Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File: MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier: L5OcrBnZUA9JUcHOuytz7sqWM8dY5SHS1eS92tjZhK0=
Subject key identifier: B4:23:A9:17:E2:DB:59:F4:31:0B:81:90:E2:AF:2E:C8:51:44:67:B1
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer: /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial: 019A71B7BD33C58C7902298256118B6DA6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: PLz1LE/n374SWb89uI4oFY0BxT00uNihyvhNWJ4KzqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bd:33:c5:8c:79:02:29:82:56:11:8b:6d:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=b423a917e2db59f4310b8190e2af2ec8514467b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:d6:b0:38:bd:be:c0:8d:ed:59:c8:13:1c:
19:87:e3:28:ce:8d:d9:78:04:e8:16:09:2e:b4:75:
d0:07:a5:77:55:0c:26:7b:df:d8:b9:0c:52:70:56:
a8:bc:52:bc:0b:2d:48:80:41:c3:9a:d4:d9:04:ec:
dd:96:9c:f7:27:57:56:50:90:07:b7:8b:e9:4d:d5:
ae:a8:e6:32:90:09:6e:81:b0:95:81:83:7f:8e:1f:
8a:7e:05:71:45:b4:17:99:4d:23:85:77:88:ac:6a:
fd:13:67:86:fa:53:ec:9b:4c:35:3e:82:32:b6:c1:
b3:50:e2:6b:72:68:f8:2f:0c:9a:59:61:33:ee:cf:
51:2c:19:62:1c:28:cf:23:d2:0f:83:4d:0b:47:f6:
ce:37:af:a0:d2:de:de:85:97:e0:c8:79:fc:20:78:
f2:81:6e:3d:4e:d0:55:75:73:36:cc:d6:06:fa:76:
3f:e4:19:1a:82:4f:58:13:a3:db:e0:fe:1a:b8:88:
b5:28:e1:8c:41:c7:8b:d5:1d:83:6a:d8:25:ea:28:
37:d3:0b:97:89:0c:88:f1:87:3d:c5:3b:f0:fe:eb:
f3:b6:57:c5:0b:8d:c8:82:1e:eb:39:db:55:28:d9:
6e:c8:53:fb:39:42:d6:86:ba:a1:16:c9:d2:92:5e:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:A9:17:E2:DB:59:F4:31:0B:81:90:E2:AF:2E:C8:51:44:67:B1
X509v3 Authority Key Identifier:
keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:0f:1a:01:f3:15:bf:1d:5f:dd:1b:d8:b9:e8:58:14:0c:
45:81:98:2c:fe:35:33:4b:49:ca:2f:a1:87:0f:75:a8:db:36:
7e:91:95:91:f9:3a:42:63:f8:dd:77:b9:61:38:51:ba:32:ff:
0b:38:a1:78:3c:ee:95:dd:b4:d2:d5:d3:a0:93:f1:de:3b:20:
c5:fe:7d:b4:05:f9:3c:e2:d3:0d:d2:ba:f2:87:ba:98:39:8f:
42:55:39:06:a6:d3:f1:dc:54:d2:e5:39:56:c2:0c:37:aa:64:
6e:40:ce:82:5c:a8:3d:ce:c8:10:16:1b:59:0e:a4:dc:18:20:
7b:a5:1e:99:0f:a1:f7:87:d1:e7:e3:72:39:24:4f:75:63:84:
5c:ab:23:b8:27:d6:d8:02:26:1b:d0:4e:9e:64:7e:6a:72:37:
29:8f:34:a0:63:7c:e9:c2:1a:a8:9a:5e:f0:4b:45:62:f0:0b:
1a:10:e4:f8:06:5f:57:3c:8f:95:9d:fb:18:b7:c8:bf:af:c7:
f3:35:54:85:3d:9f:03:24:84:4b:37:54:3a:e9:6b:60:a2:a3:
75:dd:4b:8a:1b:55:22:68:04:d0:72:ea:e4:f3:66:36:6f:95:
a4:cd:4b:76:46:ec:f1:ec:a9:0f:a4:f7:9b:53:d8:ef:72:f4:
12:9a:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:03 2025 by rpki-client