Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File: MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier: 1EDUqp80C5mGbLCJNFCbrZhJC59Heo7AisOklXRLmwU=
Subject key identifier: DB:76:5D:A4:97:41:39:D5:14:A2:FB:75:D9:B8:8F:2A:1F:87:3B:02
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer: /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial: 019A4D069576DD5EBB69554E9EDD83E5AD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:01:08 +0000
Manifest this update: Tue 04 Nov 2025 04:01:08 +0000
Manifest next update: Wed 05 Nov 2025 04:01:08 +0000
Files and hashes: 1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: QLceLiISIj+YD+NRrCo3lOXItSr99phml1/rgJsQgkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:95:76:dd:5e:bb:69:55:4e:9e:dd:83:e5:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Validity
Not Before: Nov 4 04:01:08 2025 GMT
Not After : Nov 5 04:01:08 2025 GMT
Subject: CN=db765da4974139d514a2fb75d9b88f2a1f873b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:64:b7:21:0b:a7:64:e4:d7:ce:5c:3c:01:
0f:27:df:6f:c3:d8:7d:c1:97:1b:04:b8:2d:1d:8d:
14:87:04:7d:71:8c:6c:cd:5a:71:f1:7f:39:12:03:
cc:dd:4a:57:a3:00:05:8c:f6:47:1e:53:f0:9f:b8:
b1:d7:df:6b:40:ed:5f:c2:f5:75:1b:ab:26:ec:77:
b4:ca:88:ca:66:bc:15:5e:b6:bb:37:82:a2:85:08:
27:df:55:53:d6:57:56:35:53:63:01:f5:ad:91:97:
9b:25:16:3f:1a:69:b4:8c:52:4f:68:8d:84:84:d1:
c5:ca:f3:f7:c8:36:e2:8d:30:d9:7a:fc:28:48:00:
41:c1:98:b4:f2:43:df:32:ba:34:fe:9a:f8:d0:23:
2c:49:e1:f6:a5:cf:c3:ee:65:39:18:9d:9b:36:01:
e2:0b:18:fa:3e:1a:df:06:53:9f:22:51:0f:e0:80:
04:b8:72:d2:fc:80:22:5e:cf:29:86:37:c4:16:34:
b2:ce:bd:9c:8a:b8:5d:d7:9e:6d:f4:65:c1:df:cd:
84:13:d6:71:5c:6e:1a:24:49:3a:b0:9e:53:45:6d:
bc:3d:e0:e3:4e:82:34:81:e0:92:7b:db:1c:6e:36:
03:ec:65:33:86:e4:a8:f5:40:9c:51:dc:e6:74:10:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:5D:A4:97:41:39:D5:14:A2:FB:75:D9:B8:8F:2A:1F:87:3B:02
X509v3 Authority Key Identifier:
keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:0d:95:37:69:11:96:f3:0e:f8:25:5f:6c:84:f4:f9:89:
5c:ac:5c:f2:f5:b4:01:6d:9a:09:ef:e0:e5:21:65:2a:e7:81:
d6:91:f2:6d:a1:e3:6c:6b:e0:23:16:68:72:56:b6:7f:71:db:
10:f8:79:ce:93:b4:f1:bc:3f:8c:2d:fc:ef:17:e5:27:2e:b5:
13:4e:0d:72:bd:d2:35:f6:39:a4:69:04:a1:b9:10:49:c4:f2:
c4:3a:04:1c:2d:c5:a2:04:23:98:b7:c5:3d:53:4d:45:21:8c:
8f:fe:ab:44:a8:24:4e:01:7a:2d:0b:b2:65:a0:2a:78:8e:6a:
33:99:f1:59:0e:68:8c:aa:ba:49:20:16:23:cc:27:37:78:a4:
a1:3e:02:65:38:c4:a4:2a:67:33:67:e4:23:db:cf:18:f7:80:
ab:54:dd:9f:b5:32:2c:f0:00:fe:6e:f1:00:54:84:a4:ae:8f:
08:8b:33:50:eb:b1:86:4f:0f:d0:f1:9f:e4:70:62:56:a9:fb:
4e:8b:31:c3:c7:01:21:32:98:79:7c:84:fb:b7:ee:aa:6c:0f:
44:09:6e:62:61:2b:86:a3:af:fc:ff:97:e0:b3:80:cb:71:24:
2d:83:02:98:7b:bf:c0:dc:31:05:a3:d4:37:e3:71:95:c3:5c:
c7:7e:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:32 2025 by rpki-client