
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: LorSGrKFBiYh91/qchJDph9wLFe4bn5zIG51YnOm6jM=
Subject key identifier: A9:A4:B5:0D:52:5F:D8:C4:8D:D6:EF:AB:D8:FA:03:DB:6A:E3:43:2B
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 0198D54EB04688603BD76811B12B11A94748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 1548
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: QhBMvJPDf/KqVCCRR7r95JeQEUQbLDCZf94OS3zmIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b0:46:88:60:3b:d7:68:11:b1:2b:11:a9:47:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=a9a4b50d525fd8c48dd6efabd8fa03db6ae3432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:dd:ed:bb:31:af:51:f7:68:8e:38:59:5b:
c8:79:d3:fd:ae:06:5c:1a:6f:be:ce:58:a2:bd:ef:
ec:72:0d:f9:75:df:7e:cb:4d:92:2e:7d:b9:45:7a:
86:de:e2:ab:d2:7e:74:08:e3:8e:dc:4a:63:f9:cd:
d0:50:49:f0:ef:36:ab:e7:c3:10:9e:15:1c:26:88:
93:6b:0f:77:61:63:10:37:8e:70:2e:b4:eb:2b:23:
fd:99:4d:7f:66:c6:7e:1f:cd:f2:b3:f7:9a:f1:b7:
44:55:63:0b:4b:c9:88:3b:93:b5:2e:dd:e9:b2:cc:
8c:6e:3e:f0:b5:ab:be:9b:78:0e:5c:39:aa:80:27:
e9:07:98:e1:57:4b:34:43:4f:da:84:e3:92:cf:b3:
ec:40:14:38:c2:bd:37:5f:82:ea:45:d8:ca:f1:26:
59:98:6b:ba:c8:87:b4:80:24:1c:51:2e:55:8a:87:
2c:de:1f:6b:e0:19:80:9d:37:b9:34:40:fd:17:a6:
43:da:9b:58:8e:70:eb:f7:44:a8:e5:6f:bf:75:fb:
43:24:29:66:7e:95:e6:02:a3:4d:f8:36:79:d7:f1:
22:13:d1:68:77:3c:ed:d6:35:5b:fc:4a:9c:77:8e:
e5:1c:d8:82:61:1c:39:d5:aa:51:e1:a2:b4:f2:28:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:B5:0D:52:5F:D8:C4:8D:D6:EF:AB:D8:FA:03:DB:6A:E3:43:2B
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:98:f8:44:78:83:0b:a2:4b:5b:9b:f0:2f:8b:a8:d7:a4:
bf:1e:11:fd:e1:d8:8d:7d:68:ea:cd:cd:0b:4d:ec:bc:92:18:
49:15:4d:10:0c:31:57:0e:6b:d3:9d:ad:55:68:ae:06:34:69:
b9:47:ac:b9:d4:ff:fc:9f:5c:79:34:fd:b4:e5:2b:60:d1:b4:
e8:5f:77:f6:6d:9c:e3:45:3f:91:29:f1:f1:a0:29:31:15:1a:
be:d5:64:4b:fd:95:e0:1e:35:69:59:e5:9b:89:52:02:3e:d6:
21:39:c1:33:d7:ee:c2:80:43:c7:1c:a9:d3:f1:61:61:8f:96:
63:1e:00:63:db:3d:c7:1d:2c:a6:52:76:ee:94:be:23:1a:30:
a3:ae:59:cd:44:e3:60:de:46:de:a4:d5:b1:dd:39:2f:d8:23:
94:25:8f:3f:8f:02:74:09:07:15:27:53:56:84:df:23:cb:85:
ab:d7:a7:8f:01:18:6f:7a:30:e2:2f:be:b4:b9:7d:77:c9:d5:
8a:4c:14:da:3c:87:54:a3:da:3f:20:38:ca:21:89:f3:ed:a9:
67:7c:14:0d:fd:be:f9:57:98:3f:a9:8a:97:fa:61:70:43:ea:
60:7a:4f:13:f9:6b:d2:c9:fe:4f:01:26:02:a7:ea:b1:54:10:
7b:ee:cb:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTrBGiGA712gRsSsRqUdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4
NzgzYWIwHhcNMjUwODIzMDUwMjQwWhcNMjUwODI0MDUwMjQwWjAzMTEwLwYDVQQD
EyhhOWE0YjUwZDUyNWZkOGM0OGRkNmVmYWJkOGZhMDNkYjZhZTM0MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Xd7bsxr1H3aI44WVvIedP9rgZc
Gm++zliive/scg35dd9+y02SLn25RXqG3uKr0n50COOO3Epj+c3QUEnw7zar58MQ
nhUcJoiTaw93YWMQN45wLrTrKyP9mU1/ZsZ+H83ys/ea8bdEVWMLS8mIO5O1Lt3p
ssyMbj7wtau+m3gOXDmqgCfpB5jhV0s0Q0/ahOOSz7PsQBQ4wr03X4LqRdjK8SZZ
mGu6yIe0gCQcUS5Viocs3h9r4BmAnTe5NED9F6ZD2ptYjnDr90So5W+/dftDJClm
fpXmAqNN+DZ51/EiE9Fodzzt1jVb/Eqcd47lHNiCYRw51apR4aK08ih/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmktQ1SX9jEjdbvq9j6A9tq40MrMB8GA1UdIwQY
MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt
N2UxMmI4N2QwNmMyLzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy
LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN66Y+ER4
gwuiS1ub8C+LqNekvx4R/eHYjX1o6s3NC03svJIYSRVNEAwxVw5r052tVWiuBjRp
uUesudT//J9ceTT9tOUrYNG06F939m2c40U/kSnx8aApMRUavtVkS/2V4B41aVnl
m4lSAj7WITnBM9fuwoBDxxyp0/FhYY+WYx4AY9s9xx0splJ27pS+Ixowo65ZzUTj
YN5G3qTVsd05L9gjlCWPP48CdAkHFSdTVoTfI8uFq9enjwEYb3ow4i++tLl9d8nV
ikwU2jyHVKPaPyA4yiGJ8+2pZ3wUDf2++VeYP6mKl/phcEPqYHpPE/lr0sn+TwEm
AqfqsVQQe+7LmQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:18 2025 by rpki-client