Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File: MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier: B9Do81iqLdkpt0G3Q3W1Nsi5SE0ohbl78gnfWyiGyhI=
Subject key identifier: B1:9B:98:B3:94:66:1F:09:4B:09:0A:FB:2E:FB:04:88:31:9D:39:EC
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 019A4DAACA361F1FC950BE0E0E2CA4673254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number: 0C05
Signing time: Tue 04 Nov 2025 07:00:29 +0000
Manifest this update: Tue 04 Nov 2025 07:00:29 +0000
Manifest next update: Wed 05 Nov 2025 07:00:29 +0000
Files and hashes: 1: AEr7526r87jMmzyFU6AhzO2yzJs.roa (hash: FaU9GigNrTflXT80XzjmUalvFoH7j0+xf5GqgvZ8viI=)
2: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=)
3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: 05o7ecMJODI9FBukh8yAHqZ14Mzm9cCkKcOHbvqJbeM=)
4: RJMA_6CErPsb2WgfyOY8q7SE2Xw.roa (hash: rLvL5r3qJKV7IPp00VA8CfU8H3FqWwBRZyYhz2cuvnI=)
5: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=)
6: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ca:36:1f:1f:c9:50:be:0e:0e:2c:a4:67:32:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Nov 4 07:00:29 2025 GMT
Not After : Nov 5 07:00:29 2025 GMT
Subject: CN=b19b98b394661f094b090afb2efb0488319d39ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:94:35:a0:5b:d7:cb:37:0d:c5:12:d2:b5:
de:d0:5b:81:9c:e1:08:a4:e7:31:59:1a:98:66:d0:
d9:49:c5:05:36:cb:17:c8:b1:9f:f1:7b:64:a0:91:
b8:ca:72:5b:3f:97:dd:e5:13:2e:75:a8:ea:51:87:
8b:b3:b0:01:0d:f2:39:12:ce:03:c3:29:92:ef:43:
a1:18:90:33:11:57:3d:75:71:b6:fc:f1:ca:fc:7e:
c8:af:67:6b:68:1b:7b:6d:da:c1:12:17:0a:da:6f:
be:3b:87:81:a5:54:90:de:f5:0b:2a:df:9f:ee:c8:
16:ca:c3:00:2f:c0:e9:40:e8:43:f2:ae:b8:30:06:
30:f0:7e:6f:5d:75:2a:79:08:24:24:19:8e:d1:58:
f0:c8:df:52:2f:8e:51:8b:e7:77:a0:ff:2c:fe:77:
8d:ad:ae:96:52:93:1d:bd:22:70:15:8f:95:ac:d6:
16:d5:e6:c5:68:57:f9:85:44:3c:04:ae:b0:9f:c8:
06:dd:a7:a0:bc:18:ce:bd:44:aa:53:2a:16:53:4f:
2a:49:9c:d3:94:17:2e:b6:e5:ec:d4:8c:5f:e9:59:
e0:72:50:d5:33:d1:aa:cd:c2:67:99:55:a0:6c:5d:
c3:24:d3:a1:ce:da:46:5b:6f:8c:b8:62:42:d0:50:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:98:B3:94:66:1F:09:4B:09:0A:FB:2E:FB:04:88:31:9D:39:EC
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b3:6b:ba:dd:81:fd:e7:df:2e:99:15:c3:8b:56:ff:3e:77:
09:c8:93:f5:9c:21:42:4a:29:ea:5d:f0:ca:99:5e:85:a6:d2:
f3:a3:40:71:32:73:9c:19:d6:e1:7e:a3:64:29:c1:7c:d8:b3:
dd:ac:c5:61:18:d1:32:81:45:41:c8:75:46:7d:2d:c2:04:34:
1c:23:29:2b:ac:df:90:71:1b:69:79:55:48:59:51:68:86:5f:
8d:e9:de:8d:49:5d:a8:72:8b:01:b1:57:5a:32:e7:aa:fb:0e:
e8:d5:11:31:33:47:9a:62:ad:92:36:6a:67:65:44:db:1b:3a:
c7:cd:c4:1b:15:a4:20:2b:4f:68:e6:89:7a:8a:8c:8e:38:83:
7a:d1:9b:47:92:12:ef:9e:44:f8:ba:ed:ee:b8:f4:36:10:24:
17:3b:02:62:f3:50:17:58:e0:af:0f:5d:b8:a3:63:d1:e1:46:
4f:7f:d1:ae:e5:d6:b1:91:f9:23:3c:61:8d:0f:97:c6:1d:16:
10:58:5c:48:9e:fc:8e:0d:2d:7d:fe:f9:4e:4e:f9:8d:d4:08:
03:ae:80:b3:75:68:62:84:29:c1:34:a0:6f:90:b4:4a:d3:e4:
91:7d:2e:91:e9:c8:87:fb:a4:ea:d6:12:da:d9:fe:61:71:c4:
00:9e:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:45 2025 by rpki-client