Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: /f3mIH7QKKgA9kceh/TN2CZXMGU0ZQ2yAE/19knbmd8=
Subject key identifier: 1F:17:83:DC:E8:7A:10:4A:D7:32:74:95:C6:3F:7E:20:D7:66:AF:BD
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 0199FCFD6631657C7FEBDFB3C5E1A3F58691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 0797
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: Q9ztL879lJBugoGORwG7GuE77FaOIGUgZzwfNX7iQLk=)
2: lQVHGnH2f0hNssZzIKkiu_JR2tg.roa (hash: Hp6I2j7udVV6xzpCwEdfm0+ifgsw+yYFCuK3YkNFaBk=)
3: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)
4: uvBnSEDJOZtpJ8-9ltvsweOU25c.roa (hash: 2+1fknRQCOLLbsPXAtonbLFlD1W2x7Jyk80s3qNwpCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:66:31:65:7c:7f:eb:df:b3:c5:e1:a3:f5:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=1f1783dce87a104ad7327495c63f7e20d766afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:18:7c:8e:bf:98:80:9f:3a:f3:30:99:e5:
6b:69:31:e1:5b:7e:9e:97:04:9a:26:a8:48:5e:e5:
00:bd:a4:50:96:8d:2a:4c:30:0e:c9:ff:94:91:86:
6b:86:c5:09:f6:7e:97:a6:3f:26:13:b7:97:26:56:
ad:d8:4f:a0:2d:88:eb:49:81:7f:73:4e:76:f9:62:
45:ec:5e:cb:10:82:2d:0a:43:74:0f:70:60:11:e6:
b3:67:4f:0c:3e:39:3e:b3:8f:41:c1:ce:9e:ab:46:
35:da:8f:78:67:86:b3:c3:f7:94:ae:7e:12:51:a1:
bc:7b:e5:d5:88:f5:c6:2a:d8:42:b6:ba:91:86:64:
a6:c3:43:11:3f:db:ff:4f:78:a4:46:48:29:2f:45:
49:a6:cb:bd:22:13:8b:06:32:e4:f5:97:c8:b1:6f:
12:df:28:a0:33:2b:a6:4a:60:cd:45:f5:dd:f2:06:
be:f4:db:73:a9:32:fb:1a:13:b7:8f:6b:c5:dc:bf:
84:d6:70:1f:74:56:b9:e4:fc:c6:21:30:20:a6:0e:
f0:1f:99:36:e6:27:12:13:bf:ee:eb:c5:cb:1d:6c:
95:dc:84:bb:11:ff:fb:ef:98:18:93:fa:26:3e:2c:
69:99:51:af:79:9c:6b:9f:23:78:d0:9c:61:a7:36:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:17:83:DC:E8:7A:10:4A:D7:32:74:95:C6:3F:7E:20:D7:66:AF:BD
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:54:92:a2:80:88:30:33:e9:97:32:df:ec:ed:93:e6:52:cd:
52:54:bf:37:de:6f:c1:34:d3:62:6d:c2:af:f5:cd:47:8a:5b:
bb:86:a5:8e:ee:d0:3b:f0:af:4e:ac:02:2f:29:cb:69:eb:eb:
59:71:eb:40:5b:df:7f:38:24:0f:0a:16:bd:4e:a1:26:e1:80:
ed:ab:e7:9c:32:72:a1:e7:8c:fe:f6:a7:e4:04:b7:a9:78:93:
0d:62:c1:64:a5:95:a5:c4:ed:88:64:d4:45:c1:ea:9b:bd:76:
dc:d0:e9:8c:ab:35:5d:86:37:9c:8e:7e:ca:5a:a4:d8:18:ba:
66:1f:ff:1a:79:6a:f5:ed:0d:46:1e:c1:47:55:b2:2f:93:b3:
39:4f:3e:7e:92:e3:de:70:2c:d2:2b:38:ea:65:b9:37:56:ff:
aa:5e:26:fa:42:17:0d:5a:44:47:f9:d9:55:e1:65:20:06:c1:
c4:75:57:1e:e1:99:87:22:24:be:fd:1f:70:f8:02:22:2c:13:
21:83:4a:6a:96:df:42:ad:92:ad:2f:48:6c:4e:74:99:ae:95:
79:db:9a:0a:1f:29:60:a1:7d:ad:dc:3c:e8:42:51:59:c1:80:
46:f2:42:42:4f:26:46:81:9f:ab:1e:05:fa:80:46:9d:e1:b8:
15:f8:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:32 2025 by rpki-client