Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
File: mpTE6sr0BAocMO0e3qjjAAcxtqo.mft (raw, json)
Hash identifier: VsCtGeGWkKfiCrAN2V2mOwmGXSjd16Y/IMKbtxZB9Yo=
Subject key identifier: 20:C1:23:7C:17:9C:E5:31:36:0E:F9:62:1C:B6:AE:EC:B7:D0:AB:6E
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 0198D4DFF4681FDFCFEFAA5E9AFB25E10BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
Manifest number: 04FE
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (hash: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=)
2: mpTE6sr0BAocMO0e3qjjAAcxtqo.crl (hash: SdMh5+KS+xMzXlbMWNaEbR/TmX5EsQm2zd6VW7PnR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f4:68:1f:df:cf:ef:aa:5e:9a:fb:25:e1:0b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=20c1237c179ce531360ef9621cb6aeecb7d0ab6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:ed:5a:57:f5:7a:fe:51:a5:56:88:cf:e4:
8a:3d:bf:e6:67:6e:fd:8f:a3:56:b1:54:07:4f:97:
02:07:cd:03:22:1f:7a:ef:c1:7f:b6:ed:eb:2d:af:
37:01:77:37:f1:d3:89:37:8c:c4:97:55:c1:af:45:
f3:06:c4:08:a5:ca:24:69:0c:1b:b3:d0:39:1d:ef:
26:fd:0b:c7:3b:a0:d6:28:94:5e:78:c1:f4:9a:8e:
11:38:aa:f4:1a:a3:bb:03:8c:01:5e:4d:12:69:3f:
7a:ac:a6:ba:98:a4:8d:62:15:19:c9:d5:e5:eb:08:
ec:30:3e:d3:b3:95:3c:59:af:da:32:24:ec:fd:83:
67:a0:7f:04:6d:bc:ee:b5:6d:0c:74:fc:0e:12:51:
2f:19:b6:78:c6:bf:a7:4e:f4:7d:92:69:af:f2:a4:
96:6a:fe:47:31:79:53:4c:9f:60:99:09:9f:ad:93:
c3:49:7c:a7:fa:a5:cd:e9:bd:c1:69:c9:0b:4e:f8:
1f:71:0b:01:46:40:9f:d4:e8:f6:df:3f:a3:d0:ba:
79:db:74:cc:ec:18:e4:54:64:0f:6f:a2:16:c1:56:
1d:d2:7b:4b:d3:ef:2b:bd:f0:ab:fc:78:83:9a:e8:
0c:3b:5b:8d:fc:b7:e5:7a:99:b2:2f:11:f4:4a:0a:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:23:7C:17:9C:E5:31:36:0E:F9:62:1C:B6:AE:EC:B7:D0:AB:6E
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:89:79:bd:79:ca:e5:dc:41:2a:44:f4:c1:8d:c2:3d:a4:84:
99:0d:92:ba:ca:0a:c7:73:48:31:1f:cf:c8:82:90:45:ad:cc:
52:8e:55:44:98:18:08:ee:19:26:3f:48:12:d3:65:e4:76:bd:
64:51:df:ec:d8:83:f4:07:8b:7f:b1:cf:27:11:3b:63:ba:fe:
5b:fd:0d:06:fc:3a:32:e5:ce:6c:69:94:c6:84:13:65:31:da:
0a:d5:c6:c5:bc:09:64:0a:5e:c6:1f:d6:24:06:0f:a4:49:1a:
ef:4c:e5:3f:5a:cf:90:91:39:d3:59:7c:8e:27:e0:d5:82:5f:
40:95:35:23:bd:f7:f7:03:2c:ba:3a:cf:97:75:0a:8f:60:02:
89:56:7d:6e:32:10:98:a6:82:cc:42:d5:9e:7e:9c:bc:8f:bd:
63:7f:62:e0:26:5f:ea:3b:8e:ec:bd:c4:9d:2a:a2:58:af:12:
48:67:f8:ee:c7:3b:09:38:35:c0:7e:c9:04:6e:b2:c2:6d:f0:
cb:02:e2:92:9c:ce:b2:be:1b:8e:b7:98:43:f5:a6:f6:58:69:
d9:c1:f4:a0:29:7b:01:08:59:d6:c8:26:c3:49:7f:64:e1:d5:
ca:e6:89:11:c7:31:b2:ae:2c:97:b3:1a:dc:36:a0:67:97:86:
98:a2:e1:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/RoH9/P76pemvsl4QvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTRjNGVhY2FmNDA0MGExYzMwZWQxZWRlYThlMzAwMDcz
MWI2YWEwHhcNMjUwODIzMDMwMTQzWhcNMjUwODI0MDMwMTQzWjAzMTEwLwYDVQQD
EygyMGMxMjM3YzE3OWNlNTMxMzYwZWY5NjIxY2I2YWVlY2I3ZDBhYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UrtWlf1ev5RpVaIz+SKPb/mZ279
j6NWsVQHT5cCB80DIh9678F/tu3rLa83AXc38dOJN4zEl1XBr0XzBsQIpcokaQwb
s9A5He8m/QvHO6DWKJReeMH0mo4ROKr0GqO7A4wBXk0SaT96rKa6mKSNYhUZydXl
6wjsMD7Ts5U8Wa/aMiTs/YNnoH8EbbzutW0MdPwOElEvGbZ4xr+nTvR9kmmv8qSW
av5HMXlTTJ9gmQmfrZPDSXyn+qXN6b3BackLTvgfcQsBRkCf1Oj23z+j0Lp523TM
7BjkVGQPb6IWwVYd0ntL0+8rvfCr/HiDmugMO1uN/LflepmyLxH0Sgpw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDBI3wXnOUxNg75Yhy2ruy30KtuMB8GA1UdIwQY
MBaAFJqUxOrK9AQKHDDtHt6o4wAHMbaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Y2UxNWYtNTU5YS00M2I0LWEwNTkt
Y2JkNGI0YmI2ZjFkLzEvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85Y2UxNWYtNTU5YS00M2I0LWEwNTktY2JkNGI0YmI2ZjFk
LzEvbXBURTZzcjBCQW9jTU8wZTNxampBQWN4dHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA14l5vXnK
5dxBKkT0wY3CPaSEmQ2SusoKx3NIMR/PyIKQRa3MUo5VRJgYCO4ZJj9IEtNl5Ha9
ZFHf7NiD9AeLf7HPJxE7Y7r+W/0NBvw6MuXObGmUxoQTZTHaCtXGxbwJZApexh/W
JAYPpEka70zlP1rPkJE501l8jifg1YJfQJU1I7339wMsujrPl3UKj2ACiVZ9bjIQ
mKaCzELVnn6cvI+9Y39i4CZf6juO7L3EnSqiWK8SSGf47sc7CTg1wH7JBG6ywm3w
ywLikpzOsr4bjreYQ/Wm9lhp2cH0oCl7AQhZ1sgmw0l/ZOHVyuaJEccxsq4sl7Ma
3DagZ5eGmKLhqQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:56 2025 by rpki-client