Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: RKUGHpq/F7d2T8GQqB9FqfPW44ADbblPEVWYL9o3ILY=
Subject key identifier: 64:63:96:80:A8:0A:76:D9:29:46:8F:0A:97:6C:73:B1:8E:B7:75:C7
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 0199221F2A699741AD2EA1CC27FB8A6B2D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 0A18
Signing time: Sun 07 Sep 2025 03:01:31 +0000
Manifest this update: Sun 07 Sep 2025 03:01:31 +0000
Manifest next update: Mon 08 Sep 2025 03:01:31 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: /SKwB1yYGXY0hddlHXZOcC59fC3qtBveUnJnVxGugL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:2a:69:97:41:ad:2e:a1:cc:27:fb:8a:6b:2d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Sep 7 03:01:31 2025 GMT
Not After : Sep 8 03:01:31 2025 GMT
Subject: CN=64639680a80a76d929468f0a976c73b18eb775c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:12:f7:e0:3e:d1:ca:3b:0c:8d:38:47:93:
9b:73:87:88:1c:28:7d:d8:4e:fd:83:70:74:1a:97:
18:83:12:f7:cb:f1:74:04:74:b8:4d:fb:f6:67:80:
6e:2d:61:9e:8d:ab:8d:b1:bf:3d:0e:d0:e7:ca:9e:
43:01:c5:93:0b:94:c9:ca:0c:18:3b:b1:59:df:8f:
0d:72:17:26:a4:66:68:d9:4b:b6:4e:c9:f1:0f:78:
83:9b:7b:75:16:32:0d:c8:2d:fc:60:e7:5b:85:db:
ac:ef:10:a4:2f:8d:57:e7:b4:7b:cc:a6:b2:bd:8b:
63:50:69:e5:c1:bf:36:ab:7c:18:7d:33:ac:be:f0:
e5:6c:bd:8b:38:8a:af:df:76:a3:25:06:43:72:f9:
aa:a0:4f:13:a0:27:d2:a2:3f:e0:b7:3a:8c:36:4b:
62:c7:40:34:d9:32:e0:42:fc:2c:92:3e:44:a9:97:
f1:bc:19:16:c3:2b:36:32:a9:94:d6:80:d3:aa:f1:
4b:93:97:c5:27:2f:0e:63:4f:9d:7e:91:b4:cd:e4:
36:89:51:64:bf:10:34:18:c8:8d:1f:dc:24:8e:ab:
05:71:30:d3:0e:ce:7a:49:fe:34:8e:b5:6f:4f:b6:
90:f5:46:4e:87:a0:af:b6:41:66:75:4c:88:8e:93:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:96:80:A8:0A:76:D9:29:46:8F:0A:97:6C:73:B1:8E:B7:75:C7
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:00:8a:ee:bb:1f:33:a5:e9:d4:99:91:03:68:42:4d:42:e5:
3e:59:c4:49:9f:15:5e:2c:19:b6:37:16:9c:c6:51:fc:3c:16:
41:24:27:97:c9:64:c3:df:19:7c:b5:f3:0d:bf:78:cb:84:8d:
98:97:5d:f6:ad:f2:d5:0e:98:97:49:e2:3d:88:84:49:5b:15:
7f:ab:08:80:ff:7a:e9:bb:e6:39:d8:e9:43:8e:7e:dc:64:53:
4b:7a:62:86:e6:27:36:77:7a:fd:1b:bd:bf:5d:e5:23:b6:92:
2f:46:4e:44:b6:03:ed:2e:fd:18:7e:82:12:11:51:43:d2:32:
4c:94:68:a3:11:06:f3:89:43:9b:21:98:14:42:19:6b:ee:d0:
78:bd:68:be:8c:2b:c3:2f:9b:5c:3d:25:ac:0b:31:0b:e5:00:
b7:63:37:9c:24:00:8d:76:36:aa:78:3b:20:16:ba:55:20:27:
84:82:60:d5:7c:fa:6f:c8:ba:c4:ba:bb:0c:5d:c4:a4:78:b7:
9b:2b:c5:9c:b3:d0:83:6c:fc:3f:b1:19:ab:1a:cb:1a:d5:05:
c7:de:9e:55:78:f2:b4:2e:55:ad:48:2a:03:f9:d8:b9:c0:0f:
d7:99:4b:77:c2:1c:aa:f2:67:ce:46:03:2d:8c:a0:f4:f7:6b:
7a:47:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:45 2025 by rpki-client