Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: LHFRqi/0XxILCBaUIyCQLy2vaaJX2kHHwqoXsXrMcIw=
Subject key identifier: B9:DC:D7:01:60:C5:84:C8:13:2D:2C:49:EF:EA:46:61:07:0C:92:5C
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 019A3233889F7986C109DBB3CEA9B3018123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 1700
Signing time: Wed 29 Oct 2025 23:00:29 +0000
Manifest this update: Wed 29 Oct 2025 23:00:29 +0000
Manifest next update: Thu 30 Oct 2025 23:00:29 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: zC3znfJposUT04g5fVk5qV9xWMNt79YP5OJNbmJjORE=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:33:88:9f:79:86:c1:09:db:b3:ce:a9:b3:01:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Oct 29 23:00:29 2025 GMT
Not After : Oct 30 23:00:29 2025 GMT
Subject: CN=b9dcd70160c584c8132d2c49efea4661070c925c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:6a:67:6a:f1:f8:81:f3:8b:c9:62:76:67:
c0:b6:22:26:95:a8:cb:f0:03:8a:0f:c8:f0:2e:79:
16:f8:d7:74:cd:d5:ca:09:3a:60:96:1e:cc:08:a8:
b7:01:cd:57:6e:41:48:84:82:a3:c7:ce:5f:42:a4:
4d:4c:54:0e:7c:ca:fa:8a:d4:a3:b0:58:1d:e3:5b:
a4:2b:70:db:c6:04:46:db:ad:d1:5f:31:0a:1e:b7:
5e:c1:a8:3a:66:33:9f:98:bb:4a:29:07:78:54:63:
90:d7:dc:a4:3b:18:e7:ed:67:7d:90:a3:f1:6c:59:
3d:74:b8:8d:60:b1:c7:55:ba:04:3c:81:8f:61:88:
25:85:77:a6:f7:f3:9b:6e:97:55:68:1f:fb:7f:7e:
8e:22:b9:3f:dd:0a:ea:b2:4c:11:57:bb:28:78:5e:
28:f9:cc:7e:5c:4c:ea:c6:3e:f6:44:81:ac:2d:e5:
01:e5:96:a6:4f:a1:05:4c:3d:80:e8:62:69:68:fb:
58:c5:01:25:ac:36:cb:7e:6b:15:75:0b:ff:01:99:
b7:d5:c2:62:29:90:dd:17:e6:df:69:e2:f3:55:5b:
00:fe:95:c6:91:24:de:08:05:ff:e4:8f:85:8f:bd:
33:03:29:c2:e0:bd:08:a4:7f:bc:07:49:66:ab:92:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DC:D7:01:60:C5:84:C8:13:2D:2C:49:EF:EA:46:61:07:0C:92:5C
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:19:89:cd:90:c7:d6:54:cb:64:fb:fb:38:b7:97:3b:06:93:
44:c7:9e:6c:59:4a:0a:44:2f:e7:de:a4:2d:54:56:46:ae:51:
52:eb:82:cb:d5:4d:d4:8b:81:a1:25:d4:73:65:48:e7:1b:b0:
f1:74:df:26:56:62:98:ea:4f:2a:e0:9b:58:5b:a1:07:72:3f:
ec:64:52:e8:40:69:e7:56:da:d3:83:2a:8f:c2:61:4e:95:9d:
63:08:90:dc:53:53:dd:ed:3d:d7:f6:c1:f2:f8:d5:04:89:e0:
99:99:4f:09:af:95:df:3f:b8:f0:d0:84:06:10:54:97:88:31:
b2:fe:64:c2:d1:4e:cd:c6:74:ef:64:f7:fb:8e:86:9e:9c:81:
54:e6:bc:ba:d7:d4:b6:58:32:e9:4e:20:df:6b:62:6a:da:d4:
35:b6:04:03:d9:70:ef:79:2c:56:17:93:fa:f1:4d:87:97:bb:
dc:79:85:ee:1b:d0:d1:62:a9:ac:4a:9f:68:d8:b0:65:30:4b:
0f:b9:e8:c0:6b:50:08:9b:a6:30:ee:59:ff:14:2f:0d:00:bf:
1a:86:cb:32:17:89:38:ca:dc:0e:05:f0:d7:a6:54:80:fe:64:
e8:4e:d3:c5:49:e7:d3:a7:45:b3:85:db:77:05:70:a9:62:30:
94:fb:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 04:29:40 2025 by rpki-client