Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: 7fEoxt0kRZzXHP1Mjx4vPQ1bNt4DvGncwMTT+r7+16E=
Subject key identifier: F3:B0:A9:79:D7:82:7F:12:08:12:61:29:8E:90:F0:51:B8:90:8D:26
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 0199FFC755A4B785DEBA52E1D4E0AD01488B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0AB7
Signing time: Mon 20 Oct 2025 04:01:17 +0000
Manifest this update: Mon 20 Oct 2025 04:01:17 +0000
Manifest next update: Tue 21 Oct 2025 04:01:17 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: BFqser/xRIHXGxYNAthYsJubzQ+/6x1UrFvBG7Q5L3A=)
2: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
3: yVy6K3-_uaSKa1-_oqUp0tf_Xgk.roa (hash: 7YTmf2c9OYfpZTmIIrXdtXUx4tpHodV4viOENQQMD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:55:a4:b7:85:de:ba:52:e1:d4:e0:ad:01:48:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Oct 20 04:01:17 2025 GMT
Not After : Oct 21 04:01:17 2025 GMT
Subject: CN=f3b0a979d7827f12081261298e90f051b8908d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:1c:a4:3a:ed:c2:55:d6:d3:7d:8e:c0:ba:
f6:ce:95:ff:e7:ed:07:d4:90:c8:98:16:6e:44:43:
e6:68:21:cc:f1:10:7b:08:78:df:9f:df:7f:67:24:
17:c6:c1:39:6e:c5:db:78:8c:87:90:48:c7:24:a5:
6b:ad:06:49:ac:e4:f2:4f:e9:0d:5a:cb:ea:b1:e6:
dd:b9:34:fb:2d:69:c7:71:a3:a9:fa:87:1b:9f:b0:
4f:ea:e7:8a:dd:a3:92:53:68:ab:5d:8e:87:fd:37:
66:19:ac:a8:ac:4f:22:86:f9:d6:f9:90:ab:b3:e6:
81:b4:c1:88:84:ff:03:7b:81:6b:de:83:2e:06:17:
3d:78:c6:a8:9a:66:2e:56:16:62:64:9d:31:5e:94:
d4:97:0a:9a:8a:90:7d:02:c3:2f:cd:3a:91:88:75:
cb:f1:f7:bd:55:b8:11:40:2e:aa:31:bc:85:7b:76:
bd:36:4b:22:3e:c5:72:15:a6:df:f7:c2:b1:3e:ac:
2b:76:d0:78:59:1e:00:72:75:db:29:e5:09:b8:1b:
48:b9:5b:ae:e7:3d:68:b4:f6:6f:eb:4c:1f:e7:b3:
8e:38:ae:36:e2:c9:1a:ae:30:61:78:19:3b:38:f5:
47:26:4d:9e:6d:75:06:5c:5a:26:62:51:13:6d:ed:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:A9:79:D7:82:7F:12:08:12:61:29:8E:90:F0:51:B8:90:8D:26
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cd:02:0c:4a:bc:3c:08:7a:23:34:71:68:d1:08:dd:9d:4b:
96:5e:02:b3:34:fc:09:7b:3b:7f:bf:2f:70:88:83:98:aa:3d:
80:2f:05:7e:f2:11:3c:80:ce:67:49:57:30:46:71:e3:1d:8a:
70:9d:66:c5:45:ac:42:da:81:30:5f:0e:e3:48:85:48:ac:2b:
40:41:ad:4d:eb:c2:4d:11:0d:64:b7:d5:07:c0:c8:b6:ea:de:
67:35:fa:ea:04:61:6f:63:cd:3f:82:75:b4:c7:7a:14:d7:f1:
82:1e:a8:52:d8:86:82:45:e2:ac:91:9b:6a:40:9c:a5:27:32:
9d:c0:02:87:62:88:6f:60:04:03:2b:57:c5:c3:91:51:7b:51:
aa:44:82:d8:70:54:c2:2b:a3:2d:0e:de:a9:a9:b6:65:f8:cf:
74:14:d2:11:54:cb:a0:bd:d6:75:8e:da:22:dc:65:ae:e5:79:
88:71:ed:ae:a9:48:1e:93:7d:80:45:10:39:ae:9a:03:3f:43:
62:87:f9:0b:59:e6:d6:2b:e4:8c:71:ad:ae:df:e4:7a:a2:5a:
1e:de:85:cf:cd:db:7e:2f:22:5e:b4:8b:a1:87:96:0e:14:9d:
4f:cd:03:58:e2:a0:be:5e:96:12:ab:d2:98:75:84:d4:b3:2b:
45:92:fa:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x1Wkt4XeulLh1OCtAUiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTU1NjMyZWM5MDM0YzliOWEzZjI5MGFhZWNkOWEwN2Mx
ZjI2YWIwHhcNMjUxMDIwMDQwMTE3WhcNMjUxMDIxMDQwMTE3WjAzMTEwLwYDVQQD
EyhmM2IwYTk3OWQ3ODI3ZjEyMDgxMjYxMjk4ZTkwZjA1MWI4OTA4ZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06UcpDrtwlXW032OwLr2zpX/5+0H
1JDImBZuREPmaCHM8RB7CHjfn99/ZyQXxsE5bsXbeIyHkEjHJKVrrQZJrOTyT+kN
WsvqsebduTT7LWnHcaOp+ocbn7BP6ueK3aOSU2irXY6H/TdmGayorE8ihvnW+ZCr
s+aBtMGIhP8De4Fr3oMuBhc9eMaommYuVhZiZJ0xXpTUlwqaipB9AsMvzTqRiHXL
8fe9VbgRQC6qMbyFe3a9NksiPsVyFabf98KxPqwrdtB4WR4AcnXbKeUJuBtIuVuu
5z1otPZv60wf57OOOK424skarjBheBk7OPVHJk2ebXUGXFomYlETbe1T5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOwqXnXgn8SCBJhKY6Q8FG4kI0mMB8GA1UdIwQY
MBaAFDClVjLskDTJuaPykKrs2aB8HyarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDkt
N2QyMGViMDYzNDU1LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDktN2QyMGViMDYzNDU1
LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQs0CDEq8
PAh6IzRxaNEI3Z1Lll4CszT8CXs7f78vcIiDmKo9gC8FfvIRPIDOZ0lXMEZx4x2K
cJ1mxUWsQtqBMF8O40iFSKwrQEGtTevCTRENZLfVB8DItureZzX66gRhb2PNP4J1
tMd6FNfxgh6oUtiGgkXirJGbakCcpScyncACh2KIb2AEAytXxcORUXtRqkSC2HBU
wiujLQ7eqam2ZfjPdBTSEVTLoL3WdY7aItxlruV5iHHtrqlIHpN9gEUQOa6aAz9D
Yof5C1nm1ivkjHGtrt/keqJaHt6Fz83bfi8iXrSLoYeWDhSdT80DWOKgvl6WEqvS
mHWE1LMrRZL6fQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:59 2025 by rpki-client