Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: QMYnR/9yfPcgVSrSftRmZMYR/GrQb2KAs1X3qAN9MsA=
Subject key identifier: 73:10:AF:E6:9B:0C:2E:D7:86:40:11:02:DE:E2:0B:AC:58:F0:AB:4C
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 0199FDDA07964EA686B26B19B0DDBC72953A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:28 +0000
Manifest this update: Sun 19 Oct 2025 19:02:28 +0000
Manifest next update: Mon 20 Oct 2025 19:02:28 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: smoo9/b+0ZzD0heBLqpwimOOdGAkbJ/hQal0llgiM/c=)
2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:07:96:4e:a6:86:b2:6b:19:b0:dd:bc:72:95:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Oct 19 19:02:28 2025 GMT
Not After : Oct 20 19:02:28 2025 GMT
Subject: CN=7310afe69b0c2ed786401102dee20bac58f0ab4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:14:0e:dd:6a:93:9b:47:67:26:81:03:37:
e1:2f:a2:03:3a:6a:28:fc:49:62:86:a4:3d:d3:cc:
6d:d9:3e:e8:6c:1e:c9:ff:40:b3:88:86:23:e3:d5:
de:3a:88:75:63:8b:8e:d6:f1:c2:98:04:66:31:57:
0f:6b:1a:61:5e:09:ce:9f:3b:69:d8:da:a0:c2:3b:
f1:14:ab:76:f5:66:74:1c:44:77:f1:b8:9c:47:62:
88:0d:c0:33:d8:6b:af:cb:a1:37:0a:ea:bc:85:34:
4a:0a:bc:6e:8e:6b:ce:89:c4:99:65:79:c7:74:cd:
55:36:25:51:75:17:cf:ef:4a:52:76:db:a0:70:2d:
cc:cd:c4:c1:05:46:72:b7:eb:2c:af:a0:f8:06:68:
85:72:31:6c:6c:2b:65:2f:84:49:e0:36:6f:5a:2c:
a7:87:d4:cf:68:fa:c9:c6:f2:1e:a0:a5:28:1d:36:
b2:50:68:4e:05:b5:19:f5:66:f5:33:7c:c7:ce:3e:
c9:74:86:2d:c0:30:f1:fe:eb:5c:80:13:3d:22:22:
ae:c7:0f:2b:18:21:42:d6:7c:e7:ce:76:2c:36:ae:
c4:46:f7:46:2a:67:d2:69:a5:ad:a8:6e:25:38:00:
3c:7f:25:df:b4:68:c4:67:3d:67:9d:51:e8:65:d6:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:10:AF:E6:9B:0C:2E:D7:86:40:11:02:DE:E2:0B:AC:58:F0:AB:4C
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:3c:fd:37:72:a5:0e:b1:a8:9c:d9:99:7b:ea:8f:88:49:
b9:9f:df:df:11:13:56:64:f0:bc:a5:61:e5:28:26:fb:52:81:
d8:9b:7f:d8:dd:fe:40:a0:73:a4:25:2a:5e:6d:c8:ef:ae:c8:
13:00:2a:33:0b:6e:8e:aa:85:4d:9d:b0:5c:6e:62:0e:c9:22:
b6:84:5a:e5:a2:9b:7b:77:9e:f0:b6:5f:ca:0f:06:b5:33:86:
5c:6f:09:21:58:71:fe:f6:2c:33:f9:fd:15:1d:4c:37:94:2d:
00:36:6f:85:d2:91:90:45:13:8e:3e:a1:be:67:f4:01:a3:64:
49:73:0e:c4:57:02:83:d4:bd:1f:49:11:16:eb:c3:e8:bc:25:
33:c1:ed:fb:2e:ad:b0:44:e7:cf:bf:97:61:31:b1:c3:2b:dc:
3f:fd:fe:1a:ff:b8:ee:a2:98:11:59:a5:32:11:b4:5a:9b:5a:
cd:20:87:82:ad:ff:36:59:57:03:a6:b7:6d:ac:4b:00:31:20:
ed:dc:2e:bb:ef:d9:46:f3:c9:dc:9d:04:5a:3a:7b:de:14:2c:
27:1e:80:c1:e2:e5:61:15:cd:94:f5:d7:94:a7:82:3c:c6:7a:
1e:81:bd:9f:a8:fe:f7:4b:c6:96:33:7d:09:d3:b2:93:ea:69:
1b:20:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:22 2025 by rpki-client