Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier: E1/Vyy8ZUTGZTHl05rGfcQRR4UHw7IZ2PSfu+Xh4ya8=
Subject key identifier: 55:1F:F6:AF:E2:C1:3F:3D:D0:FF:F1:52:DF:82:5F:18:8A:70:51:2F
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 0198D5BBCDE41ADD95B76E4E1C90000DD654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: TMIFwNWhMNaDhzSu1bmfjCcdn871r88DwXG18gbTNns=)
2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cd:e4:1a:dd:95:b7:6e:4e:1c:90:00:0d:d6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=551ff6afe2c13f3dd0fff152df825f188a70512f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:ab:2c:0f:76:84:d1:27:dd:cf:65:87:3b:
51:38:83:17:4c:15:38:ac:56:74:66:7c:fa:55:84:
06:c4:39:02:34:4b:78:3c:47:5a:45:cf:14:d6:aa:
af:db:a4:8c:71:25:85:fc:0d:30:ae:59:69:40:de:
a3:c3:b0:15:da:66:90:2b:ed:05:eb:ff:1b:b0:47:
8e:62:37:d0:08:11:d2:b0:39:3a:d5:30:93:82:53:
aa:ab:ca:4a:fc:26:78:5c:fb:7e:98:ad:34:91:9b:
87:a9:a4:1c:68:fe:ae:7f:53:c3:9a:57:a7:e3:a6:
53:d4:78:29:9a:6d:b9:85:fe:c7:5a:e8:f9:8a:1c:
5a:46:31:83:58:78:29:87:63:dc:7c:38:5f:5a:c0:
f5:a6:d1:d9:f5:18:d0:06:6f:1a:e3:f9:02:c9:fa:
4a:62:b7:e5:b8:b3:85:6a:ab:03:53:0c:3d:a3:5c:
cc:5d:eb:d8:32:b5:0c:22:47:4d:38:19:7e:e2:2e:
7f:81:44:54:ec:a9:86:58:88:2d:aa:95:0f:11:fa:
5c:b4:41:97:10:10:e6:fe:47:61:7e:af:d7:79:68:
15:be:36:57:c8:1b:73:58:34:98:0c:ab:c1:4c:2d:
f7:f2:3b:9b:d0:52:9d:c4:3b:2a:ca:ab:c2:9f:e1:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1F:F6:AF:E2:C1:3F:3D:D0:FF:F1:52:DF:82:5F:18:8A:70:51:2F
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:5b:fd:5d:dc:63:bb:87:9c:22:5d:c6:02:1c:85:80:36:
c1:5a:28:72:91:e8:3c:f9:bb:a5:d4:26:82:fb:b8:80:18:db:
26:90:b6:c1:f1:2b:83:f4:6b:07:82:d4:6d:28:46:3d:90:20:
06:d2:24:91:40:49:bc:9e:2a:48:a8:75:ab:23:fa:77:2b:8d:
7e:73:e0:62:5c:33:a5:c3:8d:66:49:06:b0:42:ad:08:cb:35:
eb:5c:21:aa:d6:18:18:bc:88:e8:0b:6d:ef:15:eb:c6:9e:58:
b8:31:fa:cd:d2:59:56:93:1f:81:0a:2a:cf:08:74:b4:80:f6:
f5:9a:02:d2:d0:2f:fe:38:86:39:aa:5a:7e:91:36:89:03:5b:
b7:8c:b8:0a:86:87:47:cd:a0:48:3a:88:2c:88:b1:f1:6d:6f:
9e:70:a3:46:4d:98:62:f3:85:34:0b:42:74:e9:52:0f:53:c6:
2e:a4:82:42:64:7d:50:03:1b:7d:06:a4:c2:37:36:e7:53:14:
7d:14:4f:ae:ed:d9:28:e9:19:ee:8a:ab:88:e2:36:ec:f6:9b:
3b:25:74:d4:27:b9:fd:31:3e:57:78:f1:be:5f:0c:1a:1d:56:
e7:d5:8d:bc:b3:44:d6:60:0e:39:06:44:6e:b2:d7:ea:5d:92:
a6:2b:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:34 2025 by rpki-client