Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: 03OvWWhzLuiaNYW0hqiPHHyPeu588sUcIlxxYe77JRo=
Subject key identifier: E5:D2:52:B2:C4:D3:36:3D:F1:7E:44:C6:B3:3F:3D:86:F9:37:74:ED
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 0199FE4745AA1A58D8BD1908061C5792B62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 088D
Signing time: Sun 19 Oct 2025 21:01:47 +0000
Manifest this update: Sun 19 Oct 2025 21:01:47 +0000
Manifest next update: Mon 20 Oct 2025 21:01:47 +0000
Files and hashes: 1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=)
2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: E4/6Gwhsbohz7wdAVxXLfWMjM+jMwpfVBcHEfNT5yL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:45:aa:1a:58:d8:bd:19:08:06:1c:57:92:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: Oct 19 21:01:47 2025 GMT
Not After : Oct 20 21:01:47 2025 GMT
Subject: CN=e5d252b2c4d3363df17e44c6b33f3d86f93774ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:55:32:a1:16:ef:6a:14:b7:4a:b8:e1:53:
a1:f6:04:6d:5f:73:42:59:90:77:af:97:c0:21:6c:
0d:57:dd:6c:2e:9b:4f:22:8b:b7:3f:00:86:9f:74:
67:ee:77:37:25:85:0d:9b:97:a6:43:38:31:fb:1f:
3c:af:9c:76:cc:13:63:76:e6:c4:91:8b:5c:ef:f7:
9b:16:c7:9e:fd:ca:c8:85:df:e0:b8:e2:85:59:5f:
8a:bc:39:2e:87:1e:ce:f2:27:db:4e:29:36:2b:45:
e9:a7:3b:d7:cb:7f:a8:21:c2:c6:87:9d:7e:47:81:
07:2a:ca:30:24:85:7e:52:03:67:34:e3:5c:e3:5c:
fb:ad:38:54:ed:2e:ca:fb:82:60:c4:5f:56:43:8c:
4a:e3:53:85:f9:e1:cf:4d:de:9d:6c:c6:cd:9e:0f:
68:e4:c3:0e:21:cd:4c:fd:06:a0:b2:ed:52:b7:c0:
dd:06:a9:64:19:31:ee:4e:e1:ec:ec:36:8d:cf:3d:
7e:5e:ed:98:b3:51:6f:32:9b:23:a7:3a:6f:77:71:
d3:73:ae:02:01:ab:53:47:2b:e7:d0:84:1e:7d:b1:
8d:2e:3d:6a:ca:a3:01:4d:47:c3:b3:7c:b6:5a:0d:
42:72:aa:cb:a7:80:e5:69:bb:35:62:0e:ab:58:e6:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D2:52:B2:C4:D3:36:3D:F1:7E:44:C6:B3:3F:3D:86:F9:37:74:ED
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:39:ea:6f:07:ba:6c:22:d8:e2:9d:77:f3:9c:fa:8a:a1:80:
4f:00:39:72:4a:ce:7e:64:1d:ef:67:21:ba:c8:52:a2:25:5b:
05:62:46:4c:b9:26:9a:75:db:bb:f0:50:aa:3f:cf:ba:40:83:
e7:40:59:cc:93:18:0d:92:44:49:c1:54:a8:24:51:76:30:ff:
54:c5:08:d3:1a:67:5f:75:4d:b4:e6:ff:5f:da:87:80:99:05:
ea:55:4d:44:be:55:90:ec:c1:f2:09:7d:95:2e:d3:48:b7:4b:
d0:01:71:29:6d:43:c0:a2:c9:d2:43:3e:37:59:b6:0a:74:e8:
f4:d2:43:76:c0:92:f2:92:91:18:62:19:a5:f5:d7:b0:d4:e1:
8a:89:d2:66:eb:2a:36:4f:b3:13:06:44:64:da:11:90:d1:1f:
63:6a:57:4f:19:92:55:29:6f:4c:35:ea:ff:2d:75:99:bd:fc:
b9:59:22:2c:82:d7:93:14:88:70:73:eb:a1:e0:7f:c6:6e:07:
53:79:34:30:b2:90:c8:e2:1e:e8:ce:bf:85:53:cf:10:9a:d8:
36:b0:82:ae:96:2c:d5:ea:f9:17:04:ba:8e:2e:47:8a:bf:df:
21:78:72:b8:b4:30:4a:4c:8e:16:c1:df:77:82:09:42:4f:17:
12:37:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:31 2025 by rpki-client