
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File: mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier: V5Ac9azW4T2lRllzOFP+j35elwo3dk28PVyT6Wy90dc=
Subject key identifier: DC:90:34:A0:D4:E5:24:7E:DA:03:AF:58:63:AB:76:37:C3:B7:E9:47
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 0198D54DE796EBB9F04A5D93608E5B5D7094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=)
2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: H3sM2gJiBD+NxvVz5wMGZp0BLCvSi1alQVufAQa9gkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e7:96:eb:b9:f0:4a:5d:93:60:8e:5b:5d:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=dc9034a0d4e5247eda03af5863ab7637c3b7e947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:ac:a8:39:4f:d1:25:d8:2c:fc:81:38:29:
7d:ce:be:00:0b:f8:64:98:33:a3:30:5c:b8:fc:bf:
78:8c:ff:5b:d8:b7:aa:f1:2c:b1:d4:8c:5b:6f:22:
0d:3d:7e:d0:0d:ef:93:eb:cf:70:4d:7d:96:5b:79:
60:08:17:ca:f8:98:41:1b:47:b0:a4:2b:ac:e1:fb:
2b:b4:fc:5d:48:cf:6a:8b:73:32:5b:e8:ed:dd:1d:
17:b9:27:b3:59:dd:2b:81:7e:ad:ac:82:19:3a:36:
c0:b5:43:81:a1:07:9d:1a:cf:8b:b1:a3:f6:53:81:
64:64:c1:af:3c:ad:19:a3:c1:ca:2f:e1:c6:a4:69:
ca:b8:72:2f:a4:e7:09:97:44:e6:d8:13:f5:cf:25:
9c:c1:cf:45:73:01:cb:6f:8c:be:a6:46:41:7d:e4:
53:f0:c4:10:c3:a5:96:fb:d9:2f:8a:be:73:9a:d4:
4b:44:d4:e1:dd:60:93:88:c5:c8:80:51:2e:08:d8:
4c:42:3c:cc:a2:72:a5:a2:97:35:3e:1a:56:c8:f1:
02:18:f1:9b:17:59:3c:7b:56:c2:d9:08:3e:43:81:
ba:52:b6:2d:68:25:91:7c:46:72:4a:c0:89:ad:6a:
7e:63:8b:6e:73:2c:90:35:e2:c7:0c:25:c1:49:ce:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:90:34:A0:D4:E5:24:7E:DA:03:AF:58:63:AB:76:37:C3:B7:E9:47
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:37:60:b8:9e:71:9d:ba:67:ae:89:5d:2a:b7:19:bf:a0:24:
5a:22:21:49:3b:15:a3:4a:29:1e:4b:e5:89:1c:20:fa:65:16:
60:68:5e:25:49:03:77:45:75:fc:68:ae:a4:aa:e1:43:68:5e:
c2:17:08:75:cc:98:28:aa:5a:05:bd:ce:4e:b3:16:e6:7e:5c:
06:f0:60:c6:18:65:3e:ab:dd:9b:34:32:bf:2e:84:de:64:d0:
db:cf:59:e0:56:5c:57:56:d0:bf:54:b4:8c:db:ce:16:1e:89:
a7:e3:1f:d5:c7:99:1b:ff:40:a8:5e:a8:a4:e7:75:0e:7a:c3:
3b:0a:72:1e:c2:39:da:1b:39:c2:d3:c2:83:07:18:36:6c:c8:
fe:5c:09:e9:de:6e:4f:21:d5:bd:78:32:85:a9:59:d0:aa:f7:
58:72:64:88:86:5d:0c:58:d0:73:f9:73:4e:0f:de:68:5a:9d:
58:0f:84:a7:10:52:48:95:df:17:4d:34:f2:ed:68:93:a4:2c:
97:16:95:29:da:93:11:eb:97:ab:83:af:76:f1:f4:50:71:4b:
c8:70:75:82:9a:ef:5b:74:be:68:e2:bd:02:41:4a:3e:06:da:
84:bf:1b:0c:bd:7a:09:94:88:cc:d8:4b:cf:f5:d6:12:8a:26:
35:9e:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:49:26 2025 by rpki-client