Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: +NPYJrkbWF1dryqlUCuE7opBA9ab8THBHPqdEu7LvUo=
Subject key identifier: 49:E4:1C:13:AF:EC:D2:AE:97:61:5D:16:04:4B:FB:F3:18:E1:93:6A
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019A01111917DB9AD70D92487D2C859AF755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 10:01:29 +0000
Manifest this update: Mon 20 Oct 2025 10:01:29 +0000
Manifest next update: Tue 21 Oct 2025 10:01:29 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: tS4bx5xX2EcKlq0DyCWuezUxzi9HhVCdyd0sFf8jx7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:19:17:db:9a:d7:0d:92:48:7d:2c:85:9a:f7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Oct 20 10:01:29 2025 GMT
Not After : Oct 21 10:01:29 2025 GMT
Subject: CN=49e41c13afecd2ae97615d16044bfbf318e1936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:c9:aa:d7:d9:b9:de:ce:b9:42:71:0d:8a:
d8:13:67:fd:20:c4:21:12:af:d8:a5:14:16:06:27:
52:3d:85:7f:2f:28:a7:d2:f2:25:68:e9:fe:da:27:
36:60:06:4d:a7:03:a2:a3:7a:0a:7f:64:46:03:04:
74:36:29:62:ec:53:cf:2c:63:05:6a:9a:a9:1a:3d:
93:47:71:56:d3:50:7c:c8:5e:72:ad:ed:fc:52:81:
c9:94:1f:f1:05:0b:74:b4:74:4c:d0:3f:2e:75:a9:
54:ae:db:30:ff:86:c6:ee:55:93:8e:a1:fa:88:21:
f3:2f:c3:a6:5f:4b:33:3e:2e:3e:77:da:8c:b2:8f:
39:3e:4c:15:4f:ae:5f:0d:6c:73:33:3d:25:09:f8:
b5:6b:c9:fa:66:ea:3b:4e:96:76:d4:7a:fd:9c:e5:
2c:97:24:97:08:fb:44:22:92:dd:26:d7:50:3e:ef:
14:dc:ca:b0:35:f1:52:3b:97:fa:6b:d0:d0:6e:85:
e9:21:e1:30:6f:d1:50:cb:ee:df:16:71:37:6c:25:
d6:a9:7f:d2:19:55:22:f0:ca:f6:5d:fd:75:f7:7d:
c5:8e:e0:b1:51:94:1a:68:1d:f1:91:c5:42:65:ac:
76:6b:5e:1b:a7:db:99:0e:cf:28:ab:ab:bf:35:30:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:1C:13:AF:EC:D2:AE:97:61:5D:16:04:4B:FB:F3:18:E1:93:6A
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:78:3a:fc:00:30:94:88:cd:f7:d3:d1:41:e0:ec:2a:d0:
78:b4:fb:87:e7:00:79:d3:f0:4e:bb:f9:b8:7c:5a:60:dd:c3:
18:6e:c0:7e:7c:0d:b0:c5:77:bb:a3:44:be:1a:b4:a4:95:0b:
51:fd:25:e4:a9:94:05:2e:6c:60:01:b3:cc:5f:68:08:38:81:
b9:e6:1e:67:46:6b:32:fc:0b:7d:08:6d:b0:fa:c4:f5:b7:b0:
41:83:45:c7:6d:d4:05:20:4b:ab:db:a9:09:6e:cd:43:6e:81:
2f:ee:71:7d:2f:08:ea:e3:e9:0d:28:22:1d:16:8b:bf:c6:e0:
99:58:94:8f:e0:2c:1e:19:9f:db:63:f5:50:69:48:99:08:b5:
4e:a8:18:e3:8c:cf:38:ad:a3:c6:cf:01:af:51:5b:a4:70:c0:
ee:84:00:4f:71:01:5e:99:a7:5c:ec:bf:bd:3f:66:2e:b3:bc:
00:fe:a2:b2:75:c9:9d:22:49:71:36:43:a9:b0:f9:6c:b4:af:
dc:9c:48:db:99:44:ac:83:fd:26:8f:dc:ec:06:da:cf:02:51:
49:a9:04:e7:61:e8:00:70:8c:e6:00:36:b5:d5:28:b6:ea:02:
fb:26:e3:74:5b:6c:7d:83:9f:8f:dc:7b:70:30:c7:14:ab:ae:
96:af:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:45 2025 by rpki-client