Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File: MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier: nRStdsuTCAjmkWzvwGy+s6fkn9c3wek769KXYzQAh2s=
Subject key identifier: D0:DE:A1:A2:20:61:4C:CC:5F:6A:86:A9:0F:4A:1B:B5:F9:52:DB:58
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019A71B8001D608195C463592075448CC3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number: 0AF2
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: jGF3hau+PaaMbrfgbEtx9eRz72JtQ8YZY34eluh4Yms=)
2: mjst7aUax91GFptXcthnYyUXm5M.roa (hash: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=)
3: yVy6K3-_uaSKa1-_oqUp0tf_Xgk.roa (hash: 7YTmf2c9OYfpZTmIIrXdtXUx4tpHodV4viOENQQMD4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:00:1d:60:81:95:c4:63:59:20:75:44:8c:c3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=d0dea1a220614ccc5f6a86a90f4a1bb5f952db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:42:b1:61:7a:1c:23:fd:32:c8:4f:dd:80:
87:98:fc:fd:30:6d:13:d6:63:cf:22:a0:ff:c4:fd:
1b:04:38:1e:87:aa:2b:f9:85:0b:51:83:8d:0a:70:
f8:ad:5e:47:63:f2:f0:31:0a:7e:e6:85:d0:e1:b2:
b9:15:26:14:f3:52:40:42:c2:eb:90:6d:f8:b1:7e:
db:13:3e:2b:a1:9a:fd:fc:f7:eb:ac:c2:9e:9b:4a:
e5:78:23:dd:94:fb:3c:8f:cf:33:1d:2b:fa:00:7b:
e6:90:24:f6:e9:56:d0:6c:a8:8d:18:c6:19:56:73:
8f:76:d9:21:65:3d:33:ab:6d:7c:83:da:2b:2a:c3:
1c:ae:b9:5f:c5:44:bd:94:64:42:57:83:dc:3c:de:
d3:98:ea:6a:45:5f:26:78:c4:97:7d:91:45:d9:54:
8f:be:73:6d:f4:f8:28:f4:1b:e5:09:15:b0:0e:97:
87:49:3d:8c:54:3d:56:03:86:4a:a1:c7:f4:3d:ca:
71:05:61:ce:88:62:c9:19:45:d3:cb:a8:80:18:bd:
96:50:6f:e5:20:f7:7c:b3:bb:5f:95:16:aa:51:ef:
b8:68:e0:75:b3:1a:1b:ed:4f:12:96:b0:b3:8f:e9:
10:5b:a7:1b:ac:44:6e:31:3c:ea:ce:11:16:43:df:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:A1:A2:20:61:4C:CC:5F:6A:86:A9:0F:4A:1B:B5:F9:52:DB:58
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e1:26:50:f2:58:36:08:65:4c:61:1b:c1:78:9f:01:a1:a4:
f0:72:96:50:ee:47:5e:89:b9:17:34:79:0e:88:97:5d:ed:49:
f2:77:a9:7f:e5:28:00:75:81:a7:8a:38:55:04:bc:bc:e7:d2:
63:7e:a1:bf:06:9f:c1:b4:e6:98:15:07:d8:4b:fb:69:aa:2e:
2c:a2:0b:29:f5:ca:ef:4f:3d:64:8b:62:44:a2:b1:cf:2a:c2:
e1:e3:8e:43:7c:5c:ee:df:e7:34:7b:86:0e:37:cb:a8:89:bb:
32:d7:a6:3a:2d:9e:75:a7:d6:53:c6:d3:bd:06:72:8f:56:61:
58:9b:d2:e2:51:32:b0:b8:8a:8e:10:ba:46:38:90:16:2f:a7:
26:b3:03:75:ef:70:9a:73:a4:28:b1:21:38:cc:25:ff:9d:cd:
0a:06:a9:ee:69:16:fe:40:e5:04:ab:6c:9b:f0:ab:54:6a:cd:
bf:fd:d4:e1:1c:e2:86:40:0d:0c:fd:aa:e6:df:01:6d:b8:8e:
f3:23:cc:2f:0e:f0:9f:e1:18:89:06:96:ce:94:58:ff:6f:10:
86:ee:04:3f:95:c4:d5:46:29:cd:18:29:48:4a:e9:f5:65:d4:
1d:8c:13:b1:e2:0b:ee:e7:ac:3f:60:bc:6b:ef:d7:7c:16:10:
40:17:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:24 2025 by rpki-client