Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: JyBWvHbJ5NZ6nHM1Tc4KkAwzQwDaX2XomXCG4076bh8=
Subject key identifier: E6:2E:20:EB:F4:9B:C4:21:0E:12:3E:AD:80:4F:27:6D:68:FD:E9:F1
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019A4EF4370A58C816E01BCC65A233B17166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:18 +0000
Manifest this update: Tue 04 Nov 2025 13:00:18 +0000
Manifest next update: Wed 05 Nov 2025 13:00:18 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: OA4OkIacSjVtvucq5JLWFZPzmPdJQJHEShI8rPIpasQ=)
2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:37:0a:58:c8:16:e0:1b:cc:65:a2:33:b1:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Nov 4 13:00:18 2025 GMT
Not After : Nov 5 13:00:18 2025 GMT
Subject: CN=e62e20ebf49bc4210e123ead804f276d68fde9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:6a:e2:b3:0a:ee:f7:fd:75:25:7a:fb:36:
6f:f4:dd:61:4c:09:1b:be:c1:37:a7:a8:f2:8f:cf:
92:74:f0:ee:e9:99:3d:63:5f:a1:f5:0b:81:ac:53:
94:e1:72:9d:a2:b4:a9:02:e9:67:91:82:de:13:5b:
6f:b0:1e:95:0d:bf:29:0c:61:28:ad:d0:86:a7:a6:
fb:96:6d:7b:e1:cc:be:07:4f:d1:a3:89:f3:96:8c:
25:2f:95:81:b2:1a:d0:fe:1b:35:b9:92:e0:e9:5e:
ec:d4:f3:86:21:ad:4d:a0:ff:35:d0:ad:46:fa:1e:
39:c9:c9:6a:c2:b4:80:4f:89:96:df:d9:a6:2d:42:
77:5b:84:90:f5:b7:49:30:93:0f:37:c2:63:51:81:
ba:7f:7a:d6:e5:1d:c0:be:7b:c9:51:d0:c1:2a:8e:
58:cb:32:8d:f3:05:42:6b:4f:52:cc:c2:d7:59:b2:
63:03:92:e0:34:20:82:06:72:19:09:37:08:40:f6:
c0:6d:74:f3:ff:69:87:03:a1:eb:0e:d4:25:05:67:
80:a1:5f:24:0f:dc:d0:b6:72:f1:c4:48:55:b5:e0:
ce:75:e9:55:e7:2e:a5:63:17:03:de:b2:6b:d2:61:
bc:52:95:8c:75:b4:85:52:b2:ad:a5:3d:a5:c3:52:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:20:EB:F4:9B:C4:21:0E:12:3E:AD:80:4F:27:6D:68:FD:E9:F1
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3f:e0:6e:17:09:1e:29:32:fd:58:20:df:1f:0c:11:a6:cc:
6e:0c:c9:a1:c4:d4:0b:1e:57:1b:5b:91:c9:f3:eb:f2:98:2b:
d4:dd:e0:f5:12:f8:8a:ad:1d:77:fd:b0:6b:53:bb:0a:23:50:
88:62:eb:3f:1c:5f:66:ee:bf:59:38:ee:6c:33:ae:8d:77:0a:
7d:5d:b1:f3:3c:5e:e4:d4:68:11:8e:0e:98:2a:06:f8:69:e8:
6e:8c:81:13:bc:5e:22:fa:6e:1b:05:78:05:3a:ce:da:15:5e:
d2:ea:26:ce:c5:97:49:6d:8f:93:2c:5c:84:cd:c7:05:15:c2:
0a:76:f4:b6:97:ec:42:99:46:39:42:25:ae:54:09:1f:db:74:
93:bf:37:52:b5:7d:94:ec:bb:2e:a6:e9:76:ee:91:2c:aa:cd:
7e:ea:a2:6b:6f:aa:b3:d1:a2:4c:20:cf:f7:4b:13:bc:09:41:
35:4f:1d:11:c1:10:ce:2b:10:cb:04:c6:f0:b1:bf:9b:a9:46:
1c:f7:79:7b:76:a4:19:49:42:e1:36:60:53:65:9a:ed:6f:38:
aa:08:93:c0:74:06:97:86:ce:a8:88:9f:05:9a:a9:94:e6:52:
a4:aa:3d:e2:71:f3:34:0b:26:c3:c9:3f:56:f0:35:02:a8:d0:
5f:ba:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:16 2025 by rpki-client