Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: aELZmbcAbPSxEkn8YS0FlvbU7At4XCC9JMv47NDgcTc=
Subject key identifier: 8D:3C:C3:6C:F8:DC:01:00:7B:5B:A6:35:4E:E3:27:F4:8F:53:FC:71
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 0199FCC63096F05AB2D71304E2871E5CB70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 15E1
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: 8ISMr/a6mR5UTHdOJgj2p7IgtWwstwN46cluKjXAUbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:30:96:f0:5a:b2:d7:13:04:e2:87:1e:5c:b7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=8d3cc36cf8dc01007b5ba6354ee327f48f53fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:6d:2f:12:62:22:ca:2a:29:83:cd:42:e8:
71:64:35:b9:14:3d:02:08:2f:ca:20:d4:ff:21:59:
7b:0a:a5:c6:5d:83:84:da:02:74:d7:5b:74:96:69:
c9:8b:52:5b:90:00:e8:1c:17:6a:f5:86:70:02:0f:
1f:7f:4f:f4:2d:d5:27:9b:71:fd:2a:40:f3:07:b3:
41:e4:04:73:6e:a8:c9:71:ad:cf:07:87:7e:ae:4f:
4c:02:01:d4:3c:01:ea:9e:14:a5:cd:78:f9:99:36:
fa:92:02:5e:35:82:c6:aa:6b:47:c2:ff:51:b8:bf:
45:f0:73:78:0f:3d:f6:72:4b:ac:e8:95:29:56:02:
10:65:c1:e8:5d:5f:97:6c:60:70:0e:3b:89:3b:6c:
c3:ce:5b:51:dd:c1:1f:f4:12:9e:c4:ad:1f:b3:85:
25:d6:18:26:c8:39:5b:c4:c9:8e:70:a2:60:f5:03:
26:83:64:d9:73:e8:72:02:1f:80:b6:be:0a:29:25:
40:3b:fa:97:9f:0d:33:9d:bf:a0:76:11:0a:e0:2f:
8f:2d:fe:2f:db:90:02:e5:20:17:1f:a3:75:8d:f6:
a5:89:e7:4d:fd:30:04:1b:f8:85:fd:31:85:ba:d5:
3b:c0:a5:e2:96:e3:3a:2a:42:57:90:05:6e:b2:01:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3C:C3:6C:F8:DC:01:00:7B:5B:A6:35:4E:E3:27:F4:8F:53:FC:71
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a2:98:96:94:89:07:59:f6:c9:f0:52:ba:22:2f:81:8a:9f:
36:58:4c:29:31:55:db:f7:13:d2:5e:77:af:8c:ea:96:2c:a1:
88:e7:ad:8e:1f:d1:5b:7b:b9:16:92:b2:b0:73:7a:b6:0a:43:
20:09:f4:36:d8:99:f8:a9:19:f6:b2:3a:d7:9a:98:4b:72:00:
b0:33:d7:76:50:be:7e:d1:fe:95:53:42:51:18:94:28:11:97:
7c:25:35:88:fc:99:27:4a:1f:cb:b1:1b:aa:8b:e2:99:49:e5:
b9:9a:a0:78:e2:9b:ac:05:a5:bb:08:df:50:53:77:e7:5e:20:
18:88:79:04:2a:d3:1b:4c:11:72:90:cc:72:59:4e:17:a8:f4:
77:a5:7b:52:b8:7a:d5:12:fe:85:ad:14:e8:f8:99:34:62:48:
18:fd:0e:4e:7b:6a:c2:43:f4:3b:1a:95:31:93:40:3f:75:76:
b1:55:49:78:1a:f1:a8:d7:0d:c6:d1:5e:b8:66:42:9d:36:92:
1a:1b:40:e3:a3:95:55:03:6a:14:1b:72:a0:8d:f1:ae:dc:b5:
68:28:a8:ca:c9:86:b5:87:bf:46:93:43:d6:8b:2a:7a:c1:92:
8d:e0:99:85:f1:77:5a:de:7a:e0:6d:01:63:42:b6:de:38:34:
24:2c:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:12 2025 by rpki-client