Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
File: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft (raw, json)
Hash identifier: VjhJB/3z7IFLiKDthzj8+tIPo3071hci56ARxZkzW+k=
Subject key identifier: 42:32:4A:A2:2D:92:F7:A0:4F:38:A1:DD:E0:D5:9F:54:CC:A1:95:07
Authority key identifier: 30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
Certificate issuer: /CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Certificate serial: 019916880EDDCD6C165B916B72B4CB3A1486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
Manifest number: 0FE1
Signing time: Thu 04 Sep 2025 21:00:39 +0000
Manifest this update: Thu 04 Sep 2025 21:00:39 +0000
Manifest next update: Fri 05 Sep 2025 21:00:39 +0000
Files and hashes: 1: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl (hash: HDVRBgfGpfseuoDr12Dn6ovu/1NAErhYKNoD9j+0Hpw=)
2: hfNN3XiVLhZTBEzmZ9kxsFWjtgU.roa (hash: rdvuWCnmeSdDSQrFfaBCbjsr2zsTzqKaLeEHczQ6fHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:0e:dd:cd:6c:16:5b:91:6b:72:b4:cb:3a:14:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Validity
Not Before: Sep 4 21:00:39 2025 GMT
Not After : Sep 5 21:00:39 2025 GMT
Subject: CN=42324aa22d92f7a04f38a1dde0d59f54cca19507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:86:79:44:8a:78:98:4b:01:2f:ea:c2:0e:
87:48:3b:b7:0d:a8:fd:81:23:99:08:86:26:0d:f1:
9a:42:1f:6b:e6:d8:0c:43:76:9d:e9:ce:7e:03:9e:
0d:b2:45:20:d7:65:d7:e8:67:fd:1f:5f:69:1d:b4:
05:0a:b2:b7:2f:43:07:73:b1:85:ed:34:a7:9c:27:
f6:db:c2:c3:26:86:cd:6e:ed:8c:18:ae:4d:b0:45:
0a:54:e7:56:60:d5:6f:76:be:c5:bc:54:78:61:f6:
8f:98:d5:33:20:12:a0:8f:f8:81:87:e2:0e:84:95:
34:ba:d0:51:ac:92:ed:cb:6d:36:cd:cf:42:f4:3e:
1e:c2:4f:0e:32:5f:77:29:48:b8:72:58:d1:1b:41:
72:39:14:6d:1b:7b:11:2e:1b:24:63:76:8f:9a:6e:
e3:7e:ff:ac:be:b9:15:4e:70:9f:bb:de:15:c8:48:
e7:21:5f:e6:9a:1b:b1:12:db:a9:d2:6b:1c:cd:c8:
88:a4:70:9f:89:b7:29:1f:88:62:c8:15:9e:26:d0:
03:92:f0:bd:86:6e:16:c4:6a:4b:b1:76:be:ac:bc:
6e:11:e8:a4:f3:da:03:09:d2:ba:25:56:fb:1a:19:
eb:87:3e:80:57:0f:81:a3:e0:a5:ee:03:90:2a:13:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:32:4A:A2:2D:92:F7:A0:4F:38:A1:DD:E0:D5:9F:54:CC:A1:95:07
X509v3 Authority Key Identifier:
keyid:30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:26:ab:85:f8:eb:45:dc:21:05:9c:e9:70:d5:3f:37:32:17:
f1:55:30:bd:6b:a5:55:7c:34:a8:0d:03:54:c9:dc:0b:4b:5c:
88:2f:a3:e9:4c:b7:fd:0f:ab:39:56:0f:31:14:54:a0:2a:06:
66:bd:40:4f:94:0a:aa:44:2d:32:19:ef:5f:11:77:3e:5d:e0:
00:fd:ef:6b:0a:a9:cb:02:f3:8f:bc:6d:eb:c5:07:04:aa:e9:
da:6b:cb:7b:e8:22:4f:9b:26:3c:a8:27:3f:c7:fa:79:fc:25:
27:8b:1b:ae:18:81:1f:0c:8f:e8:dd:ef:ac:33:cb:1c:c3:da:
2c:b4:ce:77:ba:9d:72:d9:4b:80:44:3b:b5:af:6e:92:1a:bf:
92:cd:b3:a4:fb:a2:c7:6c:54:c2:86:59:3f:41:84:56:2e:15:
7d:c4:7a:f4:13:11:6f:d9:db:89:27:ec:d9:4e:9e:c5:3b:cd:
dd:cc:95:f5:69:f6:e7:69:48:28:5f:a6:31:3e:22:47:d5:93:
e8:20:30:e8:a1:d4:50:ea:49:e7:0d:39:46:68:9c:38:a6:27:
d2:be:b9:32:ac:45:e7:ee:08:e6:b3:e4:c2:1b:63:1f:fa:16:
9d:cd:24:9b:c0:7b:7c:f6:2f:45:5c:b1:8d:c1:ed:b6:de:b1:
96:96:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:08:13 2025 by rpki-client