Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: rYSN/BcsdTaQZWDW1Ag+Vq9TqXRVu/qGz6kKmtZoDww=
Subject key identifier: EE:35:28:93:CC:B1:65:E0:36:BA:41:AC:08:E9:55:B1:ED:F1:64:F7
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 019A209BC1C83BFEE01F36D63640CE7131ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 10F0
Signing time: Sun 26 Oct 2025 13:01:09 +0000
Manifest this update: Sun 26 Oct 2025 13:01:09 +0000
Manifest next update: Mon 27 Oct 2025 13:01:09 +0000
Files and hashes: 1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: l4yzI5JxEhQElu3wQ6IGnxNStKjesOrObQDl7vwSafg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:c1:c8:3b:fe:e0:1f:36:d6:36:40:ce:71:31:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Oct 26 13:01:09 2025 GMT
Not After : Oct 27 13:01:09 2025 GMT
Subject: CN=ee352893ccb165e036ba41ac08e955b1edf164f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:37:b7:9d:d5:78:18:29:9a:58:6f:d8:ff:
d7:3e:45:94:a2:35:28:13:0b:4d:14:f7:75:2f:ed:
52:4c:db:77:9d:bf:be:24:8b:23:b2:ca:94:96:99:
5e:8c:85:9d:b7:e6:c8:89:72:1f:73:19:0b:c4:48:
8f:d7:6f:11:2f:19:89:e0:17:6e:cb:0f:72:48:ec:
c9:64:c2:be:a5:64:72:1e:6d:52:cf:94:d5:9d:b2:
bb:40:11:4f:45:eb:a0:b0:4c:a6:5f:a2:30:15:b4:
0f:5c:b2:3b:7d:1a:26:71:ff:b0:84:9b:d1:1d:a7:
ba:5e:35:45:af:dd:c6:a7:bc:5b:f7:3b:9f:17:77:
0d:2e:af:f4:ff:a9:a3:c9:f2:f0:bf:10:4e:35:a0:
0e:99:21:f2:73:16:0d:34:03:25:ed:36:a8:62:58:
ba:88:f5:72:d1:0a:62:d4:e9:7d:73:34:6a:e0:30:
06:ea:9b:29:ee:98:0b:3a:0f:f7:6e:fd:12:dd:88:
35:48:ea:4e:d0:45:78:a3:ef:01:b9:82:d5:8e:00:
20:86:3f:08:a7:2c:c0:d4:42:f6:89:12:76:b6:a4:
1d:eb:da:2c:f5:94:93:a2:85:b5:b8:8a:c6:f7:29:
b5:db:a9:d7:bd:6f:15:3d:b4:a2:02:20:c1:1c:9d:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:28:93:CC:B1:65:E0:36:BA:41:AC:08:E9:55:B1:ED:F1:64:F7
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d6:70:8a:65:58:8a:7e:34:66:8e:06:f0:0c:e4:e6:00:ce:
67:f8:19:15:5d:b0:86:c1:8c:79:73:b2:7d:90:71:ed:5b:9f:
37:5a:00:1a:76:2c:de:c5:24:b1:50:4a:61:67:fc:06:ef:65:
8a:85:ab:f4:ef:ac:ed:76:a1:30:d4:7c:78:10:ab:3c:17:e3:
e5:21:10:5a:18:16:59:0d:41:cf:45:72:5f:4e:ec:00:52:f7:
8a:a2:7b:55:38:8d:cf:5a:ee:db:2b:be:a0:89:e7:c9:17:1d:
57:66:16:63:b6:29:bb:fc:af:d2:cd:12:10:52:42:cd:8a:49:
41:0c:c5:99:08:a7:10:42:79:3c:00:04:4b:0b:54:94:92:75:
c2:6c:b9:a2:da:c6:d4:9f:af:85:31:15:c8:91:a2:ed:3e:94:
06:37:94:d3:fb:50:ff:26:47:d2:f5:a1:51:b8:f1:c9:76:d8:
1a:98:58:f8:80:ef:42:14:84:7c:7c:81:73:b7:f6:33:ae:11:
ae:55:4b:d3:d2:89:bd:ee:de:da:2e:b1:fb:23:03:2e:ba:7e:
3d:b5:b5:9d:5d:61:42:4c:e4:6b:a7:98:55:53:6c:20:39:36:
ca:30:10:0c:ce:6c:79:9e:b7:5b:10:3e:52:23:cd:89:d7:fa:
be:ca:9a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogm8HIO/7gHzbWNkDOcTHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTE4ZDdkMTgwZjM2ZTc2NTEyYTQxNjExYTBiMjhhOGI0
MGM1MmUwHhcNMjUxMDI2MTMwMTA5WhcNMjUxMDI3MTMwMTA5WjAzMTEwLwYDVQQD
EyhlZTM1Mjg5M2NjYjE2NWUwMzZiYTQxYWMwOGU5NTViMWVkZjE2NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqI3t53VeBgpmlhv2P/XPkWUojUo
EwtNFPd1L+1STNt3nb++JIsjssqUlplejIWdt+bIiXIfcxkLxEiP128RLxmJ4Bdu
yw9ySOzJZMK+pWRyHm1Sz5TVnbK7QBFPReugsEymX6IwFbQPXLI7fRomcf+whJvR
Hae6XjVFr93Gp7xb9zufF3cNLq/0/6mjyfLwvxBONaAOmSHycxYNNAMl7TaoYli6
iPVy0Qpi1Ol9czRq4DAG6psp7pgLOg/3bv0S3Yg1SOpO0EV4o+8BuYLVjgAghj8I
pyzA1EL2iRJ2tqQd69os9ZSTooW1uIrG9ym126nXvW8VPbSiAiDBHJ0ToQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO41KJPMsWXgNrpBrAjpVbHt8WT3MB8GA1UdIwQY
MBaAFJqRjX0YDzbnZRKkFhGgsoqLQMUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYt
OTNmNDg2YjhiOTYxLzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yNjkzNjMtYjM1Zi00MjJjLWIwNzYtOTNmNDg2YjhiOTYx
LzEvbXBHTmZSZ1BOdWRsRXFRV0VhQ3lpb3RBeFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatZwimVY
in40Zo4G8Azk5gDOZ/gZFV2whsGMeXOyfZBx7VufN1oAGnYs3sUksVBKYWf8Bu9l
ioWr9O+s7XahMNR8eBCrPBfj5SEQWhgWWQ1Bz0VyX07sAFL3iqJ7VTiNz1ru2yu+
oInnyRcdV2YWY7Ypu/yv0s0SEFJCzYpJQQzFmQinEEJ5PAAESwtUlJJ1wmy5otrG
1J+vhTEVyJGi7T6UBjeU0/tQ/yZH0vWhUbjxyXbYGphY+IDvQhSEfHyBc7f2M64R
rlVL09KJve7e2i6x+yMDLrp+PbW1nV1hQkzka6eYVVNsIDk2yjAQDM5seZ63WxA+
UiPNidf6vsqamQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:09:21 2025 by rpki-client