Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: eEyo+HuCLGUzCLjHfBMDwKPvgb6z5RROMOaxlnxRg8g=
Subject key identifier: 5A:7C:19:75:4B:4C:F8:DF:D1:97:BD:B7:64:05:66:A5:91:B7:97:A2
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 019848529904CD4489DB20B20D668703C971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 14FF
Signing time: Sat 26 Jul 2025 20:00:29 +0000
Manifest this update: Sat 26 Jul 2025 20:00:29 +0000
Manifest next update: Sun 27 Jul 2025 20:00:29 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: Dx6zGDee8Kk9HBJQJGV1q58kgKbih0NZqF5grJMcCPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:99:04:cd:44:89:db:20:b2:0d:66:87:03:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Jul 26 20:00:29 2025 GMT
Not After : Jul 27 20:00:29 2025 GMT
Subject: CN=5a7c19754b4cf8dfd197bdb7640566a591b797a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:4a:cc:4f:3d:70:4d:c3:c8:7c:da:38:b3:
1a:9a:bd:d5:2c:42:27:ce:f9:20:cf:c2:b4:89:49:
d6:2b:39:2c:45:0f:21:bb:63:6b:10:2c:6f:d3:02:
35:d8:88:dd:af:37:47:1a:d4:c5:cb:ea:1c:3c:df:
fa:c0:55:c4:69:b7:34:cc:bb:9f:c4:8c:7f:ca:73:
fd:58:2c:f7:79:03:0b:89:ac:17:32:94:85:84:92:
cc:7f:5d:76:36:14:21:c7:d9:b2:1b:62:78:55:c8:
af:76:65:4d:12:a2:f0:4e:25:ca:d4:0c:2d:e3:3c:
89:a2:da:e7:cc:fa:2b:ac:32:32:18:25:3e:38:a1:
ff:94:db:ef:85:2d:f0:be:0e:b9:8f:4a:ac:dc:d7:
79:49:3d:58:e2:68:be:37:4d:79:e0:e2:cf:a5:dd:
4a:88:ae:1d:86:9f:96:35:3d:1a:13:b6:26:91:b1:
62:d9:76:72:e0:07:d1:78:d6:00:13:06:74:30:ae:
be:56:43:19:2a:fe:09:65:44:72:fe:60:87:0d:98:
a6:d0:05:9f:03:ba:c1:2d:d7:70:c7:8d:28:e0:21:
f6:88:25:b1:fd:e0:9c:8c:66:ea:38:28:37:90:7a:
ce:94:a5:7a:18:75:a0:e4:09:c4:47:49:21:0f:67:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:19:75:4B:4C:F8:DF:D1:97:BD:B7:64:05:66:A5:91:B7:97:A2
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:86:67:06:47:61:2a:bf:39:eb:c8:06:98:71:28:88:7c:b7:
59:d8:cd:8e:78:84:35:d6:8f:f3:67:2d:83:be:49:64:87:26:
3a:82:6f:5f:17:ee:ba:dc:13:91:d1:98:e0:8c:e9:8a:d5:3c:
34:02:90:c2:70:64:2b:1d:d0:65:4e:3d:36:42:8e:5f:72:ca:
cf:33:c6:d5:b1:df:bc:bf:cb:1f:41:f5:c6:7f:39:ae:98:47:
5c:96:6b:b0:c8:c7:62:08:bf:ed:d7:f5:6c:97:b8:bb:3c:2f:
9b:ff:21:97:14:c8:cc:32:74:ac:ad:8d:be:88:d1:0b:16:77:
f3:f6:9e:b2:50:6b:99:e0:2c:60:96:4e:1b:1d:82:73:e6:84:
4b:9c:47:a1:fe:ac:8f:c2:7c:05:f9:26:89:f3:78:6a:1f:0d:
bc:9e:0e:95:15:9b:ba:44:90:83:87:b7:1e:84:fa:a3:d2:bc:
a1:7b:e4:58:20:b8:7a:8a:25:10:d0:13:13:d5:0b:17:19:41:
77:08:95:35:2f:be:5f:43:95:a8:c4:e6:9f:13:31:e0:b1:bd:
36:a4:e7:6f:29:83:7d:db:04:ff:98:c9:b1:5f:b4:30:74:f3:
97:8c:67:88:92:7c:d0:2c:5c:54:b6:76:3a:56:80:43:eb:30:
7e:22:32:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUpkEzUSJ2yCyDWaHA8lxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4
NzgzYWIwHhcNMjUwNzI2MjAwMDI5WhcNMjUwNzI3MjAwMDI5WjAzMTEwLwYDVQQD
Eyg1YTdjMTk3NTRiNGNmOGRmZDE5N2JkYjc2NDA1NjZhNTkxYjc5N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QlKzE89cE3DyHzaOLMamr3VLEIn
zvkgz8K0iUnWKzksRQ8hu2NrECxv0wI12IjdrzdHGtTFy+ocPN/6wFXEabc0zLuf
xIx/ynP9WCz3eQMLiawXMpSFhJLMf112NhQhx9myG2J4VcivdmVNEqLwTiXK1Awt
4zyJotrnzPorrDIyGCU+OKH/lNvvhS3wvg65j0qs3Nd5ST1Y4mi+N0154OLPpd1K
iK4dhp+WNT0aE7YmkbFi2XZy4AfReNYAEwZ0MK6+VkMZKv4JZURy/mCHDZim0AWf
A7rBLddwx40o4CH2iCWx/eCcjGbqOCg3kHrOlKV6GHWg5AnER0khD2c/oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp8GXVLTPjf0Ze9t2QFZqWRt5eiMB8GA1UdIwQY
MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt
N2UxMmI4N2QwNmMyLzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy
LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4ZnBkdh
Kr8568gGmHEoiHy3WdjNjniENdaP82ctg75JZIcmOoJvXxfuutwTkdGY4IzpitU8
NAKQwnBkKx3QZU49NkKOX3LKzzPG1bHfvL/LH0H1xn85rphHXJZrsMjHYgi/7df1
bJe4uzwvm/8hlxTIzDJ0rK2NvojRCxZ38/aeslBrmeAsYJZOGx2Cc+aES5xHof6s
j8J8BfkmifN4ah8NvJ4OlRWbukSQg4e3HoT6o9K8oXvkWCC4eoolENATE9ULFxlB
dwiVNS++X0OVqMTmnxMx4LG9NqTnbymDfdsE/5jJsV+0MHTzl4xniJJ80CxcVLZ2
OlaAQ+swfiIySQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:23:16 2025 by rpki-client