Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File: mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier: DcgvRs2g4O0eiem1BaSLe+au147Xs/Vuk5rdX/lZRL0=
Subject key identifier: 24:F5:B7:B8:72:D8:BA:B7:9B:62:8D:12:89:E6:67:33:67:51:AB:6A
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 019A7293F106E07FE8DE5FBC3FCFAC0073E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=)
2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: rf4pBYoAAXvW5X5nGeJ3n6KF2/o4Qtc6/JVyc84JeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f1:06:e0:7f:e8:de:5f:bc:3f:cf:ac:00:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=24f5b7b872d8bab79b628d1289e667336751ab6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:2c:42:e7:98:64:b0:5d:00:2b:a5:8a:23:
7a:05:98:e9:c3:99:ae:40:7c:6e:0b:f5:89:4e:38:
1d:50:2a:9e:c9:f4:47:e7:ce:56:fc:be:ac:93:f9:
5b:ca:da:71:ee:12:20:f0:df:a4:3f:d0:b2:71:53:
c1:6c:04:24:b6:f4:3d:44:fd:b3:ad:53:07:91:5d:
c8:3e:bf:04:8c:1f:57:71:b9:09:fc:59:af:1e:2d:
68:93:a3:2a:66:0d:49:f8:b1:26:80:ed:e8:9f:8a:
8f:7b:e2:ec:b7:55:5b:df:dd:ef:f2:ea:50:80:f3:
24:62:23:0c:ae:4a:06:b7:01:2c:af:c1:a6:86:30:
01:b6:57:86:71:fb:93:a2:20:80:92:5e:04:eb:69:
f8:00:a9:f0:aa:af:72:60:12:19:17:4b:b4:53:0a:
76:ce:c2:87:8f:f8:7b:46:00:57:3f:1f:4d:ef:3e:
e6:23:a7:58:d0:59:e1:b9:25:a4:3c:0a:d2:5b:14:
61:8e:f8:bc:ad:06:75:e0:fe:b4:f8:0f:fb:52:1a:
e2:53:63:d2:9b:21:45:7c:05:e3:25:80:30:17:6c:
2e:82:85:85:a3:d7:14:bc:5f:e7:eb:8b:e9:3e:59:
f8:e1:4b:cd:01:5b:39:16:dc:83:77:e9:07:55:43:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:B7:B8:72:D8:BA:B7:9B:62:8D:12:89:E6:67:33:67:51:AB:6A
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dd:7a:2a:bd:d1:a2:30:e4:f8:e3:93:33:e0:c0:e6:ac:4a:
c7:65:4e:5e:a7:6f:76:10:42:90:c8:e2:9c:29:af:87:70:cd:
bb:95:67:dd:41:97:74:ea:f5:64:51:d3:a6:ad:fc:0d:76:0c:
95:1a:0f:9d:12:96:15:89:ea:f0:70:db:d7:63:47:8b:35:c2:
e1:9a:7b:9b:36:66:9b:56:eb:3d:0f:3a:20:1e:0c:09:15:17:
36:c5:60:5a:5a:20:b8:51:98:be:91:86:45:2c:e5:50:8a:bd:
c8:5c:25:dc:b7:89:39:3f:22:f2:4b:b4:c6:b3:13:88:10:24:
c0:68:23:bd:74:7c:3a:a0:1f:e8:7f:11:da:ee:f8:a9:85:48:
45:a7:97:1d:4c:fa:fe:79:b8:5d:5a:be:75:a6:64:98:b4:7e:
1d:48:65:f0:cd:bf:9e:8d:fd:17:aa:e1:c9:4e:1b:a8:c6:cc:
95:29:55:83:c5:54:07:70:d7:a6:94:f4:37:98:a7:0f:70:b5:
e0:31:a1:49:45:ac:69:b4:04:43:01:32:31:30:83:20:34:ae:
55:b6:16:8f:ca:8a:fa:c4:95:a9:a6:06:d6:7f:a7:8a:2a:69:
67:46:da:7e:05:ec:80:b5:46:b8:ee:de:0e:54:ae:d9:1d:cb:
3e:52:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:59 2025 by rpki-client