Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier: TTLrUmdgcf/47L/Od/WfNycfHDbpNnphXI13Ohwsc1Q=
Subject key identifier: 99:34:49:7B:98:77:CE:17:99:D1:36:CD:90:78:8B:A7:80:CA:CA:32
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 01984BF88DC03A591D13B6B2AD7274E9328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number: 032D
Signing time: Sun 27 Jul 2025 13:00:37 +0000
Manifest this update: Sun 27 Jul 2025 13:00:37 +0000
Manifest next update: Mon 28 Jul 2025 13:00:37 +0000
Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: hCgfznqUyIotetfh1h1v8cXwzV/XykuxRy0mMJ1AyJ0=)
2: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (hash: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:8d:c0:3a:59:1d:13:b6:b2:ad:72:74:e9:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Jul 27 13:00:37 2025 GMT
Not After : Jul 28 13:00:37 2025 GMT
Subject: CN=9934497b9877ce1799d136cd90788ba780caca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:37:a6:7e:c7:31:e4:26:ea:7b:5f:7c:dd:
df:3c:17:db:e7:b4:7b:e2:7e:e7:cb:3c:65:c8:58:
8d:e0:67:a8:65:9f:2f:8c:fc:6f:93:56:03:2c:3c:
99:c1:ba:cf:3e:7d:d8:86:55:a1:fa:e5:8b:6d:aa:
c4:e4:22:20:57:e6:5d:41:1c:8f:9b:8c:f2:7f:26:
7a:76:e5:56:af:b1:ba:20:3a:e4:6d:49:15:76:bf:
c6:17:51:fe:c0:8b:38:1e:e9:df:75:39:5c:1a:4e:
9c:6e:fc:e5:38:ea:08:cd:a4:83:60:c5:ad:3c:e0:
85:d7:0b:8b:19:7d:3f:c4:ac:ff:39:15:4e:1e:62:
07:f5:40:a9:58:5b:81:58:52:53:a1:b2:49:3d:66:
ff:06:0f:8c:bf:ae:18:96:09:1b:f3:91:14:64:fe:
ee:64:18:e4:03:d2:f1:ea:45:07:4a:9a:8a:55:bf:
48:e9:f8:1f:c2:9a:6b:09:a3:30:ff:12:de:b3:f8:
30:77:63:d6:09:2d:dc:06:8e:0d:6e:53:3f:03:e1:
33:4c:93:e3:c8:8f:b2:a0:44:6b:a5:6a:1b:bf:44:
95:84:93:a9:bb:a1:d7:8b:4c:c0:e3:6c:5c:5e:b0:
47:aa:f5:f4:35:f7:20:46:e2:0d:d1:2a:17:e6:3d:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:34:49:7B:98:77:CE:17:99:D1:36:CD:90:78:8B:A7:80:CA:CA:32
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:00:20:5c:83:a8:2f:96:ae:97:8a:50:d1:40:d4:f4:3a:d5:
45:dd:23:0e:0c:42:20:2f:fa:b4:a7:e8:50:c5:97:0f:fa:cd:
c7:cc:d7:84:0a:31:00:d8:e4:95:c2:c0:27:2b:0e:ee:98:9d:
88:5a:03:f0:78:fc:43:12:1d:da:62:44:ed:20:c0:69:a0:fd:
e3:14:07:6a:0a:d3:7f:67:18:0a:60:ee:d8:1b:0a:73:89:28:
ab:48:f6:ad:cb:39:da:14:ac:d6:82:ec:66:17:06:bc:a4:23:
a1:78:0b:75:24:e4:90:fb:16:4c:57:9a:ae:66:d9:0c:a6:cf:
f0:73:8e:8f:d4:74:64:db:85:67:19:c2:9a:2c:a4:15:63:8f:
25:5a:8e:70:ae:7c:8b:55:b7:10:b5:14:de:4a:d4:37:be:fe:
2a:51:a0:b7:4b:a7:5a:5c:53:85:0d:14:77:f6:4b:f1:fc:43:
3e:6d:b1:26:6e:10:f4:82:96:f5:8a:86:9f:72:3d:ea:0c:f1:
0e:a3:52:d2:cc:af:e1:f1:b1:38:4f:da:58:bb:f9:03:ec:03:
d1:9b:60:e4:f3:40:fc:17:95:5a:f8:13:35:3d:28:63:d0:ce:
db:c5:0f:88:6f:c7:0c:cf:75:1a:38:c3:1b:3f:b1:b6:e5:53:
bf:17:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:23:22 2025 by rpki-client