Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: +pSwpJEhVA2vCNubN3P1DUtz5SMbuCcMQ83POjhrgvg=
Subject key identifier: F9:6A:78:AE:6F:22:54:09:6C:9A:98:56:7E:99:01:22:EE:C7:21:4F
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 0199FC21476855DC01241399E9A0F57E555F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: mSCOArkuGCoHBHWgfHTAScbG6l50p0tnCuxla8QWTas=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:47:68:55:dc:01:24:13:99:e9:a0:f5:7e:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=f96a78ae6f2254096c9a98567e990122eec7214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:7b:82:b0:7e:68:99:f7:6c:69:fa:99:23:
81:ce:2e:46:88:0f:c2:b9:b7:45:bc:61:1c:42:b4:
d8:60:64:34:0b:16:1e:1e:4d:92:0a:03:71:cd:21:
ca:87:e0:1f:3f:93:4e:f2:43:ab:6a:13:54:02:e5:
01:57:a5:c7:c1:9a:d5:b6:f9:5c:a9:d4:9e:c9:a4:
96:ee:82:ca:9a:3d:f2:95:cd:d4:a2:a2:f4:92:74:
c2:64:65:bc:90:b1:6a:45:2b:e0:56:a2:9f:2c:86:
b7:74:32:3c:bd:fa:07:90:a4:26:23:8d:bf:45:f4:
da:c3:92:db:ca:db:20:98:8e:d0:26:ac:a7:d0:33:
0a:19:d6:0d:f1:20:97:cd:26:ac:e6:a4:b5:17:b9:
4d:25:a5:1c:2c:8e:0e:59:f2:7b:ad:3e:74:b8:bd:
e2:9e:b2:67:dd:cf:11:1e:78:45:b3:f3:4f:6f:62:
85:09:ac:a5:fd:23:8b:34:54:4a:04:32:17:71:ed:
d9:fb:6d:5a:09:14:35:67:ee:9b:45:c3:9d:d5:77:
d2:f6:9d:3b:74:f7:70:0b:7e:86:a0:d9:8f:05:31:
f6:ca:37:64:04:df:9a:10:ce:16:2d:25:c6:71:7d:
cf:c8:75:c8:95:a8:82:4b:47:7f:6f:a9:62:5e:89:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:78:AE:6F:22:54:09:6C:9A:98:56:7E:99:01:22:EE:C7:21:4F
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:15:7d:bf:60:af:36:fd:65:e5:cb:1c:88:3d:2c:51:93:31:
ca:65:8a:39:5c:9e:c3:68:85:05:75:6f:8b:93:d8:91:ad:45:
d4:97:c4:57:76:51:9c:03:52:49:11:2a:1f:5e:31:7c:2e:6b:
aa:2e:f9:a9:af:ec:97:73:8e:8f:86:65:f8:2c:d7:06:52:d9:
bd:6e:ef:f6:68:41:25:33:6a:14:76:0c:1a:d1:8a:e4:b3:fb:
eb:f3:33:14:78:b4:21:32:ca:41:c0:72:ca:91:10:03:0a:e3:
32:5c:aa:1d:0f:73:ff:7f:4a:c5:89:ff:5c:16:ba:25:8d:fe:
ee:f8:f5:0b:9a:bc:59:c9:50:79:8b:aa:6d:ad:b9:fe:92:7f:
94:04:c0:db:6b:91:4e:bb:e2:a7:ce:c2:31:c7:30:86:02:9a:
b9:2f:b2:b6:ef:f9:45:16:7b:90:57:c3:39:43:f9:7c:55:e7:
8c:c3:3f:c9:29:7b:b4:d2:a5:ac:64:d3:b1:a2:2f:72:35:56:
9a:84:19:32:b0:b5:38:ab:3a:0d:96:9d:83:ad:35:86:0a:bb:
89:12:fc:6b:c0:a2:57:3b:8a:dd:0a:67:82:fe:aa:f5:57:c1:
3b:43:f4:bb:a4:3c:59:dd:57:78:5b:8f:e4:c3:d5:e8:23:20:
0a:68:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:06:06 2025 by rpki-client