Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: sGPjBTFcExDSDFIkNd0IiCrET7nj89MvTMfX4iCoYrE=
Subject key identifier: E6:4B:AE:57:27:8D:46:36:50:11:EB:FA:24:87:46:35:96:8E:0A:60
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 01984964FC4E4E2FA6F5CF616FA45461EACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 0FFC
Signing time: Sun 27 Jul 2025 01:00:11 +0000
Manifest this update: Sun 27 Jul 2025 01:00:11 +0000
Manifest next update: Mon 28 Jul 2025 01:00:11 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: pK/hCTk9FmoJ/9XsNJVg3dZGCJLGMmK00jrT8y0TuEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:fc:4e:4e:2f:a6:f5:cf:61:6f:a4:54:61:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Jul 27 01:00:11 2025 GMT
Not After : Jul 28 01:00:11 2025 GMT
Subject: CN=e64bae57278d46365011ebfa24874635968e0a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:07:51:28:ae:0e:de:0b:eb:57:f2:25:8d:
d9:d6:e1:4a:d5:e3:f5:00:6e:d5:a3:b4:28:ba:30:
e9:97:91:d3:f9:2e:b8:26:ef:d8:68:9d:54:01:2f:
fc:c8:e6:af:32:b0:6a:ba:c4:a7:98:64:26:f9:2d:
20:a0:2c:e7:4b:9a:44:18:8c:83:74:22:ba:27:64:
c8:50:f1:5f:38:75:66:8c:ab:19:09:74:8f:62:f4:
5f:d6:6b:b1:a1:92:97:ed:02:51:4b:04:1b:42:5f:
e1:a8:7a:85:75:05:05:a5:63:53:da:8a:76:02:d5:
8d:e0:1a:c6:bc:57:9a:7f:99:33:84:4b:0f:d4:99:
cc:0c:2d:d8:96:37:2b:c6:2a:95:c3:4b:0e:5d:34:
51:4d:b9:f0:d5:32:b9:0e:2b:f1:a7:1d:e5:13:b6:
21:1b:2f:a4:b7:64:cb:06:10:fb:24:59:10:20:37:
a8:0c:e2:20:96:88:23:78:51:20:e8:f1:49:fe:a5:
c8:e9:0d:52:ee:17:99:75:24:44:f6:2c:f4:d1:03:
f2:4f:84:43:f3:e8:1c:6a:bd:62:85:0b:f4:f0:46:
35:37:84:3a:e6:c8:5d:80:21:f4:2d:54:27:2f:b9:
39:39:7d:2b:17:22:70:58:70:bb:44:be:b9:be:c3:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:AE:57:27:8D:46:36:50:11:EB:FA:24:87:46:35:96:8E:0A:60
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5e:3b:62:c6:68:55:41:8a:bc:3b:11:69:56:da:86:f1:a5:
c0:d3:64:6d:f0:21:cd:6e:ce:b6:89:38:dc:9d:a9:17:c8:ed:
1e:9d:87:93:37:4c:10:fd:42:40:78:7b:46:f1:41:81:5d:b9:
3d:2f:27:c5:91:e3:c9:37:fc:df:35:05:97:6e:b2:bf:e6:29:
b0:27:be:48:c2:b3:02:3c:31:e1:63:00:f9:97:49:3d:4b:c0:
31:bd:31:b4:de:19:6a:54:02:17:fb:0a:a0:50:db:ba:c0:3d:
49:ac:0f:43:3f:23:cf:49:bd:7a:c8:95:4a:9a:ed:da:c2:0f:
67:bc:f5:c4:dd:ec:41:18:8e:e7:20:62:da:4e:c4:f3:ed:70:
b7:77:7a:f9:3c:fd:4d:9f:70:7c:ae:ca:dd:f4:8a:ff:7c:dc:
89:88:3f:c3:f1:c8:aa:ac:f3:d6:5c:92:c0:ff:57:70:05:77:
ad:22:82:0f:da:6e:55:23:58:db:c6:69:00:bd:d9:65:8e:f6:
92:a2:9d:29:e1:b8:21:6c:3e:53:cb:b0:74:7f:79:ca:2f:2b:
7a:a2:6f:39:01:6e:c2:c6:31:2b:d8:85:d2:30:ad:91:d1:06:
8d:6b:5f:4b:f2:ae:16:9b:07:e4:2d:72:e2:74:5d:23:41:ae:
c4:bd:8a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZPxOTi+m9c9hb6RUYerKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTE4ZDdkMTgwZjM2ZTc2NTEyYTQxNjExYTBiMjhhOGI0
MGM1MmUwHhcNMjUwNzI3MDEwMDExWhcNMjUwNzI4MDEwMDExWjAzMTEwLwYDVQQD
EyhlNjRiYWU1NzI3OGQ0NjM2NTAxMWViZmEyNDg3NDYzNTk2OGUwYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdgHUSiuDt4L61fyJY3Z1uFK1eP1
AG7Vo7QoujDpl5HT+S64Ju/YaJ1UAS/8yOavMrBqusSnmGQm+S0goCznS5pEGIyD
dCK6J2TIUPFfOHVmjKsZCXSPYvRf1muxoZKX7QJRSwQbQl/hqHqFdQUFpWNT2op2
AtWN4BrGvFeaf5kzhEsP1JnMDC3YljcrxiqVw0sOXTRRTbnw1TK5Divxpx3lE7Yh
Gy+kt2TLBhD7JFkQIDeoDOIglogjeFEg6PFJ/qXI6Q1S7heZdSRE9iz00QPyT4RD
8+gcar1ihQv08EY1N4Q65shdgCH0LVQnL7k5OX0rFyJwWHC7RL65vsPKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZLrlcnjUY2UBHr+iSHRjWWjgpgMB8GA1UdIwQY
MBaAFJqRjX0YDzbnZRKkFhGgsoqLQMUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYt
OTNmNDg2YjhiOTYxLzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYtOTNmNDg2YjhiOTYx
LzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF47YsZo
VUGKvDsRaVbahvGlwNNkbfAhzW7Otok43J2pF8jtHp2HkzdMEP1CQHh7RvFBgV25
PS8nxZHjyTf83zUFl26yv+YpsCe+SMKzAjwx4WMA+ZdJPUvAMb0xtN4ZalQCF/sK
oFDbusA9SawPQz8jz0m9esiVSprt2sIPZ7z1xN3sQRiO5yBi2k7E8+1wt3d6+Tz9
TZ9wfK7K3fSK/3zciYg/w/HIqqzz1lySwP9XcAV3rSKCD9puVSNY28ZpAL3ZZY72
kqKdKeG4IWw+U8uwdH95yi8reqJvOQFuwsYxK9iF0jCtkdEGjWtfS/KuFpsH5C1y
4nRdI0GuxL2KlA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:13 2025 by rpki-client