Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
File: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft (raw, json)
Hash identifier: Ur4cs9hr2x30DqBcgjyjNqPAZQDKGU+TN9alc7U2rTY=
Subject key identifier: 7D:F5:CF:E0:01:00:2F:67:80:FA:E7:03:73:84:91:31:03:CB:19:A8
Authority key identifier: 30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
Certificate issuer: /CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Certificate serial: 0199FC58D7B58CA523A4724D5BF960D5E44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
Manifest number: 1058
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl (hash: rbEsT/aJerQNjbFqOB21On6dxByuGawAO8xYj4JaW28=)
2: hfNN3XiVLhZTBEzmZ9kxsFWjtgU.roa (hash: rdvuWCnmeSdDSQrFfaBCbjsr2zsTzqKaLeEHczQ6fHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d7:b5:8c:a5:23:a4:72:4d:5b:f9:60:d5:e4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=7df5cfe001002f6780fae7037384913103cb19a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:11:78:73:9d:ea:c3:05:50:77:e6:76:55:
d3:ad:ea:e3:0c:da:68:51:ad:83:52:ad:b0:8a:2d:
14:2b:99:fa:8a:5b:fe:47:93:df:03:07:c9:c9:f5:
72:e5:b9:0c:e5:cf:9a:f8:1e:9b:c2:fc:9b:96:1e:
2f:a0:90:20:30:fc:79:40:f7:b3:22:4c:d7:5b:64:
22:60:d3:63:d7:32:44:42:ea:40:b5:86:cc:9b:1b:
25:7f:83:58:2b:f2:07:97:6e:81:b3:0a:e1:88:57:
d7:ab:81:a9:01:60:67:9b:0b:3f:f9:46:dd:b5:22:
6c:cf:78:99:fe:ce:e1:0b:f9:48:10:0c:b3:7b:d0:
7b:bf:c4:f6:fc:31:2d:18:eb:db:6d:06:14:1d:44:
a2:29:ab:08:47:dd:ac:95:29:c9:73:ce:9f:0e:e5:
ca:61:8c:b3:b4:94:50:b3:f7:1c:68:4e:b4:73:8e:
f8:5c:e3:96:50:c1:ea:a1:ff:bf:f1:3a:3c:64:b6:
58:82:05:73:7f:33:0f:46:b5:1f:cf:c5:54:87:6a:
14:0b:e1:38:41:e9:00:63:70:87:17:60:fb:f0:84:
14:02:b1:f6:6b:0b:7f:21:b7:bb:35:60:7d:ea:aa:
10:92:c5:37:8d:ae:f4:7b:98:ec:0a:04:cf:ec:a7:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:CF:E0:01:00:2F:67:80:FA:E7:03:73:84:91:31:03:CB:19:A8
X509v3 Authority Key Identifier:
keyid:30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:54:4d:ba:b0:1f:ba:8b:43:af:ec:29:03:94:ea:e8:72:
f8:28:d2:61:ce:87:af:30:8e:5a:07:d9:10:93:7c:3c:0c:e7:
45:36:c8:8b:8b:7c:28:53:9d:a1:1c:16:1d:48:75:b0:68:ea:
90:28:1b:fb:6a:f6:0f:2b:b8:89:0b:77:43:25:f1:a0:61:b6:
d8:25:68:57:61:49:1a:8b:45:65:6f:03:01:74:63:bb:a1:55:
71:c7:7a:1d:dd:83:7b:87:e7:6b:1d:01:f7:6c:34:64:d9:f3:
a1:f6:f4:af:6a:1b:b9:5e:1d:08:e5:e9:f0:8f:fa:e9:27:bf:
cc:5a:09:5f:5d:e4:d9:b7:aa:a5:65:7d:7e:d6:4c:28:86:30:
6b:4a:82:30:41:9d:83:d0:72:5f:0c:10:de:9c:e2:f7:90:f8:
5a:9d:e9:03:fd:6c:53:b4:40:ec:95:7c:ba:ad:f4:0b:e5:a8:
18:9e:e3:ed:68:be:51:2e:47:ba:38:7e:25:56:37:da:63:e1:
3a:ea:75:70:60:4d:2a:1e:af:bb:ac:d2:f0:6b:d3:a3:67:89:
77:08:a2:d6:83:97:71:ea:41:64:3d:44:f9:7c:c2:be:a1:ea:
a8:99:26:fd:62:de:a4:6c:26:bd:ba:39:3b:75:76:d8:8d:d7:
db:7f:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:15 2025 by rpki-client