Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier: sACr3dPAFAB2lL+0V5MAuO78u8BKE6u3ODeu93mRcTI=
Subject key identifier: 88:7C:A9:5A:9F:CA:60:D6:F3:02:D6:AD:7E:E1:2B:EB:D7:89:79:EB
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 01993794B6FD57CF5FD20199C7962B3D0A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number: 03A7
Signing time: Thu 11 Sep 2025 07:01:57 +0000
Manifest this update: Thu 11 Sep 2025 07:01:57 +0000
Manifest next update: Fri 12 Sep 2025 07:01:57 +0000
Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: BSumCtctZu0oQlcFOOXZr9z1NVrT6Dya6onzR8lFiEg=)
2: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (hash: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:b6:fd:57:cf:5f:d2:01:99:c7:96:2b:3d:0a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Sep 11 07:01:57 2025 GMT
Not After : Sep 12 07:01:57 2025 GMT
Subject: CN=887ca95a9fca60d6f302d6ad7ee12bebd78979eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:b0:60:4e:00:1f:db:48:cc:7a:d7:f5:74:
35:ee:72:e2:5e:62:7d:a7:41:39:02:ae:15:37:24:
c6:d4:16:83:76:ec:2e:07:36:a0:7e:ac:e1:e5:a2:
c8:d8:f6:bc:dd:76:33:bd:14:14:20:1d:62:4b:26:
6f:56:a2:f2:e4:6a:c1:4c:83:10:8e:1b:9e:a1:02:
00:f2:e4:71:4b:0f:5f:f0:69:d2:1f:b8:f0:cc:57:
98:d5:c2:b8:9b:63:46:87:f8:65:44:d1:dc:83:b9:
ec:65:a1:a0:45:30:94:2e:70:2b:61:92:49:00:5c:
4b:3b:0f:37:f1:da:cd:28:d1:0f:a8:aa:3c:0d:2b:
a9:f6:df:e3:8d:18:8f:46:aa:d3:ce:af:af:5b:6a:
09:64:82:b5:eb:f0:e5:20:51:af:d7:a3:e6:88:05:
c2:65:98:3b:b0:ec:5b:70:93:01:98:48:af:08:a5:
3c:21:12:88:af:e5:95:61:11:4e:30:7d:d4:13:cb:
ca:ed:59:c6:19:ef:f6:f0:2e:61:a5:a9:c2:fc:31:
07:b3:a7:04:60:d8:42:ae:0d:56:06:0a:14:f9:a8:
0e:41:62:af:74:4f:f7:78:79:e0:64:21:4a:97:d5:
10:24:be:1d:4e:04:8f:df:ce:b8:9b:d4:9b:72:db:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7C:A9:5A:9F:CA:60:D6:F3:02:D6:AD:7E:E1:2B:EB:D7:89:79:EB
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:95:ab:8f:91:e6:fd:8c:e2:44:f2:82:0e:e4:97:4a:f2:9f:
25:21:98:fa:39:82:aa:fc:5b:ba:98:0a:9d:f7:ab:02:3a:8b:
21:38:91:fb:14:ed:bb:ef:82:5a:50:b6:54:f4:ed:88:23:1c:
47:75:f8:9e:19:fe:bb:43:1c:3d:74:70:82:d2:bf:2c:2f:21:
ce:0b:38:45:d7:a3:3c:f0:20:27:7f:70:dd:2c:93:bf:28:b5:
85:b8:3c:b9:3f:14:34:98:b1:1f:c9:27:fb:b0:84:f2:05:fa:
67:08:a4:06:2e:c9:4a:bc:bd:28:06:12:93:1e:03:52:da:8a:
11:67:dd:2e:2d:52:ae:fe:cf:06:ff:b4:6f:48:e1:b7:6f:12:
6d:08:72:eb:e3:1e:df:05:f7:03:a4:42:20:a5:07:9d:ce:d9:
ed:51:07:f2:f3:58:22:67:2a:af:4f:7d:4d:2e:09:7c:2c:bb:
ef:5c:81:b3:9f:29:4a:e5:b4:22:a6:6d:da:0c:a5:db:11:c2:
cd:e8:a3:9c:04:14:c4:18:b9:da:f7:1a:39:10:ce:7a:7f:2f:
40:e6:a9:10:77:1d:8c:97:91:b0:fa:91:1b:cc:9c:ab:ab:8c:
a2:01:07:65:04:f4:9a:a7:94:9c:3a:e1:13:f4:29:e8:14:e0:
bb:77:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:49:40 2025 by rpki-client