Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: Y1se3XUBt9Sp8RGsAx1Qw/chOboAmOmK9SKGNnkE64A=
Subject key identifier: 7D:C4:AB:0C:5B:9F:03:06:E6:12:C7:81:18:00:12:D4:FF:D3:89:40
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 019A722623BEDFC23E9389630643B518193E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 0293
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: MO2ljgMKxaABP66Qa6W5tih1QCOVi2xmbVN0RnYLZjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:23:be:df:c2:3e:93:89:63:06:43:b5:18:19:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=7dc4ab0c5b9f0306e612c781180012d4ffd38940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:4f:c6:37:a3:f1:84:b6:7d:27:91:9b:ed:
ad:e4:79:92:e3:53:a2:d7:75:2b:ca:ac:db:d4:db:
7a:59:be:bc:9a:23:2a:58:b0:e2:ef:85:20:56:e6:
fc:de:98:ea:d6:44:44:e4:1c:2d:51:f0:21:d8:a9:
4a:45:de:af:41:19:9c:be:6b:a2:c4:f3:ef:ad:cc:
3a:b8:ed:8e:af:da:f1:d3:17:f5:5b:a5:df:b0:c9:
54:6f:9f:bc:54:53:0f:5b:28:b2:0c:f7:04:f1:9e:
94:13:89:69:f9:45:b4:2a:7b:83:e3:d9:27:20:7d:
47:d7:56:6d:6a:e7:e0:a9:c4:82:41:60:c0:07:c7:
da:8c:d8:63:5c:57:67:01:9b:2e:b9:64:81:a7:5e:
e9:f7:84:09:84:78:28:db:3d:0c:bc:54:c4:7c:66:
73:d0:24:6d:de:cd:e5:63:d0:b0:85:55:d9:17:cd:
f8:cc:95:a2:04:74:f4:04:f8:c7:79:d9:60:5a:55:
72:ab:fa:f0:8e:81:6b:62:c3:21:16:d9:7d:46:37:
04:cd:08:30:98:51:4e:22:06:51:df:20:eb:46:8e:
c8:20:fe:f0:17:5a:21:01:28:09:50:eb:01:6a:d8:
62:db:29:ad:ea:fe:4e:87:85:7a:31:bd:92:2d:57:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:AB:0C:5B:9F:03:06:E6:12:C7:81:18:00:12:D4:FF:D3:89:40
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c8:1f:23:ca:08:f0:bb:f6:97:b2:39:09:0d:9f:e0:e8:a7:
c8:ae:5c:d4:a1:a5:18:0d:f5:9c:07:2d:5f:0d:03:9d:72:3f:
35:ad:27:02:e2:33:82:1c:98:b8:2d:19:8c:af:1b:18:79:c7:
97:f7:ea:42:e9:8f:bd:4a:a3:b0:9e:98:2d:0a:d5:84:cd:af:
aa:e2:4a:84:bc:81:43:fe:ba:20:4a:3e:f6:18:88:d5:62:a0:
b2:0b:65:01:c0:f7:6e:cf:32:27:21:a4:eb:a8:a5:50:5b:80:
0b:7d:33:43:4c:0f:ca:0c:2d:6d:77:d7:ad:59:49:86:bd:14:
5d:58:a1:04:71:09:e8:6e:be:15:f6:5e:ae:66:96:b7:29:ee:
52:1a:20:f6:be:cf:28:9a:26:e0:98:e5:ec:4f:08:e8:7a:c7:
44:23:ad:b3:c5:55:f1:3f:4c:34:c9:f4:fc:0e:62:8e:a3:e6:
f7:78:23:e7:21:70:ea:04:5f:03:c1:8d:be:b4:7c:d2:77:90:
d2:97:91:7b:a2:83:1a:bc:db:b9:95:d4:15:24:3b:20:92:1d:
af:7c:b1:2d:b5:6f:d9:d3:ba:f9:54:2e:2f:a9:ce:76:93:6f:
59:a6:f5:50:d1:2a:dd:53:30:af:9f:de:1b:5a:c0:be:43:4f:
b6:dd:54:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJiO+38I+k4ljBkO1GBk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZTExN2IyYzRlNzVmZDc1MzAzZDE0ZGIwM2U5ZTJmNGI3
MjJiODgwHhcNMjUxMTExMDkwMTMzWhcNMjUxMTEyMDkwMTMzWjAzMTEwLwYDVQQD
Eyg3ZGM0YWIwYzViOWYwMzA2ZTYxMmM3ODExODAwMTJkNGZmZDM4OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQFPxjej8YS2fSeRm+2t5HmS41Oi
13Uryqzb1Nt6Wb68miMqWLDi74UgVub83pjq1kRE5BwtUfAh2KlKRd6vQRmcvmui
xPPvrcw6uO2Or9rx0xf1W6XfsMlUb5+8VFMPWyiyDPcE8Z6UE4lp+UW0KnuD49kn
IH1H11ZtaufgqcSCQWDAB8fajNhjXFdnAZsuuWSBp17p94QJhHgo2z0MvFTEfGZz
0CRt3s3lY9CwhVXZF834zJWiBHT0BPjHedlgWlVyq/rwjoFrYsMhFtl9RjcEzQgw
mFFOIgZR3yDrRo7IIP7wF1ohASgJUOsBathi2ymt6v5Oh4V6Mb2SLVccpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3EqwxbnwMG5hLHgRgAEtT/04lAMB8GA1UdIwQY
MBaAFDDhF7LE51/XUwPRTbA+ni9LciuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU9FWHNzVG5YOWRUQTlGTnNENmVMMHR5SzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iNTA3ZDYtOGNjZC00N2E0LTk5MGQt
MDAyY2UwYzdmNzBmLzEvTU9FWHNzVG5YOWRUQTlGTnNENmVMMHR5SzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iNTA3ZDYtOGNjZC00N2E0LTk5MGQtMDAyY2UwYzdmNzBm
LzEvTU9FWHNzVG5YOWRUQTlGTnNENmVMMHR5SzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsgfI8oI
8Lv2l7I5CQ2f4OinyK5c1KGlGA31nActXw0DnXI/Na0nAuIzghyYuC0ZjK8bGHnH
l/fqQumPvUqjsJ6YLQrVhM2vquJKhLyBQ/66IEo+9hiI1WKgsgtlAcD3bs8yJyGk
66ilUFuAC30zQ0wPygwtbXfXrVlJhr0UXVihBHEJ6G6+FfZermaWtynuUhog9r7P
KJom4Jjl7E8I6HrHRCOts8VV8T9MNMn0/A5ijqPm93gj5yFw6gRfA8GNvrR80neQ
0peRe6KDGrzbuZXUFSQ7IJIdr3yxLbVv2dO6+VQuL6nOdpNvWab1UNEq3VMwr5/e
G1rAvkNPtt1UuQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:29 2025 by rpki-client