Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
File: MKNPnR29IKqH-w9ivStsXjDGFKI.mft (raw, json)
Hash identifier: C02YIouJYnbKmZsVT+vdJ/m8wE9KacPMQBd4yf1BQ4I=
Subject key identifier: 7A:28:86:AC:2B:4A:42:EF:E9:04:16:E5:54:CE:8A:B6:DB:78:82:70
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial: 019A500722CB6FDD2CF1477510F96F140BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
Manifest number: 07C2
Signing time: Tue 04 Nov 2025 18:00:36 +0000
Manifest this update: Tue 04 Nov 2025 18:00:36 +0000
Manifest next update: Wed 05 Nov 2025 18:00:36 +0000
Files and hashes: 1: MKNPnR29IKqH-w9ivStsXjDGFKI.crl (hash: U6eqruko1BvR0GDCHbll+rLjPsoX1HM3+OhXpYChK0I=)
2: lQVHGnH2f0hNssZzIKkiu_JR2tg.roa (hash: Hp6I2j7udVV6xzpCwEdfm0+ifgsw+yYFCuK3YkNFaBk=)
3: lblIM2FJQ_WVf-a4mFWu5Otgr-A.roa (hash: dTACe68AOYRTGOWM2bf2NFYllivUWP/q40LE4fNKxno=)
4: uvBnSEDJOZtpJ8-9ltvsweOU25c.roa (hash: 2+1fknRQCOLLbsPXAtonbLFlD1W2x7Jyk80s3qNwpCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:22:cb:6f:dd:2c:f1:47:75:10:f9:6f:14:0b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Validity
Not Before: Nov 4 18:00:36 2025 GMT
Not After : Nov 5 18:00:36 2025 GMT
Subject: CN=7a2886ac2b4a42efe90416e554ce8ab6db788270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:a4:7f:5f:2a:b3:cf:1c:db:b5:eb:b8:15:
2a:17:32:b3:89:b5:3a:48:98:9c:8d:39:38:72:ab:
45:30:4d:c1:ec:6e:30:7c:cc:1f:90:f7:43:0a:0a:
0f:e7:7c:42:30:61:09:c4:a2:f9:7d:17:e7:44:f0:
c8:ac:37:56:11:72:d0:f0:06:3b:a8:5b:33:31:ce:
0c:65:63:0e:95:d0:97:ae:96:df:0e:c9:6c:76:0c:
58:23:ea:03:6f:6f:c9:2e:dd:4d:0b:f7:b0:23:30:
f2:44:94:9b:4b:d5:06:d5:46:80:9d:11:29:92:5d:
f4:5a:78:33:39:5b:0b:e9:f2:a7:19:27:52:8e:2b:
a0:f4:f9:ae:49:8c:79:f9:3d:a6:7f:d9:cc:d2:00:
5b:01:d6:e5:af:7e:95:2a:80:1f:af:ff:19:88:b3:
ea:f6:25:d7:36:df:35:84:f2:9d:b2:46:3e:4a:57:
ee:1a:61:80:ac:fa:16:ce:e3:1c:0c:02:26:6d:e0:
1a:96:fb:8f:b5:64:41:8b:a2:87:0c:45:45:3c:7e:
7b:0b:a9:3a:18:7d:e5:36:0c:1f:e0:6f:00:8a:7a:
58:68:cc:60:78:b4:89:42:1d:ca:37:82:e8:8a:a9:
ad:4d:64:b4:84:a3:d5:e6:18:c5:32:e5:33:58:25:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:86:AC:2B:4A:42:EF:E9:04:16:E5:54:CE:8A:B6:DB:78:82:70
X509v3 Authority Key Identifier:
keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:24:9b:86:36:74:ef:12:61:94:c0:96:40:94:e9:bc:31:01:
0d:eb:e9:8a:f9:ff:24:42:63:5f:59:f5:11:a5:57:28:8d:de:
17:a4:4e:27:71:02:38:91:0f:62:16:c0:12:79:8f:95:42:33:
bc:05:3a:f8:f9:39:33:f3:ca:b4:8c:3b:c6:46:be:11:ca:9d:
96:1f:e4:f9:2a:1d:c2:55:3c:f7:68:53:8c:1f:0e:7a:0d:f1:
a5:31:fb:e9:ce:b7:6b:5e:e3:c9:1c:69:27:69:11:02:f3:13:
c2:20:ee:14:1c:71:d3:22:22:8d:ce:60:d7:12:73:00:d8:52:
81:35:b3:84:50:90:aa:9e:30:1c:14:8b:7c:e7:90:78:6b:77:
cd:8d:54:b2:06:13:79:f6:eb:63:d9:cb:00:83:f3:12:fc:61:
4a:d9:e4:7f:d0:ba:56:70:58:fb:88:af:1c:cb:80:1c:34:9c:
47:73:22:a4:5f:f4:1a:96:f0:36:bf:7b:8f:1e:1e:b5:8e:0b:
9f:41:77:a1:e8:98:63:b5:47:79:ef:a0:30:cc:d8:26:33:fd:
69:89:62:59:33:58:b9:29:74:4f:ca:ab:fd:73:ac:37:75:aa:
28:41:1d:92:c8:34:89:80:46:65:c9:59:f2:d2:ed:3c:48:73:
f8:3a:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:17:58 2025 by rpki-client