Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File: MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier: mSB+M69DjTnBIRgMd9xtiepig8au7hAQhHfSt9aVEXk=
Subject key identifier: 1D:33:69:78:39:2B:D9:0E:06:82:2E:51:66:E9:11:9D:A9:0F:EA:28
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer: /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial: 0199FFC853F26CB740CBEDCB427B853BD750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number: 075F
Signing time: Mon 20 Oct 2025 04:02:22 +0000
Manifest this update: Mon 20 Oct 2025 04:02:22 +0000
Manifest next update: Tue 21 Oct 2025 04:02:22 +0000
Files and hashes: 1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: R9QIpGpusaCrHC5/Wh/Pi72TNX1yb2eDcaC5ShN/Jko=)
2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:53:f2:6c:b7:40:cb:ed:cb:42:7b:85:3b:d7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Validity
Not Before: Oct 20 04:02:22 2025 GMT
Not After : Oct 21 04:02:22 2025 GMT
Subject: CN=1d336978392bd90e06822e5166e9119da90fea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:83:ae:29:b5:4b:10:00:4b:bb:c6:45:c0:
4a:21:97:68:f0:8d:a6:b3:da:95:48:8e:bd:38:f5:
57:ee:05:26:4b:79:b0:49:06:21:6c:fc:0b:3f:9a:
da:7c:65:24:42:90:cc:b6:f0:ab:9e:9f:f8:07:b5:
1c:9e:a8:a6:b9:bc:43:ab:8b:67:ad:42:84:71:aa:
e4:4d:bd:11:d2:25:b8:47:14:a9:2a:b9:cc:2b:46:
83:de:d2:22:12:32:72:30:16:36:89:01:66:13:44:
a9:57:49:07:f4:76:69:7f:33:3d:1a:05:25:e9:03:
9e:11:3d:67:e2:b9:66:4a:f4:b9:7a:86:e6:37:ed:
a2:aa:f5:a9:bd:af:13:cb:b7:76:93:d2:72:81:09:
93:9d:b9:84:98:37:38:da:3f:12:c1:8d:59:a0:1f:
17:97:62:ae:4c:bd:cf:5f:1a:a1:73:fa:4a:a5:45:
cd:39:46:64:86:7e:0a:34:2f:b0:1b:fb:3a:b7:31:
b3:6d:c9:b4:1c:26:5d:f2:0d:cf:88:cc:f7:cf:f1:
2b:98:c5:ca:99:c1:1b:1c:43:b5:3e:86:8e:7c:d2:
37:d3:65:56:03:7c:b9:d1:18:31:2f:d1:8f:86:4c:
63:be:ca:11:82:df:a1:fa:22:35:28:5e:61:5c:ac:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:33:69:78:39:2B:D9:0E:06:82:2E:51:66:E9:11:9D:A9:0F:EA:28
X509v3 Authority Key Identifier:
keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5c:0e:06:2d:81:1b:61:bb:72:c8:be:f5:9c:78:57:c4:eb:
8a:8b:da:a6:64:8f:98:63:79:98:9c:a1:e0:6f:20:86:af:3e:
2a:7a:08:92:20:b6:3e:43:2e:5b:e6:35:75:6f:46:e2:6b:ba:
4b:d6:c8:56:50:ab:9f:6a:11:69:02:d6:34:23:46:2b:bf:ea:
2b:eb:55:f7:3d:dc:7f:35:43:76:7e:fd:58:39:81:39:4c:5d:
30:e0:64:fe:15:c6:4c:50:f8:4c:91:35:b6:fe:77:f5:30:22:
63:9c:b1:14:50:2a:1b:83:7e:25:86:36:dd:e7:07:7d:bd:ff:
62:ec:10:33:42:23:74:3d:6a:cc:5f:e6:6f:75:6c:fc:0e:3a:
9f:ea:08:30:6b:70:8a:10:ae:3c:c2:67:8f:3d:85:7c:ac:bb:
eb:59:11:1f:09:16:c2:b0:f3:41:a1:d6:c3:b8:95:22:fc:66:
0d:b2:4c:5d:ad:6b:e7:3c:12:97:15:7b:e1:d1:3f:b4:d6:40:
5f:f9:dd:44:9d:95:b9:dc:ff:53:c2:46:00:bf:9e:88:8e:a6:
85:71:53:10:28:61:db:43:e4:5f:a7:5e:18:94:6f:ab:3d:fb:
53:fb:bb:db:a0:10:4e:b6:61:b9:3e:74:b1:b7:12:fe:3e:b7:
e3:ef:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:01 2025 by rpki-client