Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: CZ+EtbxpkPDOYnOCJKI6opsxl72gKKOsbVaLzUQayXg=
Subject key identifier: 6E:20:05:BA:95:C8:EE:92:A5:34:FC:DD:05:F3:48:B1:33:33:BA:28
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 019933138F55F7EFC2D4D9B413C873E0E7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 1075
Signing time: Wed 10 Sep 2025 10:02:23 +0000
Manifest this update: Wed 10 Sep 2025 10:02:23 +0000
Manifest next update: Thu 11 Sep 2025 10:02:23 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: 1x29goLLGLWrsFBuq1Qt1WDhvKCjrXUwkvaErIafVJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:8f:55:f7:ef:c2:d4:d9:b4:13:c8:73:e0:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Sep 10 10:02:23 2025 GMT
Not After : Sep 11 10:02:23 2025 GMT
Subject: CN=6e2005ba95c8ee92a534fcdd05f348b13333ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:77:90:b5:32:c7:5c:ef:cf:30:4f:e5:c1:
67:fb:6f:80:1f:27:48:6a:3a:7d:74:75:8e:58:27:
05:1c:eb:07:56:f1:55:08:c7:95:63:0a:5c:63:63:
6f:df:c4:c9:1a:0d:76:c0:b5:ba:e6:d0:36:4b:3d:
25:ff:c6:ec:57:f0:75:cd:6d:9e:d1:c9:75:04:cc:
b9:3a:64:04:3a:fa:f0:b6:70:85:d8:c8:04:fb:c8:
e1:a4:a3:b7:91:77:e8:5a:06:67:c5:ab:59:bb:59:
57:0a:09:4b:3a:97:76:ae:9d:ef:75:0f:b6:a4:d6:
1a:79:1c:7b:fc:2b:ea:f8:24:15:c0:df:f5:dc:e1:
08:bd:d6:46:42:3a:f5:8e:ac:cc:fb:63:e5:00:7b:
04:0e:09:1f:31:ed:91:e4:b0:69:8a:aa:4a:23:e5:
82:20:94:c1:0d:09:fd:57:dc:70:72:e8:04:47:ed:
09:da:15:1c:cb:94:d0:59:e5:e2:de:90:22:ce:6f:
80:0b:bf:a6:21:24:f8:c0:b0:74:6d:f6:f2:5e:ad:
89:07:83:7a:21:89:23:83:ea:49:29:b8:aa:98:e6:
f5:ba:5a:0e:cc:b7:5f:2a:c8:8f:89:a7:5e:ea:ba:
ef:87:e1:96:3c:99:56:d9:e9:e9:43:58:cc:a2:68:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:20:05:BA:95:C8:EE:92:A5:34:FC:DD:05:F3:48:B1:33:33:BA:28
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ab:06:76:b8:3c:4a:98:01:0c:0a:d7:fd:b9:c1:b0:d5:92:
c0:dc:d0:a6:f2:b1:68:b2:2c:ff:31:23:b6:5d:91:94:0e:95:
82:f9:6f:ca:e0:b4:4f:b8:6a:47:3d:ee:3b:88:2f:fb:51:97:
1b:c0:ac:4b:32:22:20:36:e0:2c:ca:9b:32:8c:a7:b6:c7:12:
5a:16:f8:9c:72:c0:bc:e8:98:3b:50:e7:21:dd:09:73:84:db:
4f:c9:12:2e:f6:34:8a:f5:f5:60:79:05:6f:bc:03:7e:1d:17:
f2:9e:a2:99:c0:be:04:44:09:10:0a:a2:bc:a9:6a:a3:c2:a3:
b2:5e:91:94:9d:d3:f5:53:0a:b7:b9:cc:3b:57:06:67:aa:f5:
2a:a7:4a:be:f6:36:01:3a:6f:88:1f:cb:1f:70:75:fd:e6:f2:
99:6f:31:94:30:48:76:b7:18:8c:cf:41:cb:c2:08:6b:af:60:
e1:47:98:5d:65:f0:fd:f8:c4:46:d1:f6:9b:ed:38:58:a0:bf:
e4:66:64:6a:6e:fe:cc:97:b6:e2:c7:b1:c6:2e:99:bd:56:28:
b8:c2:2e:be:06:e9:f2:05:ee:7d:a0:95:9a:cb:1f:df:d8:94:
83:ad:e3:62:e0:f2:20:51:64:dc:f3:29:5c:46:21:55:20:76:
1f:77:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:34:54 2025 by rpki-client