Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
File: McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft (raw, json)
Hash identifier: d02VJBsaGBCtkPu9JfcHXNg7LqHqHIEaZIyB0rvSEOk=
Subject key identifier: 22:21:1B:04:76:2C:78:0B:6C:D8:BA:A0:6E:2F:D7:BC:3E:82:DF:D7
Authority key identifier: 31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
Certificate issuer: /CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Certificate serial: 0199FB0EE72DDF87D56F94B4BC05916DDDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
Manifest number: FD
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl (hash: 0uLtBve0mqbNQxuTMF1fyo1f5dLCL+BT3767VbxePcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e7:2d:df:87:d5:6f:94:b4:bc:05:91:6d:dd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c356810d45adf52cf19fb0b0d20f7f3468a0e9
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=22211b04762c780b6cd8baa06e2fd7bc3e82dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:59:56:35:4d:c7:3b:26:1b:0d:a8:91:97:
b5:f9:f8:35:01:06:8b:ee:d6:b2:9a:d1:ec:e8:1e:
de:59:08:9f:22:24:6a:5a:29:da:f5:d5:43:2f:2f:
24:33:ed:37:99:2c:96:88:6c:16:53:16:a0:36:da:
fd:c5:21:7f:9c:4a:a6:48:07:22:bd:e0:3b:a2:74:
9e:25:8e:16:9a:1b:72:5f:3d:59:5c:b9:7c:32:a6:
e1:6b:9f:50:0d:36:04:d8:c2:c0:ea:df:2a:f3:51:
4b:a2:18:a6:30:a3:b3:b2:d0:55:9f:c7:30:ee:0e:
98:7d:d9:b4:b4:ac:88:74:0a:4b:28:6b:3a:c0:16:
f6:2f:36:c9:60:61:85:59:33:2d:bb:53:15:9b:2e:
db:47:79:ca:5f:54:de:aa:ee:a9:9c:cd:2c:6b:92:
b3:9a:32:c8:3f:2c:e0:d7:3d:c2:ab:e8:bd:a0:c0:
16:65:ea:23:89:38:e4:0f:fd:83:ed:16:6a:0b:20:
af:4f:70:fc:18:3a:d7:81:89:8e:61:b8:87:85:4d:
ce:a7:50:c7:f9:a5:12:ae:b5:ee:a4:c0:9f:bf:48:
b5:4b:38:cb:9f:ba:ff:22:15:a4:f8:5b:d5:5b:94:
ca:a2:4a:f5:cb:5e:a8:61:3c:1c:a9:13:c0:9c:73:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:21:1B:04:76:2C:78:0B:6C:D8:BA:A0:6E:2F:D7:BC:3E:82:DF:D7
X509v3 Authority Key Identifier:
keyid:31:C3:56:81:0D:45:AD:F5:2C:F1:9F:B0:B0:D2:0F:7F:34:68:A0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McNWgQ1FrfUs8Z-wsNIPfzRooOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7bf9ad-3591-4ca5-b2fd-cdb5c0e2d75d/1/McNWgQ1FrfUs8Z-wsNIPfzRooOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:04:1b:e4:b5:b4:2c:2d:e0:c7:f5:92:0f:d1:32:c5:c1:f3:
cc:af:cf:44:fa:3b:f7:6c:69:62:b5:d1:5b:67:48:e5:af:3a:
f4:d8:17:3d:87:bb:de:27:6f:78:1e:d6:31:8a:c1:16:3d:30:
96:48:73:03:00:a1:51:2b:82:74:0b:36:96:65:d0:ea:62:0f:
c3:39:c2:45:17:cf:6a:85:5d:f3:2f:e2:80:52:72:d6:d2:b1:
71:9c:01:9a:ca:90:70:a5:26:7b:a8:f1:96:82:30:f5:b7:be:
d7:6e:b9:c1:11:d1:b8:3c:d0:8e:5b:81:aa:e2:1e:7e:0e:95:
84:91:59:f2:d8:34:fb:5e:4f:41:4e:1d:2e:06:34:b7:87:4b:
8a:4a:4d:b7:a7:59:5f:b0:86:7f:08:40:2d:54:70:e1:7a:98:
6e:9d:56:e1:ec:cb:83:ab:14:35:cb:6b:71:31:00:62:74:52:
31:2a:9f:bd:c0:b8:fe:77:22:50:ce:8a:48:3f:67:c7:1b:a8:
94:b4:73:a7:41:d0:14:a2:cb:dc:06:60:45:46:a9:1e:ca:4c:
cf:91:90:32:b6:05:72:59:89:39:ee:76:29:9c:a2:68:bd:1c:
3b:cf:f2:9a:78:e0:2e:df:c3:53:56:38:87:64:b3:99:1d:ea:
19:9a:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:28 2025 by rpki-client