Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File: MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier: +0Muua/nK+TYtBebG8RHIyi8JpjgVSSAtmIewLtwoos=
Subject key identifier: 02:ED:B0:AC:22:52:45:FE:2F:3D:2B:50:08:0A:77:CD:E2:FC:0A:FD
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 019A0259C4CBC30936EAB5387C1AF2AE7EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number: 0BDE
Signing time: Mon 20 Oct 2025 16:00:28 +0000
Manifest this update: Mon 20 Oct 2025 16:00:28 +0000
Manifest next update: Tue 21 Oct 2025 16:00:28 +0000
Files and hashes: 1: AEr7526r87jMmzyFU6AhzO2yzJs.roa (hash: FaU9GigNrTflXT80XzjmUalvFoH7j0+xf5GqgvZ8viI=)
2: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=)
3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: yaHRa4mJqVB7JABEHn/q6UR6RZrERLnFnjcniFsh5d4=)
4: RJMA_6CErPsb2WgfyOY8q7SE2Xw.roa (hash: rLvL5r3qJKV7IPp00VA8CfU8H3FqWwBRZyYhz2cuvnI=)
5: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=)
6: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:c4:cb:c3:09:36:ea:b5:38:7c:1a:f2:ae:7e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Oct 20 16:00:28 2025 GMT
Not After : Oct 21 16:00:28 2025 GMT
Subject: CN=02edb0ac225245fe2f3d2b50080a77cde2fc0afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:48:88:c2:59:6b:5e:b6:36:15:61:4c:32:
f5:c2:98:46:34:24:67:3d:a8:3d:ea:16:5d:66:0a:
3f:a1:c6:da:36:82:4d:39:1c:f9:dd:e4:66:25:df:
c3:28:55:3f:6d:18:e2:20:ec:1f:89:cc:08:48:a2:
04:4f:57:fd:ee:3a:65:5e:cd:ac:99:c6:b5:fc:e3:
6f:b9:17:d2:1b:c4:5a:2d:af:2a:88:73:db:b8:d4:
77:c6:55:cb:af:ed:12:ad:b0:9b:d0:e9:45:46:54:
e8:4e:b3:f0:9d:34:1b:fd:ad:ec:a8:bb:14:cd:c5:
09:1f:fd:40:a0:fa:35:e1:5f:d3:66:25:9b:f6:36:
bd:64:d2:df:ea:f0:ed:1a:47:af:a4:f6:07:1e:94:
39:7a:d0:ec:0b:48:46:7e:d8:7d:a2:35:e3:63:22:
76:b6:91:76:c4:00:a2:a8:93:82:ce:a8:a8:37:22:
54:e3:ff:e8:87:25:5d:74:36:2a:f8:c1:45:a3:cd:
94:b4:e2:e8:ec:10:8b:97:69:d7:8f:4d:29:a4:fa:
aa:dd:16:4a:c3:0a:27:10:81:2c:b9:ab:fe:dc:50:
11:43:c2:4d:3b:0b:bf:d0:34:8d:c0:8b:c1:1d:5b:
1a:3d:eb:0d:9e:4e:31:df:81:e5:af:22:be:35:ad:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:ED:B0:AC:22:52:45:FE:2F:3D:2B:50:08:0A:77:CD:E2:FC:0A:FD
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e9:f0:98:62:ee:db:0d:b5:e7:5a:47:6d:c1:61:99:28:e7:
fc:19:ba:ea:52:31:12:3c:7c:c5:da:b5:a9:67:b1:3e:9a:f6:
7e:b7:43:c7:02:00:d5:0f:54:8e:70:b9:58:a9:33:23:6a:ce:
be:f5:8e:90:5a:42:c8:95:4a:c7:62:80:2c:65:ff:93:d6:fa:
c4:cc:1b:ea:6b:5b:66:4b:51:77:66:ed:26:00:65:f6:a7:6d:
b9:8d:22:88:cf:df:5a:66:36:6c:15:36:34:b8:e7:6e:57:a2:
f5:0d:bc:35:fc:80:08:d0:4b:08:12:5b:00:15:b2:ff:b7:d2:
29:67:8d:2a:a4:71:a9:df:ee:a1:74:3e:54:1f:92:77:a3:03:
4e:2e:b2:6c:fe:60:63:8d:8f:a4:4e:e8:6a:5f:7b:a7:0d:11:
3f:ba:ac:e2:b8:9c:dd:08:ec:e0:dc:41:5e:90:87:e3:b4:f4:
67:53:7c:1f:e4:60:8e:ee:42:55:f6:cf:1e:5a:31:b2:83:2e:
8b:d0:35:ba:25:be:5b:91:67:54:0b:e4:b3:ac:4e:42:8a:8c:
f8:56:c3:ee:17:ad:ea:cd:d2:30:7c:55:2e:52:52:52:89:44:
56:1c:86:15:a0:fa:25:42:46:5e:26:56:0a:3c:70:83:c1:f8:
d5:3f:15:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:00:49 2025 by rpki-client