
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: sp2sC4hNv5sOKHYfGREApNVf1g3J2OEvMN/2vLfLyZw=
Subject key identifier: 34:14:9C:14:50:B9:59:FC:F0:68:A8:05:06:80:F4:AD:7E:2C:68:CD
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019922FA71F98A73E7133D692BAE32A4C340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:01:02 +0000
Manifest this update: Sun 07 Sep 2025 07:01:02 +0000
Manifest next update: Mon 08 Sep 2025 07:01:02 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: jCD1nlmkOuJR69y/vtEGo2zVO+X3FOuc0lvjEmFviDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:71:f9:8a:73:e7:13:3d:69:2b:ae:32:a4:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Sep 7 07:01:02 2025 GMT
Not After : Sep 8 07:01:02 2025 GMT
Subject: CN=34149c1450b959fcf068a8050680f4ad7e2c68cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:2d:6e:57:c2:d0:aa:69:fe:50:d9:aa:06:
07:78:ac:83:65:9d:84:33:0c:8f:ba:d8:cd:99:ff:
16:64:22:58:45:0c:b1:cd:e9:42:60:ed:e8:2a:30:
5d:bb:85:bc:99:b5:10:8e:9e:8e:d4:67:f9:16:74:
92:97:77:3f:b5:25:f5:00:92:73:9f:c8:c1:e1:1f:
2c:33:9b:35:65:6a:8d:62:82:95:03:44:d7:bd:cb:
11:30:cb:c7:8a:a2:63:24:44:e1:53:de:e4:01:83:
39:de:74:75:7e:ab:87:50:fa:2e:fd:82:d6:1a:01:
0c:91:b6:21:0a:f0:a7:4a:19:59:55:d7:c8:66:d2:
e9:fa:f2:cb:17:dd:09:bb:d8:cf:fc:05:a5:8b:6c:
f3:6a:24:e6:4c:a2:2d:e2:5f:1c:81:8a:51:ca:77:
6a:13:b3:86:16:86:e4:d1:a6:be:51:f2:0c:11:8e:
f2:4f:1a:10:a1:c2:cd:28:a1:22:ec:d0:ce:57:3f:
1b:72:43:8a:27:e9:04:61:81:b2:82:b6:6c:18:8b:
e3:2d:bd:25:67:92:3c:22:74:b0:e4:e0:96:f3:6a:
2b:98:7f:87:1d:4e:3d:6b:19:d3:90:a2:be:c2:fc:
a5:47:b8:42:65:ef:b0:71:a5:f5:03:05:17:9f:29:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:9C:14:50:B9:59:FC:F0:68:A8:05:06:80:F4:AD:7E:2C:68:CD
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:34:a4:54:b2:1c:f2:64:8c:1d:10:b9:42:3f:db:b0:ce:92:
f8:e1:bf:9b:a6:42:40:96:36:fe:41:d9:46:45:11:be:9c:92:
e5:17:a0:fd:b9:29:09:10:ce:e7:9c:74:b8:5c:1d:dc:95:a4:
26:73:72:94:28:74:de:be:d8:3e:d0:22:83:88:4b:62:f4:c0:
db:32:0b:fd:a3:f7:31:99:e2:58:0b:0c:46:40:ed:d3:f8:41:
7c:c7:80:c1:e9:b8:9b:b0:3b:a5:9e:75:31:22:ab:bd:ff:91:
03:f8:0c:16:c1:0c:83:a8:7d:af:c5:c2:3f:60:5f:f1:95:0b:
b2:29:11:88:1b:c5:2e:8a:a5:c2:a3:a5:5c:af:31:c9:83:2e:
6c:cb:49:96:c3:2a:0b:95:cc:2d:17:50:58:ec:c9:81:99:8a:
7c:3c:c3:89:5a:c6:65:d6:7b:78:0a:e4:ff:c7:c8:a8:4c:e5:
24:4d:02:81:27:f6:e8:51:b5:53:f3:6d:d9:76:10:ff:78:b1:
b6:75:b5:c1:36:0f:4b:7f:08:e3:53:48:46:fb:35:a5:0d:f1:
2d:6a:66:1d:c2:0d:f0:21:0b:61:55:09:df:79:0b:98:70:0d:
fe:fb:5f:cf:01:14:5f:d3:55:78:d6:c3:90:93:70:2d:d6:4b:
74:1c:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:44:06 2025 by rpki-client