Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier: yPK7FrPQIxlbzsfIeFlPpPmTflnNEPgCJ+pyGn2WK/g=
Subject key identifier: C4:DA:1F:04:AE:F3:B1:C2:73:89:D4:7E:D4:1B:ED:CD:CB:E8:A6:4F
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 0199FC8FAD7C1D8DDA41798EE79ABBA6581D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number: 040D
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: 8lrtLYXySSMprly7i4qL82ZmJmPUpXYAAZkNyGUAN+M=)
2: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (hash: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ad:7c:1d:8d:da:41:79:8e:e7:9a:bb:a6:58:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=c4da1f04aef3b1c27389d47ed41bedcdcbe8a64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:fc:82:ba:13:d7:1e:fb:fd:22:d0:80:2f:
33:bb:38:34:2d:85:a3:13:cb:4e:f5:f7:0e:ed:96:
48:93:6b:a5:e3:f9:18:a4:ad:ff:3c:5b:50:de:5e:
b5:d0:b2:b8:e4:79:ce:bd:48:bf:40:3d:d1:d3:a7:
b5:0f:26:f8:ba:a7:10:e6:01:07:8d:88:f7:92:73:
db:7c:33:41:d7:21:75:13:f0:0b:ad:e1:9d:57:8d:
cb:b2:f2:0c:cf:be:3d:14:12:fd:8d:23:6a:c6:d9:
42:66:d4:25:be:85:0c:2d:77:b4:fd:ab:13:e8:8e:
ca:7d:47:6f:c2:3b:7c:f9:2b:b3:89:c5:56:68:aa:
30:f6:fa:9a:0e:e8:a5:0f:eb:8c:fa:13:01:0c:86:
72:2d:95:7e:b7:13:30:83:bc:85:33:17:30:88:db:
68:94:40:eb:c4:5c:60:f3:7d:7d:45:93:8d:10:1a:
45:77:62:8d:f6:07:3c:dc:21:fb:21:96:44:c8:80:
11:69:55:56:99:42:5b:d0:4b:49:9c:2f:f9:60:65:
50:86:b8:1e:a7:e5:6a:12:10:08:12:6b:1a:ef:ce:
12:1c:04:3c:c4:42:3d:eb:41:d9:f3:4b:a0:2b:59:
ee:c0:b6:e1:ed:27:b9:d5:d9:11:3c:0c:fa:e6:b7:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:1F:04:AE:F3:B1:C2:73:89:D4:7E:D4:1B:ED:CD:CB:E8:A6:4F
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:44:bd:14:d9:66:4d:6c:bd:11:0f:bf:10:cb:47:94:6d:
7b:e4:26:a8:98:14:16:08:b1:73:86:49:4a:ee:21:61:ce:50:
ed:67:ae:bd:72:3e:93:87:85:2f:cf:77:18:c7:ee:65:2c:68:
be:0c:d9:f1:22:f3:52:81:fb:ca:d9:23:4c:08:79:eb:23:37:
76:2e:d2:11:15:f8:ed:f6:75:8a:37:a6:86:7f:0e:ae:dd:f7:
d1:38:17:56:27:c2:ee:fc:d3:70:08:20:f5:45:42:af:f1:50:
6c:f8:6f:68:22:37:2d:17:b9:be:a6:9f:9b:3d:d3:e8:a1:06:
e1:00:4b:85:ad:fc:67:0f:8d:25:d3:59:08:7f:41:9d:e4:ad:
30:f8:c7:c9:2d:53:43:e4:57:f9:6e:ca:ba:ee:f4:0d:c5:88:
8f:55:17:1a:f5:f6:7e:84:2f:a9:0c:ea:35:df:a1:4f:93:45:
66:53:e6:20:5c:fc:d0:d5:8f:14:bb:2a:7c:a7:3c:68:ed:f4:
de:1b:13:fc:5d:de:bf:72:c3:08:1c:7c:31:0c:c2:c9:c5:4f:
67:84:b0:2a:8b:07:dc:67:f1:7f:ed:b5:4d:bd:e4:47:3f:62:
20:95:3c:d1:8e:ce:0e:e7:a3:5a:ff:55:ac:79:22:81:66:33:
5f:73:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:07 2025 by rpki-client