Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: Uob8URZu5jEWkrpwdGGeIKCdMANWof6kRcbwYYZ0twQ=
Subject key identifier: 1E:D7:EF:B1:63:D9:28:15:81:3D:6F:54:E8:1A:6D:CE:91:DC:0C:4B
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 0197B88F6A98172B71F7D58031414EB940A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 0FB1
Signing time: Sat 28 Jun 2025 22:01:36 +0000
Manifest this update: Sat 28 Jun 2025 22:01:36 +0000
Manifest next update: Sun 29 Jun 2025 22:01:36 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: meKfVgcXNih29f709IhcrZSJPGSLOqL8nsGUwNqy9K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:6a:98:17:2b:71:f7:d5:80:31:41:4e:b9:40:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Jun 28 22:01:36 2025 GMT
Not After : Jun 29 22:01:36 2025 GMT
Subject: CN=1ed7efb163d92815813d6f54e81a6dce91dc0c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bb:3f:b6:02:ea:07:11:2f:16:80:b3:9e:c6:
ad:e4:00:42:d3:88:17:0a:15:36:cb:e4:8b:c4:dd:
eb:a2:3b:c6:8a:76:3c:9a:ba:f2:6b:c6:81:bd:87:
64:7c:b4:ce:f5:24:e3:76:7a:5f:4d:a3:9a:f8:20:
d3:e9:b5:91:bb:62:92:ed:e3:26:50:9b:5a:a7:89:
31:9f:16:be:0b:10:fc:e7:17:3e:a5:a3:0c:1e:34:
b7:94:17:5a:0c:2b:4b:b7:f4:a0:5b:41:c0:26:e7:
ff:ef:08:b4:dc:fe:45:29:b5:0a:ac:83:db:1d:9a:
90:c1:e3:60:ce:83:e6:91:29:bf:44:dc:6b:50:ba:
82:f1:6b:66:bb:8c:2d:63:45:33:21:ff:f0:b6:80:
b8:c6:9e:ff:1a:e2:08:03:c3:5d:bd:d6:28:96:8b:
05:92:2d:27:ca:ac:be:43:72:17:c3:3a:fc:fb:b9:
49:0b:fa:94:9b:80:37:0f:aa:ed:65:88:02:16:a7:
8f:bc:e6:9d:df:87:a9:7c:7b:00:10:ff:6e:0f:e3:
af:36:36:2b:97:3c:1b:48:91:ad:81:cb:31:f2:0a:
6e:c3:df:b4:fe:8a:84:d7:d8:31:b5:0a:c1:39:e9:
b9:63:13:a5:b0:33:23:9e:5e:80:ea:b9:0e:1c:a3:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D7:EF:B1:63:D9:28:15:81:3D:6F:54:E8:1A:6D:CE:91:DC:0C:4B
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7a:b4:37:02:4d:a8:0f:d7:87:fc:82:b1:32:05:d7:8f:a3:
0a:12:29:d0:a0:2f:48:44:77:2d:5b:f3:9e:0e:9e:8d:6d:4b:
37:fa:b9:04:da:79:db:1d:f3:88:1e:ec:fe:03:e4:03:4b:c5:
62:37:8b:86:10:dd:89:51:aa:07:0f:b1:57:e0:d2:6a:1f:ee:
ae:7e:cd:f6:b0:99:0a:7b:75:01:2a:bf:b2:09:23:ea:3b:a6:
4e:76:dc:e7:1e:03:15:ff:75:ab:d9:22:c5:f3:f7:27:0c:0f:
c0:32:2e:d0:fa:44:fb:6d:d9:df:10:ca:09:3e:d6:4e:16:09:
fe:e4:9d:de:4f:72:3d:07:66:25:b4:66:c3:d2:1a:32:b3:51:
01:54:8e:cf:0c:af:46:09:fb:45:b8:93:52:46:f1:f0:fe:99:
31:5d:27:92:1c:8e:57:f0:79:88:ab:c9:0e:ad:b8:65:b4:5d:
b4:9f:c9:29:b7:a0:cd:07:f0:a3:ba:e5:19:97:7b:d1:65:a9:
3a:2e:22:55:71:5c:5e:42:c7:56:45:eb:42:98:c9:2a:ff:6c:
1d:4d:ae:ba:d7:f0:63:c3:0d:f4:ce:5e:39:21:f3:d1:f4:7c:
98:e7:16:de:dd:45:e6:ab:87:f3:5c:d8:76:e7:d5:1f:f5:2e:
34:c0:30:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:25 2025 by rpki-client