Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft (raw, json)
Hash identifier: Jv3aBLLGvvi0PVt+JTIdWdf9Nb3XLU47l3M5T+1k8k8=
Subject key identifier: 8A:8E:AF:66:84:3D:99:B9:FA:FE:44:81:DF:B3:4F:7D:B2:99:06:56
Authority key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Certificate issuer: /CN=30c45fc3147102824f9d2d547766a809aeaf245a
Certificate serial: 019A4D7414C40ECA4C54B071D7C331EA9DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
Manifest number: 08B6
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: 57B-StK2AQ9sl4U1coOqd8wTgag.roa (hash: n83L+DsDXWJdoYcHoR653OskwlFSlFS/GtJPH3Goy+M=)
2: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl (hash: t8zpvIgidjBB5mhCZ3k3TvaNzfFT42GKru7Hgu3NSlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:14:c4:0e:ca:4c:54:b0:71:d7:c3:31:ea:9d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=8a8eaf66843d99b9fafe4481dfb34f7db2990656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:76:1f:cc:90:6d:d7:4f:2b:02:83:83:56:
ec:fd:da:77:9d:1f:8f:57:64:58:c7:89:cc:97:8f:
10:d7:3c:11:f2:a1:97:e3:bf:d4:0b:0e:ea:9d:fb:
75:66:bf:c4:d5:f5:4f:0c:81:a0:48:cc:d9:fc:fd:
cd:07:fc:b2:32:15:01:6f:1c:5e:5a:98:64:d6:db:
72:c9:e6:72:d6:5e:1b:c1:4c:c8:ff:65:de:be:64:
24:f5:db:6c:5c:4b:e4:bd:eb:34:63:11:de:fc:3d:
66:ac:67:9c:8a:5a:3e:d9:89:3f:09:1d:fc:f3:d1:
4e:e4:ba:03:9a:c3:b0:8b:de:d1:77:d6:74:c5:f3:
d5:aa:7a:eb:b9:e6:70:b3:36:38:ca:21:44:d0:52:
5a:95:b2:6a:ee:06:33:1a:bd:56:2b:0e:32:5e:60:
2c:2f:36:27:56:29:fc:f3:55:a3:c3:4f:16:63:62:
91:7e:ae:ce:dd:eb:77:1c:16:0a:4a:f1:01:62:4f:
a2:b1:8c:21:34:0a:c8:6a:76:39:08:34:55:fa:15:
58:2b:0d:0d:09:4c:d9:0d:c8:63:1d:ec:7a:11:b4:
ef:55:7e:19:a9:4b:fd:05:b4:b5:7d:28:c6:b5:dc:
3e:4d:63:d5:d4:7e:37:c6:a1:37:71:4c:64:fb:cc:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:AF:66:84:3D:99:B9:FA:FE:44:81:DF:B3:4F:7D:B2:99:06:56
X509v3 Authority Key Identifier:
keyid:30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1d:f5:ec:12:e8:58:1b:b2:55:52:a2:01:30:f2:43:c5:81:
09:ad:2b:45:33:fb:58:7c:53:e0:1e:36:7c:3a:f9:bd:02:72:
45:11:e2:0c:3c:a9:09:53:46:f6:50:2b:ca:72:61:80:d2:92:
85:e5:4e:57:c9:ab:dc:b0:d7:77:76:0c:9c:c2:50:1d:a5:cc:
6d:3e:4c:ca:9e:23:1b:d1:da:66:fd:1e:d5:46:fe:2d:a1:69:
89:c3:86:f0:11:a4:0e:bd:b7:9a:ec:d0:50:6f:d7:9a:4c:94:
c0:07:1d:28:9a:e5:61:96:b8:84:99:9b:8f:a2:3b:d7:f2:10:
50:3a:86:26:e3:16:d0:42:65:2d:0c:1e:58:4d:0a:94:27:b0:
9b:4c:7c:38:4a:ee:7c:15:b8:d6:1d:21:d0:8b:8d:b6:f3:66:
03:b5:b6:49:e7:a0:f5:51:e9:e4:91:04:b3:f3:81:12:28:67:
47:a3:f5:85:67:f9:25:84:e2:fa:73:ae:d2:16:f9:96:68:de:
07:3b:51:cc:e1:68:09:69:ba:31:c7:e8:c9:fa:d4:90:55:b2:
a8:4f:bf:a3:49:b5:94:3e:b4:07:57:98:74:de:53:26:59:ca:
cf:5d:75:49:f9:72:bc:d0:54:ad:cc:87:29:9f:21:81:2f:bb:
2a:94:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:38 2025 by rpki-client