Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File: mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier: obx/PcB6NzwE4+RDUwROCUvsgPrtQHy3cf2GnVomfLQ=
Subject key identifier: 21:9A:3A:D8:D5:1E:0D:C0:82:70:02:85:70:81:A2:A1:16:FA:A0:E5
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer: /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial: 019A725CBE9C4F17ADCFFACAD0E79308BBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number: 0B83
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: 2bA5f1VI5RA52Q257hd/Gw0e2bZHKo+ubVJMtcyeILg=)
2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:be:9c:4f:17:ad:cf:fa:ca:d0:e7:93:08:bb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=219a3ad8d51e0dc0827002857081a2a116faa0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:ad:d0:ac:c5:bd:ce:d1:32:eb:47:5e:c3:
f6:f2:63:79:86:73:b0:f5:d1:72:17:b5:a0:4e:f8:
62:af:f9:e8:9f:8a:3c:37:79:dd:2a:16:f2:4e:f1:
65:00:13:81:dc:80:70:8c:77:0c:75:7a:4d:3c:ff:
ed:48:d5:a3:a6:a1:21:41:dc:87:95:e2:b9:ab:a5:
1d:b7:84:d5:c4:bd:ac:7e:46:53:6f:76:8d:a3:f3:
9c:d2:6a:69:03:3e:2e:7b:99:9d:9d:ca:e2:62:47:
f1:84:31:10:f6:54:ee:a2:0f:b2:6c:b2:10:49:21:
09:61:10:e0:01:bf:ab:03:90:d9:15:b8:16:e2:51:
86:9b:ab:7d:5f:0f:66:cd:01:9c:90:69:22:1e:9c:
40:47:d0:34:f0:6c:79:fc:0f:1a:0c:36:55:63:8f:
89:4d:3d:97:19:ad:bb:05:d7:62:89:14:49:12:13:
04:e4:60:18:59:c1:cc:6c:f6:76:6f:ac:c2:f8:62:
6e:35:98:e9:d8:da:8e:21:39:fa:76:0a:1d:96:e2:
fa:19:88:8e:55:32:d6:06:b5:03:2f:f0:6e:8e:2a:
2f:fe:b4:24:3a:cd:d1:69:29:e8:16:b3:e3:d7:1d:
6c:38:c0:73:ce:f0:1b:54:68:b5:a4:81:e3:8a:a2:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:3A:D8:D5:1E:0D:C0:82:70:02:85:70:81:A2:A1:16:FA:A0:E5
X509v3 Authority Key Identifier:
keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:7b:ed:08:2d:bd:e3:82:10:c7:d2:aa:4d:fe:18:ac:e1:
68:8c:59:51:6d:0a:a4:7f:f1:ef:72:e8:d6:a5:0e:8f:42:d4:
ef:1c:43:b0:78:87:c1:36:6b:a5:fe:f4:7a:92:78:3e:ab:58:
c7:2a:20:4f:38:70:f7:1f:a2:c9:25:14:4e:ac:84:7c:9e:85:
e4:1d:53:7d:c3:ce:dd:a3:00:f4:6d:0d:80:6a:6c:0a:46:a0:
a5:a0:69:bc:ce:5b:4e:81:69:bf:59:6c:f6:66:93:33:8e:d1:
60:31:b4:c7:85:af:d0:ac:3a:6b:06:f3:17:73:2c:39:a1:d6:
31:41:44:ca:e1:28:5b:b9:71:0e:6b:d3:39:06:00:e6:e7:80:
db:db:8e:98:23:50:4e:fc:80:76:6f:a0:c9:52:b3:8d:0a:ac:
e0:12:ac:3b:c0:38:63:b0:eb:99:89:bb:a1:29:29:15:d4:d3:
90:a6:44:b6:f6:f2:04:bc:2f:6d:69:5f:ad:10:8f:cc:3a:75:
40:73:75:a7:ab:74:3f:8d:06:5c:b6:12:a0:5c:02:ab:c8:72:
e1:86:52:0d:5a:43:95:fd:4e:8c:e8:f0:bd:2c:29:98:fd:cc:
7f:6b:44:22:81:ff:95:da:47:52:e6:65:6c:7f:ea:1a:67:42:
1b:e3:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:44 2025 by rpki-client