Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File: MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier: xwr0cTtWD/K+y7ssUW5orMd1GbYH5T3+InAfp4wZRU0=
Subject key identifier: 09:B6:65:44:4A:62:5E:B5:09:94:A3:B4:81:D3:FA:B5:C9:41:09:5D
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer: /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial: 0199FFC7BE9F0DFA6EFCA8654D0FF61FE147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number: 07A5
Signing time: Mon 20 Oct 2025 04:01:44 +0000
Manifest this update: Mon 20 Oct 2025 04:01:44 +0000
Manifest next update: Tue 21 Oct 2025 04:01:44 +0000
Files and hashes: 1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: CwcNMdDvY55vsELmWq4kdPBm0BXUR7aS3mO6rK1E2Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:be:9f:0d:fa:6e:fc:a8:65:4d:0f:f6:1f:e1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Validity
Not Before: Oct 20 04:01:44 2025 GMT
Not After : Oct 21 04:01:44 2025 GMT
Subject: CN=09b665444a625eb50994a3b481d3fab5c941095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:08:31:46:4a:73:31:0e:2a:05:3f:b9:e6:
fe:9c:5f:14:9d:9f:d5:ee:28:7e:6b:01:91:7b:da:
fd:1c:70:48:eb:aa:d3:31:d0:3a:90:01:8c:5f:90:
6d:8d:03:7f:6b:99:be:e5:29:02:8e:22:38:19:e0:
17:5a:ca:07:a9:b8:42:a0:f8:78:34:e0:b4:4b:10:
8c:1a:45:49:98:10:d0:5a:c9:98:5b:c9:d1:db:29:
2f:da:01:f8:3e:ea:67:93:5c:fa:07:b8:e0:76:8d:
e3:f3:18:2a:af:9f:99:de:40:1c:cf:87:e3:3d:f7:
4c:f7:57:ef:d6:ce:31:ba:75:14:7b:bd:06:00:64:
59:1d:52:82:cf:71:f5:17:20:49:5b:96:82:a3:16:
14:00:04:f4:0f:a5:50:17:34:80:07:52:63:99:90:
5b:ac:6b:f7:69:b2:2f:6f:4b:f5:fe:6d:31:29:c2:
10:3c:3d:25:54:9c:74:20:36:6f:48:02:83:aa:6a:
e4:60:d4:b7:ea:39:f1:1a:02:e9:6e:02:fe:ef:fb:
97:00:81:1c:8e:49:9d:77:8e:e2:a0:13:c0:19:34:
11:d3:ea:ab:7b:8c:32:50:5d:56:66:71:ad:75:d2:
c9:fb:19:41:7e:c7:13:6f:d4:64:5f:48:ea:4d:fd:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:65:44:4A:62:5E:B5:09:94:A3:B4:81:D3:FA:B5:C9:41:09:5D
X509v3 Authority Key Identifier:
keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b3:f7:60:f2:34:16:b8:86:0e:fa:1f:85:1d:5f:20:2d:52:
94:89:2a:d5:91:f7:e7:c6:c8:44:77:dd:be:df:f6:f3:63:05:
3a:5b:3f:61:ca:08:83:68:26:95:b6:df:63:94:84:51:ec:6b:
d8:0c:b9:7b:e2:80:f7:aa:22:d0:fd:98:ba:67:ae:05:12:24:
10:62:cc:0d:af:7a:70:15:71:98:46:ce:90:87:c4:e4:8d:32:
e0:fe:00:74:4c:fa:7c:8f:30:dc:c2:55:b1:6a:e3:47:83:6d:
09:ca:07:c5:3f:53:c9:b8:8f:9a:c9:d7:8c:b1:ba:59:86:0f:
66:5d:0f:30:ed:52:7c:3a:b3:6e:47:7a:b8:95:3c:23:b8:ed:
f9:4e:3e:2f:d0:73:8f:88:03:a4:da:5e:b1:94:47:f1:7e:59:
dd:08:26:fe:78:5e:f0:77:fc:ef:73:94:53:fe:47:6a:dc:9a:
47:f1:71:bc:9a:bb:2c:e3:0d:52:99:bd:a5:5c:73:bd:85:e2:
fc:34:64:e9:80:3a:82:2c:b3:58:ed:15:1f:a8:2c:57:fa:6b:
66:e0:f1:33:12:6b:95:66:50:aa:d5:76:6d:7c:90:27:a9:00:
73:59:9d:c8:69:8d:b1:cd:83:fc:3c:fd:ad:25:dc:a0:24:fa:
04:bb:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:22:42 2025 by rpki-client