Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier: /HyZn18m1P+Bx+tAtgEx+O8IZ9ZrVf01OVoAKmpYIw4=
Subject key identifier: B3:49:FA:D2:DC:A9:3A:DC:D4:55:80:CB:36:0F:7C:D7:0D:11:0B:1B
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 0198D4E0C1CC613855DD8D069EA2716DEF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:36 +0000
Manifest this update: Sat 23 Aug 2025 03:02:36 +0000
Manifest next update: Sun 24 Aug 2025 03:02:36 +0000
Files and hashes: 1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: qLD2BHKcfQhV6j3D6LpLnazx35/+r6sQ4B8rA16U564=)
3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c1:cc:61:38:55:dd:8d:06:9e:a2:71:6d:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Aug 23 03:02:36 2025 GMT
Not After : Aug 24 03:02:36 2025 GMT
Subject: CN=b349fad2dca93adcd45580cb360f7cd70d110b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:b0:e7:d0:b0:e8:ba:d2:0d:46:b8:52:db:
a2:f0:3a:ee:71:cd:8c:e9:fc:07:6e:e9:6a:12:23:
a9:92:d6:c3:51:46:ea:79:55:92:8b:06:46:6a:b4:
69:32:5b:cc:71:c8:4a:ee:7a:42:ff:76:e3:fe:ff:
49:d4:22:e2:1b:47:86:67:68:d0:02:c1:a5:ee:83:
7c:15:a0:07:62:d9:32:46:9a:23:ae:4a:9c:14:4b:
70:24:fa:08:16:72:e7:71:67:4d:6d:a8:06:2d:64:
d7:a8:96:00:49:16:ef:e4:c0:f9:14:41:b3:9d:cf:
2d:a9:10:62:50:70:bf:16:7c:58:7a:49:90:a9:d3:
57:70:86:65:9f:ee:e0:ee:06:f7:ec:e8:0e:ea:2a:
8b:74:81:c0:8c:c1:fd:81:f3:5c:96:7a:2e:42:c6:
c0:70:d5:f1:f2:63:67:85:b3:d3:d7:f5:7e:36:9f:
f8:68:ce:9f:07:0d:ea:bb:c4:4e:68:99:fa:46:5d:
81:b5:bb:5a:74:d5:54:7a:da:40:6e:c9:d6:0c:46:
79:44:f7:66:ea:47:9b:16:97:39:2a:b7:38:f5:14:
95:04:e5:34:e4:b4:e4:16:a3:e4:d0:be:a4:e0:9e:
1e:65:29:2d:ce:de:7e:8d:c7:02:9a:64:9d:d3:47:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:49:FA:D2:DC:A9:3A:DC:D4:55:80:CB:36:0F:7C:D7:0D:11:0B:1B
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:06:9a:ef:19:73:54:21:92:3b:64:50:10:1b:21:fa:18:0b:
08:e5:86:c3:dc:4b:5f:a0:7a:d3:24:46:07:ac:5f:88:7b:06:
ab:74:b0:2d:0a:a2:06:de:26:13:d8:42:e4:af:4f:9a:9f:22:
ae:44:e8:d6:35:91:13:a1:8e:d5:f7:6a:82:8f:ed:4c:53:29:
0e:58:fb:6b:19:df:d1:47:be:12:f4:43:10:e9:8e:a2:6f:02:
ee:70:a6:0d:fc:5e:6b:0c:b6:16:71:46:2c:b2:16:67:65:2b:
42:ad:5a:f1:69:7c:38:b9:de:33:4d:58:5b:da:30:67:dc:3c:
d0:16:7d:4d:a2:c4:e8:fd:85:85:ac:e4:68:51:f5:6c:ff:2f:
6e:1b:f9:65:84:13:8d:1b:9f:20:f9:0c:77:01:2f:10:ba:64:
43:90:9c:ee:d7:c9:53:a7:eb:ea:d1:d5:34:fe:58:c7:c8:b6:
6c:f2:54:ae:44:0f:9e:22:61:d6:1e:be:05:b0:bf:bb:2a:5b:
97:a3:5c:bb:c5:29:26:b6:41:66:82:78:cd:10:32:d5:87:b3:
1b:8d:bb:4d:b6:84:98:71:1e:a4:f8:1e:aa:18:f1:e5:43:9d:
4a:71:b7:4a:99:88:39:92:84:3f:23:42:8b:f1:fc:f4:99:86:
61:0e:7e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:35:54 2025 by rpki-client