Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: urSWdh6QjA/IbsSHolk6KotWgufqzRCY/FD34Ruypvk=
Subject key identifier: 1F:A8:70:E2:E7:CD:93:39:45:A0:77:30:D3:1D:86:E5:DC:CE:C5:58
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 0199FE46892F69612EEE31D4AE7A2E9AB02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 0257
Signing time: Sun 19 Oct 2025 21:00:59 +0000
Manifest this update: Sun 19 Oct 2025 21:00:59 +0000
Manifest next update: Mon 20 Oct 2025 21:00:59 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: AIwxqPP6brf3bsIxLGi6fI+SoliaEGA28Qzc7W3DVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:89:2f:69:61:2e:ee:31:d4:ae:7a:2e:9a:b0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Oct 19 21:00:59 2025 GMT
Not After : Oct 20 21:00:59 2025 GMT
Subject: CN=1fa870e2e7cd933945a07730d31d86e5dccec558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:fb:32:fa:00:dd:ec:2e:62:81:72:48:48:
a1:b0:75:1d:66:96:06:59:5f:04:b8:44:58:68:18:
33:8b:9f:3f:ca:e2:4f:e7:b3:83:c8:5b:16:08:1b:
4b:bd:04:d1:01:b6:d8:99:cf:d5:29:7b:cf:46:30:
da:26:c4:39:2a:f8:6f:71:a5:51:7c:40:aa:d2:99:
76:76:80:57:74:46:eb:01:1b:d0:f0:f7:c3:54:9a:
32:2c:7b:fd:35:26:8a:1f:b4:07:29:ba:56:4b:7c:
78:f5:c4:08:58:29:2d:06:38:d6:eb:a1:46:16:be:
70:be:57:cf:3d:13:3f:bf:62:1d:bf:72:cd:13:ef:
46:95:28:d9:18:77:8e:30:d0:69:e9:71:0f:fc:97:
bb:bf:1f:ff:f6:52:c5:97:a7:8f:0f:b4:28:b9:62:
47:69:c8:ff:bc:89:44:dd:96:dc:80:ad:23:02:f2:
5e:f1:90:77:49:db:33:4a:fd:90:cc:52:0e:79:d3:
6d:7f:11:49:a9:9b:01:89:e7:70:16:f0:c1:5b:14:
18:81:2c:88:f5:c5:b6:21:c8:ee:4e:2b:50:e8:53:
fc:a5:d3:06:7c:e0:7a:31:e2:04:f1:93:c0:8a:32:
95:7e:c9:1b:cf:1b:c3:13:57:96:ee:54:6e:a0:3e:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:70:E2:E7:CD:93:39:45:A0:77:30:D3:1D:86:E5:DC:CE:C5:58
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:39:7a:39:89:08:0f:1e:70:8e:3a:c3:32:24:8f:7f:39:
9b:5e:6d:cc:1c:68:42:e3:99:d1:6d:a1:ea:1b:bb:59:c0:9f:
c8:28:47:5a:4a:97:e6:f5:6a:24:54:be:a4:55:e8:7f:34:2d:
fd:f2:6e:de:4e:61:5a:36:f0:ea:12:bd:c8:e7:73:6a:39:f6:
7a:dd:c8:c3:cb:44:e9:9d:a1:2b:98:91:87:2b:a5:d4:2c:99:
f3:f5:24:5d:81:92:d4:05:bf:3f:d3:22:5a:18:27:3d:03:ef:
a2:0e:a4:6a:2e:0c:1c:07:0b:7d:c2:80:76:6a:58:b6:57:8c:
3b:2b:7b:93:3e:4d:e6:d8:97:cc:64:6d:62:8f:c9:f9:e8:c2:
0a:11:b5:18:e8:de:09:e1:04:4f:98:60:1b:1b:f1:c8:2b:8e:
b8:c3:cb:94:0e:cb:ea:f2:69:d5:a3:df:9e:c7:cf:ce:99:14:
22:d8:13:9d:c9:b5:1d:04:a5:c6:15:c7:2b:49:88:3c:71:31:
5f:4b:c1:a0:28:95:df:75:46:67:9f:97:e9:18:44:78:7c:eb:
b6:c9:de:1e:77:0a:d6:e8:86:55:b1:d8:14:65:d6:0d:fe:92:
c9:8a:23:2e:6e:e6:56:0c:cc:20:63:eb:1f:5d:ab:0b:e5:a1:
f4:6b:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:19 2025 by rpki-client