Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: ajI1yf8AV5YIjzaSerj53IDkQn2nRhcspZgM7GLOiQA=
Subject key identifier: 37:15:BA:D3:2B:E0:CC:54:28:8D:2C:FF:D3:68:15:F9:BE:B9:89:C9
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019A4E4F60C5007A861CF75DDA7F1EFDE7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 10:00:16 +0000
Manifest this update: Tue 04 Nov 2025 10:00:16 +0000
Manifest next update: Wed 05 Nov 2025 10:00:16 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: J12c204zdAXVecDl29u2g995Ltv3ZSJ/P3yIDOr2LkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:60:c5:00:7a:86:1c:f7:5d:da:7f:1e:fd:e7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Nov 4 10:00:16 2025 GMT
Not After : Nov 5 10:00:16 2025 GMT
Subject: CN=3715bad32be0cc54288d2cffd36815f9beb989c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:a5:07:c1:a4:8e:84:90:86:f2:54:9b:5e:
e3:9f:a4:db:ee:f1:aa:7f:23:76:d9:62:86:27:a8:
05:ca:7a:d6:e5:80:81:ec:b5:14:cc:57:e7:ee:49:
d7:f7:41:af:6a:62:7c:d1:87:f2:6d:75:4c:fc:32:
06:14:3f:ac:73:41:00:54:f6:7f:4d:5e:ee:0a:8a:
28:b2:89:73:ca:34:4c:c2:48:50:a3:93:99:74:6f:
10:1e:33:fb:1e:37:fa:2c:d0:59:ca:5a:1d:ae:c4:
48:2a:c7:2b:11:b4:8d:fe:c9:d5:87:45:ed:e5:22:
1b:79:5e:4c:e2:1f:2c:34:bf:27:6c:90:b5:d1:53:
be:eb:34:1f:ba:04:92:a3:da:1e:53:da:7b:66:01:
7c:df:8c:b4:21:f9:18:05:fe:82:bb:6b:f9:96:2a:
06:03:4a:08:b6:0c:6d:05:4a:e7:1d:1b:e1:40:9c:
fe:a0:15:e6:21:00:c2:1b:31:65:84:2e:92:de:8f:
98:6b:da:34:05:81:03:d5:20:c5:53:02:ce:28:ac:
fb:66:86:b1:2a:f9:51:3f:5c:d8:8f:44:89:1e:d2:
e6:2c:71:8c:77:bf:8f:ec:7c:17:cf:4b:b0:8e:6a:
58:07:f9:9e:6a:c7:f4:d4:58:ce:a5:71:f6:7a:d7:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:BA:D3:2B:E0:CC:54:28:8D:2C:FF:D3:68:15:F9:BE:B9:89:C9
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6a:7d:ed:71:87:64:f8:67:c8:bd:dd:49:52:5f:eb:e4:bb:
b8:b8:37:a7:cf:d3:6c:0c:26:b3:0d:19:09:ce:b7:ad:f2:07:
02:b3:de:5a:26:c4:4d:f2:cc:b9:42:2b:d3:96:92:b8:8a:91:
b2:2b:76:d3:f7:f3:96:3b:bd:ad:aa:b2:ad:02:f1:08:9d:80:
0a:fd:b5:1e:ae:16:e4:fa:90:d5:0f:7a:9d:bc:c4:c9:e4:14:
21:10:95:86:bc:9f:ac:b2:54:eb:64:96:f3:e8:cd:06:38:01:
c6:f6:90:ca:35:c8:42:db:08:5f:bb:4a:73:e4:ee:73:c2:f0:
78:ad:98:be:59:3e:62:7c:79:ef:4e:cb:b4:0e:0d:8d:23:a3:
90:eb:68:7e:9b:23:8b:b5:c9:64:9d:c3:d1:c3:2d:48:66:e1:
c7:31:cb:c4:ff:b2:07:4e:da:f3:47:19:dd:34:99:1b:b9:02:
6d:05:55:65:97:c1:17:d9:13:ef:b3:35:71:51:7a:64:96:f2:
81:99:dd:90:2d:75:be:53:b7:7b:c1:57:b1:3c:60:9d:a9:77:
78:b2:1b:82:a8:e2:29:12:8f:01:23:d1:76:55:4e:76:8e:05:
bd:98:38:cd:ef:7c:4a:6e:94:43:ed:52:0d:86:d7:7a:6c:cd:
b2:03:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:35 2025 by rpki-client