Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: ZCOaK2C7/rr09uzWjbirRFJ3If+ayTdaE+lGhFy9W5M=
Subject key identifier: 15:40:81:A4:43:75:75:B8:7A:73:CD:04:7A:CB:CB:DA:40:10:6E:FD
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 019A0110DD51EBAC25546F56DE4955AE303C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 10:01:13 +0000
Manifest this update: Mon 20 Oct 2025 10:01:13 +0000
Manifest next update: Tue 21 Oct 2025 10:01:13 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: 7ijuNtjvRwgmXt/6kbK8PYUh6Kw+JycLFThObD54KB8=)
2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:dd:51:eb:ac:25:54:6f:56:de:49:55:ae:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Oct 20 10:01:13 2025 GMT
Not After : Oct 21 10:01:13 2025 GMT
Subject: CN=154081a4437575b87a73cd047acbcbda40106efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:e7:f5:ae:18:5d:aa:ed:52:91:7a:b8:e9:
04:fe:69:e2:54:16:c9:44:e5:f7:7b:5b:ff:99:a2:
6b:ab:ca:d0:d6:f4:27:ad:17:3b:29:6c:83:b5:0e:
a9:6f:b0:12:25:62:33:73:b9:bf:05:de:11:56:2e:
32:01:92:94:02:fe:1f:03:5e:50:a2:47:43:f5:6a:
9a:43:34:c0:d2:63:70:07:ec:0f:90:47:af:2f:a9:
75:3e:9c:a2:a8:51:d6:a9:64:63:3f:99:24:5d:9b:
da:56:d1:35:d7:16:89:6d:dc:f2:b0:5d:2d:76:bf:
26:d1:1f:a3:72:32:0d:fa:28:bd:f8:1d:7e:7e:c5:
f7:5c:b8:ce:4c:4d:d4:62:39:61:7c:f9:d6:90:53:
93:75:91:4c:b3:c9:91:2b:54:5f:60:33:1a:ac:fc:
25:7a:49:9d:42:6e:13:a2:a4:84:75:5f:64:c6:23:
2e:4f:ce:95:bc:12:b3:a7:7c:7c:ca:8e:a3:ff:f1:
78:fb:33:62:74:72:55:50:ab:1e:8f:b1:30:6b:e9:
43:41:2d:3f:dc:06:8e:93:38:fd:bc:a4:16:20:89:
ab:8c:6f:33:54:65:53:b0:94:aa:da:5e:bf:38:73:
d1:ba:be:2b:66:ec:7c:0a:af:23:b1:82:8c:3e:cc:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:81:A4:43:75:75:B8:7A:73:CD:04:7A:CB:CB:DA:40:10:6E:FD
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:42:f8:e4:e2:f0:d5:a7:83:bd:3e:cc:40:73:fb:f4:63:a2:
a3:50:1f:2e:31:b2:5c:67:f8:61:68:4a:c8:44:25:0f:2a:c9:
42:6c:31:20:f9:51:22:99:2c:d1:ee:c9:ad:6e:7b:35:3c:a9:
17:88:a7:55:87:48:aa:9b:05:a4:33:28:74:f3:55:b8:72:98:
f2:c2:bd:8a:aa:27:99:e5:e2:d0:39:61:f4:c0:2a:76:33:77:
bc:31:8d:59:e3:f8:d8:a1:ed:8e:cb:8b:23:fe:b2:07:e1:6f:
04:d6:71:45:43:6f:3a:50:ed:e5:bc:02:74:77:82:a1:0e:b5:
2d:3a:e5:f3:4b:15:8b:82:57:9c:e1:4b:f0:e6:17:8f:86:dd:
54:dc:07:51:44:39:4e:42:83:1a:cd:5d:ca:2f:ce:b8:76:23:
12:36:4c:26:6d:8e:ea:c3:69:43:a1:ff:7f:bc:7a:25:f1:4f:
46:1d:5f:f4:71:11:c9:02:f1:22:82:79:14:73:eb:97:fb:c2:
55:93:31:fd:5d:39:dc:60:a4:94:d2:37:0d:9c:1e:00:cd:74:
7e:bb:39:2b:01:24:da:cc:3e:6d:c2:40:80:14:55:57:ce:81:
a5:b4:ed:a5:d9:47:44:c2:f9:e0:dc:87:a4:70:74:4c:38:10:
fc:0b:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:29 2025 by rpki-client