Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: cp6P1VFnK5gu/i67DP0tjVs7RROL/8AfRcRmwRxBTiM=
Subject key identifier: E8:11:80:DC:1E:E4:2E:09:C5:5E:ED:DC:C3:95:BE:06:70:E8:BE:8E
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 0199FDD8C3A829B0FE95BB166E177281EC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 10DE
Signing time: Sun 19 Oct 2025 19:01:05 +0000
Manifest this update: Sun 19 Oct 2025 19:01:05 +0000
Manifest next update: Mon 20 Oct 2025 19:01:05 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: O5StnpHADO1KXSUQ/bTEIe+ptv67NwsgNvZuLmKu4rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c3:a8:29:b0:fe:95:bb:16:6e:17:72:81:ec:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Oct 19 19:01:05 2025 GMT
Not After : Oct 20 19:01:05 2025 GMT
Subject: CN=e81180dc1ee42e09c55eeddcc395be0670e8be8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:74:9d:1f:a6:03:97:5a:bb:f2:04:fc:c1:
f6:ec:3c:0f:5a:e9:d9:14:b3:52:1d:27:e8:49:59:
a8:18:94:a0:51:3f:23:42:a1:d4:a3:b3:8b:1f:5c:
7f:63:e4:91:14:fb:f4:57:89:10:10:c6:18:ef:3b:
d5:39:0b:38:26:fa:48:ec:3c:cf:91:b1:47:92:43:
21:5e:da:e7:85:a4:9f:17:5c:63:72:7e:8d:04:89:
34:10:6a:29:5c:47:48:06:37:ad:ae:2d:5f:81:d3:
e3:45:08:ac:45:ea:9f:4b:13:db:53:20:a3:62:04:
60:f2:de:5c:71:3b:1c:4c:fb:b1:e3:d6:db:cd:d9:
7c:6c:47:22:2f:9a:cf:fa:d6:90:4c:00:58:02:fa:
20:b2:8d:29:e5:c0:f8:41:43:e7:51:0d:7a:5c:56:
37:e1:23:b7:ff:d8:b7:0a:30:c2:20:7d:55:9e:01:
9d:74:c0:b1:0e:28:79:57:e9:13:9a:d3:1a:69:3a:
3c:1d:a5:42:34:38:64:78:df:5b:f7:fb:dd:bd:b1:
e8:c2:f2:24:5a:fa:bc:4b:a1:f3:fc:ef:29:78:07:
ec:dc:9a:e6:f1:ab:de:5b:60:8e:8c:ed:38:72:b8:
27:9d:ec:85:53:fe:57:f0:4d:dc:dd:31:f6:1a:4d:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:80:DC:1E:E4:2E:09:C5:5E:ED:DC:C3:95:BE:06:70:E8:BE:8E
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a0:13:0c:ae:7f:71:ed:c5:06:f4:f7:4d:39:68:09:c9:b9:
b1:87:1e:a5:2e:0b:8f:5b:b1:a1:c7:7d:ec:c8:ac:9f:83:0f:
78:97:77:1d:cc:a2:53:9a:79:9f:59:06:e9:c5:b9:92:b0:06:
7e:a0:28:ad:44:27:02:7a:4d:aa:7a:fd:1f:c4:d8:07:8e:14:
12:fd:d6:c4:6d:38:5a:4d:42:fc:80:44:54:f3:bd:f6:ef:ed:
a6:8d:12:96:a8:a3:a8:fc:db:fe:b4:25:06:af:75:28:6b:57:
b7:12:af:47:f0:66:b3:14:8f:e2:f2:eb:ff:27:16:43:3d:e6:
cf:29:08:07:ff:d7:08:bf:6f:f5:57:75:56:d2:40:4b:8f:94:
14:43:c1:62:12:3f:4f:f3:23:71:a3:2e:a3:46:07:3d:a4:e4:
eb:8a:49:7f:f2:16:8e:93:f0:8a:9d:a5:58:f7:76:35:b0:b6:
f5:90:18:ef:a2:21:1e:3b:65:ec:ba:68:ff:a9:0a:c1:cb:24:
64:a9:b3:63:42:e6:af:a2:c7:62:e9:7f:1d:9f:64:fb:7f:17:
84:bf:fd:fa:fd:d5:e5:a8:83:06:cb:37:49:18:98:22:d6:a6:
02:44:3c:94:07:80:fd:e0:b5:01:b4:0a:83:08:84:4c:1b:f4:
c6:18:36:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:20 2025 by rpki-client