Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
File: MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft (raw, json)
Hash identifier: iqpjTlbb/DLxBNH8hntVqQaafxp2VpECmb1TsMooa0U=
Subject key identifier: 22:1F:19:5B:6D:FF:50:B2:F8:51:D4:17:A9:9A:FB:57:8B:72:DA:8E
Authority key identifier: 30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
Certificate issuer: /CN=30aab02b654e915cadca339292e28c15c47df858
Certificate serial: 019A00351CD9B348C3054531810275999F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
Manifest number: 0546
Signing time: Mon 20 Oct 2025 06:01:12 +0000
Manifest this update: Mon 20 Oct 2025 06:01:12 +0000
Manifest next update: Tue 21 Oct 2025 06:01:12 +0000
Files and hashes: 1: MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl (hash: i6ewR7Ysi0MU468qKappwX7j+Y8koUMiXiwXIak3zzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:1c:d9:b3:48:c3:05:45:31:81:02:75:99:9f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aab02b654e915cadca339292e28c15c47df858
Validity
Not Before: Oct 20 06:01:12 2025 GMT
Not After : Oct 21 06:01:12 2025 GMT
Subject: CN=221f195b6dff50b2f851d417a99afb578b72da8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:af:be:f5:b7:8c:63:8f:24:fc:93:ab:20:
0f:71:98:61:f4:a3:1f:75:fe:f5:cc:17:c2:b2:44:
30:52:49:04:16:ca:24:ad:83:04:82:e3:c3:21:d0:
e4:e2:0c:68:2b:fd:93:5e:87:11:1f:2a:6a:a6:eb:
fc:50:17:5a:1d:17:41:89:ef:e6:7c:29:c2:51:ac:
42:ee:01:af:78:62:b0:da:76:e1:ce:02:45:23:8c:
66:f5:00:36:c7:35:80:f1:33:97:b3:04:c8:25:51:
53:0c:54:6a:e4:92:a7:db:e8:a4:17:5d:e4:fe:8f:
5b:7d:a2:4f:4e:19:c4:50:a2:b7:4b:bd:45:60:3d:
5e:55:56:4d:d7:41:0c:0f:80:c7:ce:c8:86:bd:a6:
f7:f5:d5:1a:b0:58:28:8f:d2:e3:d1:4b:bf:84:07:
5c:19:e2:0b:31:30:1f:26:8f:fb:b0:b3:27:be:2d:
a6:6b:3b:9e:11:fd:79:ee:84:e1:af:e7:95:fe:03:
d9:d9:ac:4f:e2:d1:c1:d7:0e:14:1c:8b:92:39:cc:
01:f7:ee:84:11:ce:84:bc:20:3a:2c:60:d8:08:77:
61:a8:73:50:3f:be:53:eb:78:de:0c:02:fe:d9:31:
12:f2:de:2c:de:2b:fd:26:de:0a:88:80:01:d5:17:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:19:5B:6D:FF:50:B2:F8:51:D4:17:A9:9A:FB:57:8B:72:DA:8E
X509v3 Authority Key Identifier:
keyid:30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ed:d6:3f:4a:8b:47:3b:c2:2b:20:36:a7:4c:f6:ed:40:de:
66:5b:c7:07:20:56:ba:7e:8b:41:e9:6d:02:09:34:10:6c:e7:
96:46:6b:0c:ee:6c:00:d6:95:2f:76:e7:d2:92:36:f2:7f:e5:
57:11:78:90:61:66:6a:ac:8b:21:d7:7f:6b:be:70:50:05:4b:
9e:d6:98:85:d0:a2:c6:0b:47:ce:e1:95:bd:bb:59:bf:e7:3f:
56:db:9a:72:fb:24:6f:2f:f9:e0:be:46:09:a0:17:d8:fd:45:
97:f0:5a:c7:73:51:22:01:af:df:d3:56:2e:aa:65:5a:a5:05:
a8:5b:3d:ac:56:fa:10:2c:af:4a:11:c3:9b:b9:66:be:eb:04:
73:5e:a1:5a:14:4d:36:50:0d:b5:03:9e:69:30:b4:b3:fe:9d:
ba:5f:0c:6f:4c:00:27:79:7a:56:af:ed:c6:40:c4:ab:05:ed:
95:8e:28:38:0f:c3:dd:8b:fc:35:35:be:ee:29:90:8c:8f:f9:
32:aa:47:84:fa:2e:2c:04:a4:04:bf:6d:2c:71:2e:ea:31:4b:
19:83:7f:fd:3d:f5:02:c2:93:72:ee:a7:1e:8b:ce:25:ba:e3:
79:46:99:3b:8b:6b:df:78:11:f9:38:be:4c:8e:57:1a:0e:3e:
79:51:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:09 2025 by rpki-client