Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
File: RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft (raw, json)
Hash identifier: eZQJVeAjsyfzb6WF9fAeFkvyQmPRCQ2W/+503w6EmC8=
Subject key identifier: F4:93:D9:38:5E:E4:6B:82:59:70:01:CC:14:C4:C2:99:E8:D7:38:91
Authority key identifier: 45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
Certificate issuer: /CN=453f8ca684037c5433a4b4406211b31d76e13eab
Certificate serial: 019935377A14F91A8565F7705887E9395DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 20:00:52 +0000
Manifest this update: Wed 10 Sep 2025 20:00:52 +0000
Manifest next update: Thu 11 Sep 2025 20:00:52 +0000
Files and hashes: 1: 1-WaRefIqk9cTwAge18iSThry2Bk.roa (hash: u2PbRYzxV5DP0Zvmm7MZK3eMuZerbQoMidmwaTRf9M0=)
2: RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl (hash: y50QePJZIfh7JUUy3Am/KVHoFN/sRdJ/p/wmlkZErwE=)
3: pPhTVlJLb86soqyySL-WWM5nGpo.roa (hash: soRRZ5HHiA/a5SCZK0C4OU2YSKWcycTGQ/q5n+2Dcw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:7a:14:f9:1a:85:65:f7:70:58:87:e9:39:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f8ca684037c5433a4b4406211b31d76e13eab
Validity
Not Before: Sep 10 20:00:52 2025 GMT
Not After : Sep 11 20:00:52 2025 GMT
Subject: CN=f493d9385ee46b82597001cc14c4c299e8d73891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:75:34:ae:57:94:7c:a7:b4:32:cf:a8:1f:
2b:fd:68:cb:d7:e4:f3:22:81:87:0a:ec:63:b8:91:
22:87:85:e1:52:75:a4:c4:a4:0b:a1:51:cc:58:de:
59:e9:f0:43:2a:d0:92:29:80:2d:a6:ed:23:84:56:
bc:c2:15:bc:59:9b:09:2b:72:f8:e8:1c:98:25:98:
44:ae:04:fb:10:e2:5c:08:1d:82:3b:68:d2:da:f3:
49:03:73:64:cf:a2:c7:41:b2:45:4f:5e:44:1f:70:
08:2c:d5:3e:21:27:33:95:ff:64:a2:4f:63:a2:cc:
e6:a5:8b:8b:a5:cd:13:a9:e9:07:41:7e:48:c0:3d:
4a:20:38:99:5d:1f:97:f3:4c:ef:fb:a9:1f:86:a1:
2c:ee:87:b2:60:37:83:51:b3:22:ba:13:ed:9f:83:
76:ad:74:68:37:ab:d4:7c:83:70:4f:31:00:bc:76:
e9:b6:c3:eb:08:c7:c8:37:83:88:1e:f1:e0:39:26:
44:f6:a5:03:84:89:ca:d0:f9:53:1a:19:1d:f5:a2:
21:aa:f8:b9:91:6b:62:a0:d4:bf:48:82:8b:3b:ea:
53:28:d7:11:66:35:d3:25:a7:8d:35:72:1c:86:1e:
9f:80:d5:4a:13:8d:50:2c:75:94:a9:43:be:5d:e3:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:D9:38:5E:E4:6B:82:59:70:01:CC:14:C4:C2:99:E8:D7:38:91
X509v3 Authority Key Identifier:
keyid:45:3F:8C:A6:84:03:7C:54:33:A4:B4:40:62:11:B3:1D:76:E1:3E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT-MpoQDfFQzpLRAYhGzHXbhPqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2dc208-6912-4a12-8dbb-dbb69f284f23/1/RT-MpoQDfFQzpLRAYhGzHXbhPqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:81:2a:45:dd:2a:b1:07:cd:28:e4:90:54:6e:69:02:0f:
3f:27:4b:c2:0a:62:70:b3:cd:03:ea:e9:ec:53:78:a4:e9:68:
58:6b:cf:70:4c:4f:ee:5a:ec:6b:bc:1b:5d:90:c0:60:d9:3a:
b2:a2:c4:86:f0:52:5e:e5:f2:59:cf:01:71:13:26:a8:26:37:
af:5e:9e:1d:6a:33:1e:72:10:64:f5:35:5d:bd:bb:55:97:10:
30:51:52:ae:62:e7:fc:0f:50:62:0e:53:84:c3:66:a6:32:e4:
1a:1a:14:68:1c:f2:fe:3b:e9:c8:ab:14:1e:77:89:c4:92:17:
d2:7a:86:15:51:29:df:0a:e8:d4:0d:28:3f:6b:ff:52:a0:f6:
9f:d3:43:bc:49:53:d3:41:11:a1:cc:7a:0b:fe:32:53:c3:02:
7c:89:aa:cf:07:22:40:2e:8e:c2:30:25:92:31:17:11:a5:fa:
e5:a9:47:d5:1e:49:b5:c1:74:2c:33:8e:ca:c1:ec:d5:dc:6c:
39:9b:01:bc:57:77:b1:21:cd:db:35:60:d1:f1:03:55:d9:fc:
51:5d:77:ef:72:3a:b3:7d:50:3f:8e:48:9c:78:ce:70:c9:69:
8c:0f:1f:05:bf:41:5b:49:f6:e6:c7:4d:91:99:5a:f7:f6:e0:
e0:3a:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:01:44 2025 by rpki-client