d:4b:c2:02:8e:be:73:df:
0f:29:38:57:56:b0:15:d7:fd:f0:5c:27:57:d9:1f:
cc:66:4e:1a:f8:c7:40:d7:bb:36:e9:d6:38:a3:b9:
7d:52:57:33:99:b9:54:00:2a:e2:b1:a7:45:e2:de:
e3:81:a0:b7:6a:74:f6:5e:18:d1:fd:a4:40:1e:a4:
f2:93:26:0e:fb:19:51:1e:72:72:06:4c:15:09:64:
f7:c4:78:5e:76:fd:32:39:01:ec:94:4b:9f:50:4d:
b8:37:64:32:53:61:07:61:45:2b:7f:06:79:f0:7a:
80:fc:da:fc:d2:90:24:ec:7a:98:f3:bf:94:9c:06:
80:d2:50:cd:a5:3b:a5:88:73:1b:ab:db:b5:b9:bf:
d7:11:61:32:23:d6:3d:d0:a7:98:a3:1a:6b:73:7f:
ef:9e:86:c3:c2:68:5f:7c:fb:43:b9:36:ca:0a:e3:
79:14:b8:95:5b:95:2e:cd:58:e8:8f:6d:5f:d0:cf:
fe:11:9a:12:e4:e0:11:e8:d6:df:6b:e4:f7:18:da:
f2:a7:51:ab:76:85:a2:a7:4b:60:67:26:cb:df:cd:
35:ea:9c:53:23:58:7d:da:50:06:f6:65:52:b3:ea:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:AF:CA:34:33:35:A8:34:EA:5D:01:AC:14:99:04:66:FE:DD:59
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:86:97:f8:3d:41:96:2d:d0:fd:df:3c:cd:51:fc:7b:79:32:
3f:13:24:98:75:99:7e:5b:ec:b9:a4:a7:1b:b9:ec:7c:36:36:
14:67:32:e3:ef:52:6c:28:4f:e7:1a:ac:5c:5a:e3:b4:21:55:
64:c1:82:33:56:bc:19:88:f0:d0:8a:5e:e6:3c:72:41:78:60:
27:0d:40:09:76:85:51:76:11:72:a4:c9:d7:d2:e5:83:af:b8:
64:49:4b:37:e4:41:e1:ff:b3:a6:46:c6:e3:d9:5b:7c:a1:39:
23:88:8b:d0:f8:fd:8a:98:33:4d:4d:39:0d:4d:fd:0f:1e:e4:
04:38:20:14:b3:27:d9:7c:91:bd:ed:e1:f1:35:48:40:59:31:
21:51:4d:77:18:38:73:9c:da:f3:37:d2:60:b9:23:57:49:de:
a5:5b:c5:20:fa:98:2d:cd:43:d9:34:f7:cd:13:16:11:af:55:
c4:59:b0:73:0c:de:76:4f:46:b4:50:f0:72:6d:c7:d2:36:af:
8b:81:11:32:81:cb:a3:07:9b:9f:b8:87:90:7e:ea:f3:fc:37:
0f:b2:68:81:ef:44:d6:f9:be:03:72:ee:56:38:79:1f:36:15:
ad:8e:d1:5c:74:81:68:f4:22:c7:8c:3b:e3:99:ed:09:f5:31:
88:fd:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:02 2025 by rpki-client