Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier: evW8ZoCCbleCZCgAeSa/RYHCGvms81Jo+11krlgSr4k=
Subject key identifier: 4D:2A:01:78:15:EF:64:6A:0B:C4:3D:C9:41:33:B6:A0:EE:E5:42:AE
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 019A003585D81F1F3310D2B7A1516736B624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:38 +0000
Manifest this update: Mon 20 Oct 2025 06:01:38 +0000
Manifest next update: Tue 21 Oct 2025 06:01:38 +0000
Files and hashes: 1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: 9ySfISjLu4aD7t0QZ9bfVvZ0inX8cv2VJWlBpiPYL7Q=)
3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:85:d8:1f:1f:33:10:d2:b7:a1:51:67:36:b6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Oct 20 06:01:38 2025 GMT
Not After : Oct 21 06:01:38 2025 GMT
Subject: CN=4d2a017815ef646a0bc43dc94133b6a0eee542ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:02:6b:bc:cf:ce:13:32:70:c6:08:37:7a:
c7:5e:25:03:fe:83:e1:5e:91:fa:38:3f:d8:d4:53:
e1:a3:0f:f2:f9:cf:fc:0f:78:f2:a2:7a:b6:a0:b3:
5e:64:e1:a3:57:90:7c:ef:d2:f5:6d:76:f7:7f:88:
b3:d2:08:54:34:41:ac:b6:72:01:d2:0c:23:98:30:
36:9f:ed:25:81:ed:8e:3a:42:23:69:91:86:2a:dc:
ad:38:0b:06:f7:d7:84:e1:b7:78:56:ce:56:7d:01:
a2:a4:a7:96:63:00:e2:e6:b2:d8:54:2c:ad:bb:62:
cb:f2:de:0d:96:c8:a1:75:e8:23:c1:8f:29:bf:69:
a5:b0:16:87:db:ef:c4:ba:b7:86:c2:12:e0:2d:c8:
93:99:ca:30:be:89:d0:3b:ef:24:38:e4:fe:85:fa:
18:26:6b:e1:d0:1c:87:cd:d8:e5:69:00:63:1f:e6:
9c:af:d0:80:38:4e:bc:f1:f8:34:15:d7:ef:c0:1e:
4b:98:78:67:63:76:92:c1:73:de:4f:a2:89:1b:e9:
30:98:d2:1a:65:9e:96:a2:2b:49:10:b1:f2:f9:48:
25:29:21:da:f0:c1:44:7f:2c:4f:57:7d:1b:64:fe:
fc:22:7a:a9:9b:7e:8d:97:48:2a:dc:f6:b3:cf:77:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:01:78:15:EF:64:6A:0B:C4:3D:C9:41:33:B6:A0:EE:E5:42:AE
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:e1:18:58:f7:6b:7f:c1:b4:26:3f:89:23:20:bc:41:ee:
4a:04:32:c3:73:ef:98:da:a1:d5:01:60:5e:61:d7:96:42:91:
db:71:24:58:ed:39:df:00:25:d2:37:0e:50:f4:d4:1e:f7:ac:
5d:2b:d6:ad:bd:37:c6:43:23:cd:e5:c6:d7:97:13:a8:42:42:
f8:90:ff:ae:f8:ce:c8:e3:59:0c:3f:51:5d:92:47:1c:b4:97:
72:e4:70:b6:3b:98:94:08:d9:aa:7c:fe:2d:bb:8c:0c:3d:dd:
9d:b1:6d:90:97:35:51:b4:df:08:02:4b:a1:23:30:a9:bd:c9:
ce:7c:e7:df:39:a1:4f:e1:6e:3c:2b:e2:3b:e8:4b:73:37:4f:
1f:c5:38:4f:7b:6b:30:8c:8c:a7:99:14:fe:21:5c:32:7b:f2:
35:c9:2a:b2:f0:d9:86:5f:ca:67:1c:31:93:c8:f8:cc:7a:0e:
38:9d:69:e7:76:e3:66:b0:0a:16:90:3b:76:98:95:03:89:2e:
95:cb:68:8d:76:94:b5:de:4d:38:a0:04:e0:25:ff:c2:ad:21:
d4:1b:d3:a6:1a:28:55:0b:19:8e:94:5b:07:59:85:84:71:cc:
d7:8f:92:b3:01:32:27:84:2f:fa:e8:56:54:37:11:3f:6f:cc:
c7:b8:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:22 2025 by rpki-client