Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File: mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier: P9FexEquVInT0vEvFAjugb+iiOCj0PAU6XD1ry9TdBQ=
Subject key identifier: D9:31:31:CE:2E:A1:DA:B5:12:19:D9:AD:E8:CB:6F:FB:F5:80:DD:EF
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer: /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial: 019A722665F5353807FCC4C4A7F78B184024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: 6VEj8hFX83dP4cTfcpFmDeB3WK4.roa (hash: 9iNEtr8XsCFGn75dg2M+2IpdUdlrA9H+OLDn6Iw/O78=)
2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: N/kz6O1fYnew7ptDtuTVVaSCvdhY6Xi/MNfngtvAW8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:65:f5:35:38:07:fc:c4:c4:a7:f7:8b:18:40:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=d93131ce2ea1dab51219d9ade8cb6ffbf580ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:13:de:52:5f:37:dd:79:f6:b6:86:a5:2b:
b4:ad:a9:58:59:ec:91:51:ea:24:66:7c:11:85:8e:
1d:76:b7:86:37:ca:a4:23:11:80:dd:69:4c:15:44:
da:ab:95:2d:69:2d:c3:63:b0:0f:80:1d:b0:1c:e1:
23:97:72:20:9d:80:ac:0d:9f:0b:55:4e:b4:d5:17:
a9:ce:3c:e4:5a:5b:fd:45:85:67:20:7e:a2:da:04:
5e:89:d9:98:37:e3:62:70:d6:74:b1:4c:57:fc:94:
eb:13:3a:bb:d8:36:90:fa:cf:17:d1:32:31:5a:9a:
bc:c2:8a:2b:5c:7c:3f:b3:b2:bf:3f:a9:64:4b:fb:
d2:59:14:76:ec:b9:27:09:e9:e2:9e:9e:67:a1:f1:
f4:8e:a8:71:0c:b2:fb:7d:21:a4:13:12:77:b2:fe:
8a:00:85:8b:80:83:27:ec:90:a4:5b:8a:c7:98:e4:
4c:29:5f:f8:69:8e:1d:a7:61:3e:6d:ac:ba:55:2a:
06:80:f8:ab:e6:41:87:34:bb:fe:54:c8:ff:29:ed:
2c:46:de:39:ed:db:a1:44:fd:25:b2:5e:14:83:fc:
de:59:1f:e2:71:33:5b:01:dd:04:51:7d:a8:6b:e0:
cc:d1:f1:90:de:b4:7c:ea:7a:88:46:ce:d8:fa:46:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:31:CE:2E:A1:DA:B5:12:19:D9:AD:E8:CB:6F:FB:F5:80:DD:EF
X509v3 Authority Key Identifier:
keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:99:30:c3:04:f1:7e:80:eb:ed:27:82:98:cd:53:b3:74:
41:a5:18:37:72:ce:cd:6f:87:29:b5:10:27:57:b8:c0:6e:e8:
e0:9a:cb:40:81:f9:b1:a8:c6:2f:f2:42:99:78:9d:99:dc:66:
3b:b9:a8:12:77:5a:df:42:77:df:04:11:e8:da:9d:80:97:28:
18:ea:6e:57:9a:98:3c:25:4b:fe:4e:52:69:40:73:f8:02:37:
4a:b5:5a:e2:6d:f5:fa:23:67:64:bd:cd:54:73:95:15:99:89:
27:c5:97:96:d1:41:70:5e:f4:d0:e3:b7:3a:34:fd:2e:d9:5f:
e1:94:ea:35:2a:2e:b7:0a:ee:a9:3f:2c:4b:86:39:d4:94:9a:
e2:99:09:61:84:0f:8d:c6:91:bc:12:87:be:fd:2b:75:fc:07:
fc:7c:97:c4:20:da:4f:da:f2:cb:79:3a:d8:16:a2:89:cc:f3:
f0:73:2c:89:e5:67:d4:18:cf:9c:90:81:2b:ed:ff:db:9c:6a:
83:df:9a:a6:71:65:e1:d3:22:2b:94:db:b4:ee:f7:d6:42:b4:
e0:a1:7b:01:c8:75:58:f9:83:e6:2c:86:b3:7f:0f:62:fa:7e:
07:7b:5f:c1:3f:b7:fc:74:23:c8:f3:72:39:1a:bd:a6:f0:61:
5a:f9:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:12 2025 by rpki-client