Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier: 7XyRGGDf8QY38ybXcgAgGvdISAnsYAVzUZBBA2k+Cyo=
Subject key identifier: 2D:65:A5:BC:50:DC:7B:37:B8:B0:7A:5C:2A:95:0C:E5:13:BE:EE:91
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial: 0199FBEB92E5305BBA623CE5580DD19F2B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number: 064C
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: WhcaxJhjnIl8lTDpRl6X9OypP3FVkCaoTUfs2J2whtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:92:e5:30:5b:ba:62:3c:e5:58:0d:d1:9f:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=2d65a5bc50dc7b37b8b07a5c2a950ce513beee91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:14:e4:a9:b9:a5:ae:a9:23:ac:43:c4:e7:
30:bd:70:6d:66:f9:3e:bf:5c:b8:ee:89:da:b6:32:
bd:de:07:a1:2b:56:8a:ce:65:5a:8c:1c:1d:25:e1:
26:6c:cb:d4:8a:36:9d:bf:6c:84:50:35:0f:da:38:
6a:b5:80:f4:89:4d:8d:ab:52:c4:a7:bc:49:78:c4:
d3:cd:32:58:68:7b:88:25:9f:d7:e9:ef:cc:98:df:
0a:16:45:19:95:9f:24:e3:76:33:e7:bb:07:15:c7:
11:39:f9:de:3a:a8:a2:e1:da:3d:43:8b:04:e4:88:
03:57:0d:f1:7d:a4:db:b3:5f:aa:d6:3a:30:94:6e:
1d:4c:d6:0a:5f:c9:2f:ca:42:7d:9a:24:f8:bb:c1:
d3:c3:e2:01:8d:f0:d4:e8:b7:77:5f:ff:82:15:db:
69:0e:94:72:c7:4d:ac:20:3a:5f:35:86:b0:d9:19:
d7:8a:c7:41:49:57:98:d5:c9:92:15:c3:ce:0a:72:
35:fe:52:7f:26:41:14:ed:d7:e0:44:0d:e2:ff:5b:
dc:51:14:33:7b:5e:af:6a:1f:25:e2:30:43:c7:65:
01:87:cb:42:14:b0:b3:88:81:35:e5:f3:c9:87:e1:
13:9e:3c:9a:8c:7d:b0:17:43:5c:6b:9a:5d:4f:62:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:A5:BC:50:DC:7B:37:B8:B0:7A:5C:2A:95:0C:E5:13:BE:EE:91
X509v3 Authority Key Identifier:
keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:ef:d8:cd:71:69:ae:20:77:fd:d3:bf:b1:b1:ad:f0:d4:
76:2f:db:94:06:26:06:3a:1b:ac:4f:61:8e:bc:f9:d3:77:32:
2e:d0:c8:1c:5d:d9:31:6c:fd:30:ad:86:93:c9:78:48:f0:9a:
70:2a:71:aa:43:91:8a:7e:da:d1:b6:d1:56:4f:ba:38:5d:a6:
a0:c8:69:76:c3:1e:ca:a9:e6:0f:15:bb:36:70:c0:84:e2:a1:
35:bc:00:bd:30:33:ac:40:54:70:be:6d:b7:ba:94:b8:b3:4a:
c2:35:19:48:7f:de:f6:0d:43:e3:39:85:ba:b7:37:e6:8c:39:
dd:a2:e8:d7:a0:a8:aa:c9:f0:01:46:c5:c9:fe:1a:7a:c3:45:
1e:69:20:a2:a0:f8:d8:53:20:4f:5a:97:b3:8a:c0:1e:64:75:
88:b4:f8:f3:4f:64:e5:78:bb:a2:38:6e:ff:00:87:db:54:75:
62:f5:f5:d4:55:bb:0a:84:97:c5:50:b2:27:7f:0c:36:c6:97:
95:e5:18:45:7c:75:e2:a9:2a:f5:ec:61:80:a8:98:24:44:37:
e7:fe:5d:ca:ce:17:13:58:cd:61:58:8b:01:86:7a:7e:af:3e:
6f:3e:64:ea:fe:90:25:68:80:c2:14:71:7c:8c:d9:e5:11:73:
b4:f6:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:44 2025 by rpki-client