Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
File: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft (raw, json)
Hash identifier: vvD3tEmQ7wYWJ0C2VxX/+P3OMcvc0kP+r1gj62cSMK4=
Subject key identifier: 5E:CC:0F:8B:AE:AD:C8:67:25:D2:FA:93:58:B7:B3:B5:9B:97:22:43
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019A711304E6D069FD4F3A8AA04DA19D87F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:01:03 +0000
Manifest this update: Tue 11 Nov 2025 04:01:03 +0000
Manifest next update: Wed 12 Nov 2025 04:01:03 +0000
Files and hashes: 1: MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl (hash: kXoQdsOLze7PMpnL9M8FzAXSnBlqpW7aGlaro9WXZ0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:04:e6:d0:69:fd:4f:3a:8a:a0:4d:a1:9d:87:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Nov 11 04:01:03 2025 GMT
Not After : Nov 12 04:01:03 2025 GMT
Subject: CN=5ecc0f8baeadc86725d2fa9358b7b3b59b972243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:3b:0e:38:ef:e8:62:d1:a0:ee:ab:48:ea:
4e:fd:ad:5d:67:ad:2d:7f:48:cf:82:3d:15:d9:a6:
10:83:23:ed:29:c9:bd:b1:97:ce:0a:c7:57:2d:04:
a1:e8:26:29:83:5e:f7:48:07:08:aa:80:61:99:29:
85:58:95:87:ed:2c:d1:e9:d4:fc:87:de:7a:f4:70:
65:e6:44:bc:3b:33:f3:be:fe:e7:ad:41:80:8c:aa:
af:84:d7:29:07:e0:71:2f:34:06:60:22:1f:e9:f7:
e2:47:2a:f3:8e:3c:c9:50:36:66:5f:ad:de:2a:89:
68:b4:df:f7:29:69:fc:2e:d0:13:fb:09:8a:e3:6b:
f5:9c:99:c8:23:cd:aa:d6:43:8b:68:d3:a2:7c:0b:
7a:7a:a3:02:62:fd:3a:6f:de:1c:66:24:ad:7b:30:
e2:b7:47:f3:07:f2:58:e5:8d:5a:7b:12:35:2f:e6:
3f:cd:d9:e5:11:53:df:a8:40:b5:46:de:83:ca:d0:
a8:83:32:be:43:e3:3b:56:92:db:0c:12:37:dd:7a:
56:a8:fa:81:b7:d6:9b:84:77:a5:68:4b:b1:6a:76:
6a:f2:d8:71:f9:6a:6e:b7:de:d0:df:e3:ca:a7:64:
33:d1:5b:b1:fe:26:4e:38:c4:f1:f6:4c:ea:29:ad:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:0F:8B:AE:AD:C8:67:25:D2:FA:93:58:B7:B3:B5:9B:97:22:43
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:00:b2:b6:b4:08:6e:62:25:84:13:91:a6:a2:8d:5c:86:89:
df:4b:9e:78:bf:99:64:14:38:fd:77:15:f3:9c:f0:5b:84:82:
44:78:7a:c1:a6:18:cd:eb:81:0a:63:0c:2f:07:6a:e8:5b:2f:
48:f5:9f:de:aa:53:34:dc:2d:a3:39:ac:a3:e8:90:7e:2d:12:
5b:e6:f5:a4:7c:4e:84:8f:33:64:9e:b1:b6:19:5d:7e:2f:94:
b1:ab:29:c4:8e:d7:3e:cd:61:bb:d1:4d:19:a0:14:f3:d5:51:
a6:65:bb:93:48:ac:40:b5:82:16:34:39:f9:f9:7a:6b:4a:c0:
d3:8f:18:54:ad:52:ad:4f:e6:6d:10:7b:89:81:44:35:2b:6c:
cf:1d:0a:2d:7d:65:eb:7f:67:fc:c6:82:04:4a:91:6f:76:96:
59:aa:39:94:c4:06:53:b6:a0:54:1c:76:69:aa:e3:91:42:c5:
97:72:c5:25:b2:a1:60:e0:81:70:1f:e6:30:45:e1:13:cf:ff:
a2:7c:d9:61:f5:81:7c:31:db:8f:3c:ea:8a:d9:a7:ed:ca:34:
7d:72:3e:43:07:05:99:85:23:27:f3:90:cb:8b:dc:3a:35:93:
0c:52:24:e8:88:8b:b2:6a:12:d7:75:99:b7:74:b0:41:14:8a:
8e:20:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:29 2025 by rpki-client