Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
File: MK7HNts6BEOzui_FtKQkWG-0zhU.mft (raw, json)
Hash identifier: naOU6/JovUniZaNe7HF6Kc+NGPM4/XEJ/Bh/2TIhDl8=
Subject key identifier: 2C:AD:14:A6:17:37:60:D8:F1:BC:86:73:7F:DA:6C:11:44:28:40:E8
Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
Certificate issuer: /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Certificate serial: 019A7180935C190610C8A84A91F116B4D7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
Manifest number: 39
Signing time: Tue 11 Nov 2025 06:00:42 +0000
Manifest this update: Tue 11 Nov 2025 06:00:42 +0000
Manifest next update: Wed 12 Nov 2025 06:00:42 +0000
Files and hashes: 1: 6H_HYtmg2UdJqU5MWI0lffy1dSc.roa (hash: AKgGfr6wkzXFXCjq2IfcxYtjAtEln9LUULf9VwKwDj8=)
2: MK7HNts6BEOzui_FtKQkWG-0zhU.crl (hash: VJaRo/CWcleDSIj9bLG7Dj6IIlHdUZV/y53aq7jB9ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:93:5c:19:06:10:c8:a8:4a:91:f1:16:b4:d7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Validity
Not Before: Nov 11 06:00:42 2025 GMT
Not After : Nov 12 06:00:42 2025 GMT
Subject: CN=2cad14a6173760d8f1bc86737fda6c11442840e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:02:17:80:23:a9:47:1d:7e:cc:58:48:32:
9f:fe:f7:4c:7a:03:1f:0a:f1:2c:b7:00:0d:d1:85:
c5:f3:25:15:03:fc:54:ba:83:ad:1b:50:be:f3:aa:
03:da:4b:54:70:b1:f3:b9:27:16:ec:64:4f:3f:e8:
32:2f:05:a2:11:59:97:5e:71:cf:8f:9f:d9:30:ab:
16:6c:02:53:9c:4e:97:ee:94:e1:43:83:1f:76:eb:
64:5c:a1:09:ea:b1:40:f1:8f:91:ed:31:b6:c2:ea:
a6:64:7c:be:b2:7e:d0:c0:6a:b2:c6:a4:41:89:ed:
b5:3c:53:b3:5f:d8:7c:5f:65:ae:ae:8f:d6:f3:71:
2f:98:09:45:98:8a:4e:cd:9d:f2:ab:b5:26:a9:b0:
19:0a:c6:3e:c8:0c:4d:45:f8:c9:f9:8f:ae:54:35:
17:76:90:ec:7b:5a:5e:84:ab:0f:db:ee:68:cd:43:
6a:66:00:8e:6b:3f:03:03:93:3f:b2:8d:2a:97:52:
72:7a:a9:1b:92:c1:0d:87:78:fc:aa:53:09:ed:3b:
df:01:b2:cd:ed:d5:96:7d:d2:33:8b:39:b5:d1:ce:
7f:50:64:24:f9:b0:6b:c6:05:de:de:34:0a:cf:69:
06:08:0c:db:13:2e:14:a5:d4:1c:40:21:04:b9:88:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:14:A6:17:37:60:D8:F1:BC:86:73:7F:DA:6C:11:44:28:40:E8
X509v3 Authority Key Identifier:
keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1e:fd:2e:49:1e:28:8e:18:a6:d4:d5:38:d3:11:1d:b9:00:
cb:8e:67:60:a3:bc:95:45:a2:8d:79:9f:57:91:94:75:0f:9a:
03:f2:d8:47:3f:36:f2:a8:83:99:77:0f:4f:35:31:aa:18:bd:
6e:f7:76:2c:71:95:b3:c0:0e:3d:37:6d:fd:94:23:ad:01:e2:
86:5a:76:e2:2f:0c:fc:df:2c:a1:32:6b:91:4d:39:e4:ec:9a:
04:31:83:fd:d6:72:37:bd:e8:7c:33:8d:b5:4b:97:b1:4d:55:
cb:db:33:3a:18:d5:4a:0b:bd:20:9e:de:3d:34:4a:5c:ba:58:
e5:fb:4f:f5:cf:56:ef:a4:89:2b:e2:77:8e:c6:21:5f:19:cd:
2f:5c:e7:01:6c:8c:cd:f0:ef:f0:27:14:f0:03:8f:a0:23:af:
80:10:70:86:2e:12:fe:e7:7b:d1:ad:51:e7:44:f5:a9:17:10:
98:89:46:10:a5:f4:4d:70:72:ab:89:9e:bd:e0:54:39:41:a0:
0e:7c:b9:6e:23:86:3d:b8:b0:99:a9:7b:d5:16:13:0d:b6:47:
12:43:40:d4:4c:88:8a:38:c5:19:b2:75:fc:97:d6:e0:05:7f:
18:38:32:a3:db:ea:10:99:dd:b0:0a:4b:9b:31:3c:09:d6:8d:
2d:1d:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:50 2025 by rpki-client