Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier: Qna7uxIgGrQXnem1b/BtGv6hGJ+ao9+GLJiVeCT3/KA=
Subject key identifier: 34:72:A8:A2:53:3F:17:56:5B:92:25:DD:86:09:30:E9:81:FB:85:35
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 0199500999543FF2CAAB9EC08C55BBC0B970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number: 1689
Signing time: Tue 16 Sep 2025 01:00:30 +0000
Manifest this update: Tue 16 Sep 2025 01:00:30 +0000
Manifest next update: Wed 17 Sep 2025 01:00:30 +0000
Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: tbkmveZh+Zc6yArT9WR2hAipZlkGEewqzKuoyUBcwhs=)
2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:09:99:54:3f:f2:ca:ab:9e:c0:8c:55:bb:c0:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Sep 16 01:00:30 2025 GMT
Not After : Sep 17 01:00:30 2025 GMT
Subject: CN=3472a8a2533f17565b9225dd860930e981fb8535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:d2:c5:10:4c:c0:9a:0b:2c:04:1d:6e:95:
ff:18:1c:dc:43:6f:7d:00:13:d5:d8:f8:1c:2b:a5:
30:00:c6:2f:c1:77:fa:d3:3b:c4:24:82:80:50:d8:
88:b4:82:5c:6e:4d:76:53:33:12:51:af:ed:e1:ee:
49:3a:ed:26:f5:0e:90:4f:f0:20:b2:22:da:8e:48:
b2:01:2e:80:75:e7:fa:e7:ca:ef:f4:d1:12:fa:2e:
79:2e:08:38:6c:f3:62:c8:cb:3f:83:e9:a8:79:62:
8c:76:ac:44:49:4f:1a:c7:06:80:e4:86:2c:fa:af:
e7:0d:56:32:a1:d2:5d:b4:85:f2:4d:75:14:af:84:
a6:6d:8b:a5:06:f6:9c:54:3a:75:46:7d:9b:4a:c9:
f5:c6:61:08:3a:a5:4f:ae:45:96:f8:21:83:85:d0:
c7:04:10:01:b5:26:c7:df:3d:78:bb:3e:30:71:2a:
1e:82:b9:6b:45:75:9b:82:24:2c:82:9e:8d:87:f9:
80:e4:82:11:97:61:36:dd:7f:de:a7:53:bc:2c:c2:
0d:a2:71:b0:06:d9:39:fc:39:b0:f1:df:ca:f7:3a:
09:e4:44:3c:4e:c0:cf:f2:28:0c:59:ce:08:cc:a2:
53:19:3a:51:4a:fe:4d:32:5f:15:f1:6e:c7:fe:4b:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:A8:A2:53:3F:17:56:5B:92:25:DD:86:09:30:E9:81:FB:85:35
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:25:db:5e:cf:7b:e6:97:55:39:ff:49:e7:64:ce:9c:48:31:
7c:45:5f:94:b9:0f:29:21:de:70:1a:88:e1:48:af:45:61:b6:
de:fd:79:da:ff:39:a1:28:ff:4d:1b:55:11:8f:3f:f9:dc:7f:
96:58:dd:a4:9d:9e:9c:ce:f2:cc:33:a0:24:ac:ea:1d:87:e4:
0c:60:72:0f:a2:ff:6c:8a:82:ad:86:56:7a:12:1b:fc:ac:41:
69:c8:ff:1e:2d:6a:d4:ea:37:15:65:72:8b:d0:a1:8d:d7:0b:
df:69:94:ff:3c:9b:62:30:2d:d8:1d:8d:13:cc:e9:f4:ac:ca:
f1:06:8f:cf:6b:e2:d7:64:9c:e3:87:d3:c5:de:7b:cc:79:20:
5a:7a:1c:5c:5b:5c:e3:54:70:84:43:75:31:93:3d:83:bd:7e:
7f:b2:4b:e9:a7:8a:5a:c1:21:2a:6e:70:7b:73:53:a9:3a:7a:
a3:af:7e:c3:42:61:9b:fa:33:76:71:c8:23:a2:a4:a6:84:f1:
0b:12:47:94:37:df:ed:86:67:b5:d8:20:e9:af:5b:aa:65:b7:
65:1b:a0:eb:72:68:9d:7e:86:38:e1:d8:d9:fa:42:26:d2:1b:
84:78:f6:cf:a8:db:c6:97:63:ac:aa:da:f4:f9:60:6d:8c:50:
04:21:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:45:44 2025 by rpki-client