Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier: bbQNttXSGx9+ZRUWwDLxrfcRtqDPVUqKCZlzi1fefkE=
Subject key identifier: 34:98:E7:83:6B:29:95:18:E2:91:36:77:D1:23:8D:5A:38:20:0A:FF
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 0199FC58EC9EDC38AEC190009F6030428B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number: 0597
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=)
2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: Kj4DNFScD+Dyz7Cmc24mYgmeozqEhzM0+KOf2JpjBEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ec:9e:dc:38:ae:c1:90:00:9f:60:30:42:8b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=3498e7836b299518e2913677d1238d5a38200aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:08:9f:d3:3b:97:57:7d:c7:a8:8f:dc:01:
47:6a:5d:c2:0e:09:8d:8f:b1:6d:b9:87:05:9f:e0:
f7:ca:d5:85:9f:7a:0f:15:9c:54:ff:ea:5b:b3:bb:
c2:4c:79:2a:b9:83:7a:0b:18:1e:05:61:64:30:7d:
1e:3e:53:f5:f5:5a:f5:eb:14:7c:1f:95:e3:2e:49:
43:c5:c4:c8:46:1a:6c:c4:49:32:2b:60:d1:94:f9:
03:33:e7:f1:44:bd:89:bd:a4:3d:00:65:cb:92:31:
b8:74:ab:f3:3f:b4:af:a3:f3:05:bd:b6:f6:7c:93:
be:3a:5a:30:ed:29:73:4f:62:36:6f:4c:29:bb:94:
c3:21:39:45:00:e1:51:b6:25:32:95:bb:c2:3f:78:
60:c6:29:29:48:62:40:54:1e:4b:01:13:d1:31:ab:
26:4f:ed:c7:8b:0c:7d:95:12:3f:5c:80:e6:6e:35:
92:a8:be:2f:a5:ad:14:e7:b7:47:dc:da:8a:c5:b9:
5f:6b:6f:01:42:e8:ed:9d:0b:26:aa:2e:df:74:b8:
5f:c2:73:53:a9:24:62:fb:94:58:fe:0c:d2:e9:e6:
8c:6c:1b:07:2b:f1:14:43:59:2e:4a:dc:2d:4a:03:
57:9b:59:09:3e:6e:17:10:09:9e:72:c9:c9:bf:ce:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:98:E7:83:6B:29:95:18:E2:91:36:77:D1:23:8D:5A:38:20:0A:FF
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:0f:3d:58:38:08:d5:3f:28:2d:89:d0:14:f6:45:a9:ba:
b0:d7:e2:47:c6:0e:20:41:4d:23:47:bc:19:3d:10:fb:d6:5a:
f6:c6:5a:18:c4:29:f4:64:e5:3f:f7:38:80:52:5f:90:af:f5:
23:84:f0:e8:ed:47:95:8c:b3:11:78:55:e1:a7:ec:95:82:a0:
69:5b:13:31:dc:de:bd:96:e6:9a:b0:85:8f:90:6b:d2:bf:f4:
38:77:65:81:98:21:c9:59:98:3c:7e:2e:47:43:8d:2f:2f:12:
be:a8:58:1d:5f:cd:df:64:f4:e8:b5:cd:77:a9:0f:0a:7c:d0:
1b:76:c1:a6:80:c7:a5:6b:3e:49:99:ce:f3:b4:9e:6d:20:92:
9e:47:8d:b5:28:72:1a:8a:d3:1c:21:26:b5:32:56:5a:30:cb:
29:1a:9c:85:53:b6:b8:6a:34:54:80:93:17:c9:8c:a0:47:ea:
88:83:3d:6c:b0:11:29:dd:82:e4:db:da:1e:1d:b1:7d:2b:10:
de:fc:92:8e:71:2a:b0:80:92:00:49:6b:5e:36:80:ae:39:8a:
6c:ca:19:09:27:c1:97:8b:7c:1f:5a:19:c4:89:5e:cb:e5:46:
5d:f3:35:2c:ea:21:9c:2a:16:89:cb:82:02:3e:a1:3d:06:76:
cd:30:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:37 2025 by rpki-client