Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
File: MMOt1700croWgExJC2ahCXZZvTE.mft (raw, json)
Hash identifier: Q02hZY4EWLcxSevtr4/Q8ZjQAuEtHhM1B8M5EVaElZ0=
Subject key identifier: A6:C5:25:42:31:21:B9:D5:B4:DB:40:A6:39:E2:00:DF:CA:1B:06:9E
Authority key identifier: 30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
Certificate issuer: /CN=30c3add7bd3472ba16804c490b66a1097659bd31
Certificate serial: 019A4FD060AC56472C682C44BB2B77742DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
Manifest number: 0CC0
Signing time: Tue 04 Nov 2025 17:00:47 +0000
Manifest this update: Tue 04 Nov 2025 17:00:47 +0000
Manifest next update: Wed 05 Nov 2025 17:00:47 +0000
Files and hashes: 1: MMOt1700croWgExJC2ahCXZZvTE.crl (hash: usvy4u2LJlVS48saWk5XssoOlJr83azuXod9ObC2dKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:60:ac:56:47:2c:68:2c:44:bb:2b:77:74:2d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c3add7bd3472ba16804c490b66a1097659bd31
Validity
Not Before: Nov 4 17:00:47 2025 GMT
Not After : Nov 5 17:00:47 2025 GMT
Subject: CN=a6c525423121b9d5b4db40a639e200dfca1b069e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:30:97:ae:ae:65:a2:d6:4a:bd:e5:a0:fe:
37:77:cb:29:80:f7:14:31:86:41:04:bf:59:26:80:
43:16:58:ad:13:88:f9:df:8f:26:aa:94:40:f2:cd:
98:e7:42:6a:ad:cf:78:f1:e8:91:43:20:a9:c2:aa:
00:aa:b2:b6:89:d0:b1:f8:02:09:d4:87:31:d5:4c:
c4:b0:e1:c9:7b:65:d5:e1:01:64:42:06:ae:ac:b1:
b0:d4:4c:78:8c:e7:6c:50:80:51:3d:bc:99:ad:4e:
2e:ee:b7:a8:24:03:2d:2e:44:c0:3f:86:25:66:7e:
ad:ae:1a:c9:85:a8:7c:83:44:6a:f5:bf:93:95:1d:
a0:e2:e1:3e:1c:d0:39:ea:a4:44:3b:4a:f4:91:66:
18:09:ae:fc:77:ea:55:25:ae:73:31:ce:1f:94:56:
0d:3f:53:1e:67:e2:73:ad:d4:4f:47:90:10:0c:de:
ea:aa:88:ba:40:11:37:c6:f2:18:86:35:76:99:5b:
b6:78:d1:f3:72:55:b6:6d:b3:56:c0:96:e9:d0:b2:
8f:6a:dc:8f:37:61:0d:46:fe:1a:ce:a1:04:17:78:
de:77:50:f0:74:00:d9:26:cc:dc:10:ff:40:13:0b:
ca:91:6e:9e:ef:9e:c7:0b:ef:85:4d:a4:48:50:0b:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:25:42:31:21:B9:D5:B4:DB:40:A6:39:E2:00:DF:CA:1B:06:9E
X509v3 Authority Key Identifier:
keyid:30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:db:92:9a:87:35:c4:29:85:e7:95:3f:cd:ae:29:53:bf:eb:
4c:de:ab:0f:61:29:90:cd:5e:e9:e1:f3:a4:02:f9:fd:d1:c0:
92:4d:79:97:74:db:43:ac:39:a3:6b:cc:ca:5e:54:a7:20:b1:
43:2a:69:4b:7f:d5:ec:2c:66:1b:9e:82:ca:e6:8d:87:70:7d:
b5:ac:6b:28:65:cf:54:77:7f:e1:ea:bd:3d:ca:d0:02:71:70:
30:88:81:8d:f3:c0:5b:28:4b:a2:77:5a:f9:58:26:09:33:0d:
31:e7:a7:fc:09:61:ed:84:0d:2c:1e:83:fb:22:c2:ba:60:35:
b2:c3:b4:31:e6:57:d4:39:16:53:9f:9c:51:28:87:f0:06:1a:
06:0a:be:2c:71:50:d5:5f:06:60:b3:19:c0:4a:45:2d:93:78:
de:4e:23:41:91:5d:0c:18:39:b8:90:da:01:e0:a5:c9:11:ea:
60:87:72:7c:1b:94:1f:a2:07:0c:20:4c:31:67:b6:89:4d:c8:
da:00:6b:c6:3b:20:2e:c6:ab:26:22:ba:d3:cb:c2:25:2b:e7:
f0:99:b8:85:f8:7f:b1:5a:22:b9:f5:c3:3a:c1:c6:e1:95:ad:
bd:3f:68:90:bb:16:6f:8e:a1:9c:a0:0c:43:a9:0d:42:ad:ca:
12:03:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:02 2025 by rpki-client