Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: RSpHpxckE4+KmoKMDNa4zbs0Xsmc9+GITyx9NMIjIC0=
Subject key identifier: 4D:E3:D4:D3:EC:2E:A6:7A:5C:44:1C:EA:22:45:4F:9C:96:42:B2:05
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0199FBEBC719D100720333E62450F4B980F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: PFbkSVfTBRZGNQw30CGz8XqNr3lDGiFTGY/09shk0FA=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c7:19:d1:00:72:03:33:e6:24:50:f4:b9:80:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=4de3d4d3ec2ea67a5c441cea22454f9c9642b205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:50:9c:ae:b8:85:7a:33:d3:d1:ef:58:58:
b5:78:87:74:2d:04:49:a2:1e:40:7a:25:9c:43:c5:
1f:33:35:cd:6b:45:0e:e2:84:0e:15:58:a7:2d:15:
91:0e:56:98:e6:21:a7:9d:65:46:7e:95:16:69:c6:
fb:4a:79:2b:41:13:77:62:c9:1f:8c:15:53:a5:15:
55:76:d6:e7:9a:4f:69:13:b6:84:c0:16:7f:79:bc:
43:57:c6:5a:74:45:c3:ac:c6:5a:d9:ac:c9:42:e2:
89:a8:35:96:1a:59:80:fc:a7:ee:c3:68:00:56:1a:
32:45:32:ec:9f:d9:d6:36:9f:e4:1c:fc:0b:d2:39:
6d:ca:40:aa:1d:96:dc:d5:57:53:78:56:c4:81:40:
f5:93:19:96:05:15:b4:54:c6:7d:bb:7a:c3:59:ce:
41:fa:bc:e9:53:dc:8e:8b:75:3d:45:36:8d:bf:a9:
d8:26:21:5a:f3:f2:af:72:b1:56:10:0f:4c:51:7c:
95:6d:42:37:e3:3c:c7:e7:7b:7d:7e:cc:64:67:03:
a8:31:ed:3f:fd:2f:a4:52:37:94:46:40:b2:86:63:
7b:b8:b8:f6:ca:eb:fd:97:85:cd:3b:7a:71:a5:71:
d9:a3:d3:95:df:f1:93:d3:bb:2f:a2:e5:38:98:f8:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:D4:D3:EC:2E:A6:7A:5C:44:1C:EA:22:45:4F:9C:96:42:B2:05
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:dd:51:9d:6a:b4:8d:ec:85:12:78:a8:dd:c1:af:ba:ff:
1a:1a:a0:bc:6c:01:f5:0c:ec:63:49:91:0c:4d:88:0e:b2:9a:
09:ed:84:a7:eb:5a:cd:47:d7:af:75:2f:9e:ab:12:0e:54:7b:
2d:b9:00:2c:f0:70:84:a6:63:26:09:6a:94:9d:5a:e4:8b:c5:
78:b5:4e:6f:2c:0b:2b:ae:51:8e:85:f1:e4:07:48:e1:0a:30:
a9:2f:ee:58:21:51:a2:c0:30:f9:c0:5b:e6:93:f4:aa:b1:4f:
ab:a7:6a:20:94:1f:38:73:fd:cf:82:07:63:cf:b4:20:cb:cb:
81:6b:d5:7b:83:75:e8:ec:5b:24:1c:ba:44:60:a7:08:9e:ff:
3c:7e:9b:47:82:64:1e:fd:48:bd:c3:ef:83:ac:1d:af:af:98:
9e:b8:6a:26:da:00:ef:64:62:12:2a:c5:e3:e2:7a:72:94:f5:
d9:5f:14:05:eb:0d:98:02:8d:4f:a5:e5:eb:65:97:cd:57:14:
cd:bc:b7:31:d7:b1:50:e4:63:9b:93:e4:49:09:fa:39:6d:2b:
78:ae:d2:47:aa:06:5d:fb:27:03:20:8e:22:b9:ed:8d:16:8c:
9c:8b:0a:6f:88:c2:35:78:1d:a0:62:08:03:e7:3c:e0:17:fb:
15:45:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:56 2025 by rpki-client