Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: dxh3IDorQ8Tif9bYy1DeCSI0Cjvxn50ctCzsBtjG6Zo=
Subject key identifier: 5D:C3:04:39:22:CE:77:64:50:4D:A0:73:99:79:38:8B:2B:9F:B4:ED
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 019A41712A2BDD266504CB1BE0740711B4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 1706
Signing time: Sat 01 Nov 2025 22:02:06 +0000
Manifest this update: Sat 01 Nov 2025 22:02:06 +0000
Manifest next update: Sun 02 Nov 2025 22:02:06 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: DVq1oTWbryx8vGkttx8XLH0a6vuu9cJpwlBkKkAA3sk=)
2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 22:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:71:2a:2b:dd:26:65:04:cb:1b:e0:74:07:11:b4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Nov 1 22:02:06 2025 GMT
Not After : Nov 2 22:02:06 2025 GMT
Subject: CN=5dc3043922ce7764504da0739979388b2b9fb4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:a4:d9:8b:3d:86:43:ac:84:da:32:66:e0:
c1:af:ce:a1:46:83:08:8f:7c:9d:92:c0:34:79:6c:
70:18:ab:ca:18:f0:5b:a9:29:85:a7:65:fc:8c:3a:
1b:c2:96:81:cd:47:54:b4:29:4c:79:74:53:84:0b:
69:21:ac:da:72:9c:0a:12:16:74:d6:43:b4:4d:d8:
e2:64:44:7b:4b:0d:b5:3d:08:80:7e:00:2a:60:e9:
e6:d0:88:9d:c2:ce:44:34:f8:aa:1c:88:35:23:a1:
4a:29:8c:f0:ff:da:ea:1b:1a:bc:1f:78:cb:99:f8:
e7:fd:0b:9d:fc:d3:92:28:be:ed:33:ba:25:c7:6f:
ce:7b:4f:44:ad:3b:d7:75:8b:0e:26:86:e1:7a:8f:
78:b7:24:bd:de:9a:81:ff:ef:33:87:15:47:0c:ce:
82:26:63:4d:e9:b9:a9:e3:26:fd:ee:04:5a:a6:e3:
53:6c:ec:e0:00:45:12:6d:76:4b:d2:39:34:08:e2:
e7:9b:da:10:49:38:bb:0f:bc:f9:3f:d8:3b:96:91:
f7:95:8e:33:aa:8a:6b:03:53:6f:47:51:20:1a:90:
df:99:8c:2d:a8:29:c0:db:9b:d6:8d:8e:3e:76:9c:
9a:96:ce:cb:05:03:c6:cf:52:62:26:6d:81:53:81:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:04:39:22:CE:77:64:50:4D:A0:73:99:79:38:8B:2B:9F:B4:ED
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d3:b3:20:f4:94:e5:6d:d9:c1:ba:3b:c8:4c:b0:51:b6:48:
cd:c2:0c:36:12:22:36:90:7d:e4:6e:53:95:8b:77:39:30:d7:
d4:72:6f:14:ba:1c:ad:a3:ea:d2:9f:e1:8c:a9:cc:d6:9d:b0:
22:58:b8:89:04:4d:d0:11:16:68:a1:f6:7a:a0:6a:df:7c:6c:
b1:fb:fe:6a:34:09:ae:f8:a8:2a:7a:9a:19:af:11:70:ca:9e:
3a:b0:57:46:3d:b8:af:4b:79:63:1d:f6:44:b5:3f:d2:5b:6c:
56:6d:89:40:7c:9d:52:0a:9c:50:a7:2a:f4:0a:e2:d1:5b:9c:
62:3a:99:75:15:76:3a:bf:0d:7e:98:04:83:a4:c2:6b:49:2c:
54:ca:a9:15:46:d8:73:5f:db:27:b9:49:4c:96:b9:05:ea:0f:
48:04:3f:a1:e8:09:3f:4a:65:92:e0:6a:d1:79:d3:d5:f7:8b:
39:31:52:11:6b:85:d1:da:d9:8d:07:50:54:77:ae:5b:d1:dd:
6b:dd:2e:78:17:bb:87:90:18:a7:11:88:ea:27:37:6c:4a:4b:
ef:41:bb:6a:e9:31:91:df:54:34:51:4d:41:68:f2:19:80:a1:
fb:54:4c:4f:eb:23:6c:4e:b4:f1:a8:a6:a1:c8:5f:37:26:f6:
b8:37:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 07:45:04 2025 by rpki-client