Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json)
Hash identifier: JfHVpXucz1es33y5uZltYSlRZ4LWP7Dhlj185bhn3Gk=
Subject key identifier: 4F:A0:5A:42:05:2B:28:46:D9:CA:95:89:71:DE:4A:CE:55:C7:A2:29
Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Certificate serial: 019A72934C8D9AD54AFDF59E4E9D4307C51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
Manifest number: 161E
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: 1-RWOiprTQ-uVnwhklGyyfsDfjnk.roa (hash: KKoCIqZllKz4mT5mjhqOfo5AkvT5jJCo40l+tooCAf8=)
2: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: 9rLA7l/89rxzQ//nIDimmdUfKx7t6fq2OeuALdk7C8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4c:8d:9a:d5:4a:fd:f5:9e:4e:9d:43:07:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=4fa05a42052b2846d9ca958971de4ace55c7a229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:f6:fe:0f:fe:1f:3d:39:59:23:c3:b6:95:
a0:45:f7:9c:2f:53:58:16:85:74:1c:42:aa:b3:7c:
0e:d3:86:ca:da:7c:ec:62:47:60:3a:c9:4a:7d:d1:
01:05:80:10:05:f6:96:c9:42:65:a6:23:03:62:a0:
4b:c1:7f:fa:61:5e:2e:e0:bf:75:3f:7f:04:80:27:
23:a1:cc:81:eb:63:ff:30:d0:c6:b8:37:bc:38:92:
a9:8d:89:09:db:36:7c:ee:91:a4:c9:43:e6:d6:b9:
db:47:d7:7e:f6:76:7b:dc:d2:e2:ff:44:65:93:39:
bb:51:3b:e8:a3:87:78:ac:ab:cf:04:67:c8:2b:83:
4b:de:41:63:4a:ae:0d:e9:6e:fc:62:5f:c1:5d:73:
74:d1:d3:32:4b:bb:65:e8:65:30:c3:23:8b:76:d7:
80:ea:f1:14:2d:57:01:45:a8:29:c8:73:87:fb:27:
4c:39:37:10:21:9f:6f:b4:c7:59:02:58:f0:ec:d4:
39:29:97:ba:7c:98:f7:57:e7:04:1e:cf:28:e7:78:
a0:4b:0a:79:5f:4b:31:cd:76:a3:3b:2a:9c:4e:aa:
95:19:30:28:f2:bf:1a:16:f8:11:1a:20:56:51:d7:
61:56:be:ef:e9:f7:02:09:6f:34:03:f0:66:fa:a6:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:5A:42:05:2B:28:46:D9:CA:95:89:71:DE:4A:CE:55:C7:A2:29
X509v3 Authority Key Identifier:
keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b8:b6:43:4b:4a:a4:57:f9:f1:25:69:04:a9:92:e1:c7:23:
a9:ab:71:dc:bf:00:74:aa:23:e8:d6:5e:23:fe:e7:06:d5:a6:
f7:17:4d:32:a7:42:35:c1:15:88:01:43:53:0f:ec:95:4a:8f:
aa:14:55:5a:f3:ea:ce:0a:e4:ce:37:00:40:7c:a2:46:a9:31:
17:b1:d5:1c:ce:6d:05:8b:f9:f1:a1:28:4a:b9:30:f2:c9:98:
b0:e5:47:b1:d6:41:4d:2a:18:84:9a:6a:29:24:c0:27:34:24:
58:52:57:de:eb:45:e3:c8:27:85:51:91:f4:fb:3f:e8:2c:dd:
2c:83:52:69:a6:26:a7:4e:ed:01:50:2e:dd:d5:f9:e7:a9:ba:
b7:35:af:ad:86:b1:8f:4a:3d:bf:b6:09:bc:68:7e:05:39:cd:
b9:17:54:8c:00:37:14:61:5f:e4:24:06:f2:0c:33:a7:8a:6d:
85:1d:e8:2e:9f:90:9d:fc:5e:42:f0:74:dd:db:17:5d:02:ab:
ab:9f:50:3e:3c:4e:69:0b:85:79:a1:70:44:03:ca:88:f5:fa:
38:16:0c:3e:c1:e9:3f:73:39:0d:86:8b:61:b1:04:ae:e0:a8:
d1:69:7c:d2:50:d2:d2:59:08:41:07:74:02:fc:f5:0d:bf:17:
6b:84:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:15 2025 by rpki-client