Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier: T9ASfB4lLHNSAmqJnVIrkvXi1DdawelkQhVCm/rhB6k=
Subject key identifier: 8A:58:5F:E1:6F:5C:50:1E:E9:AE:AC:44:B8:CD:44:63:F4:71:53:E8
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 019A251CF5A738B792E2E1F04FBBCACC2C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number: 0422
Signing time: Mon 27 Oct 2025 10:00:46 +0000
Manifest this update: Mon 27 Oct 2025 10:00:46 +0000
Manifest next update: Tue 28 Oct 2025 10:00:46 +0000
Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: U9gfJjc7Ily1uTGzkl5HHdbQ6JrhAhwmW6crzvxxX+U=)
2: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (hash: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:f5:a7:38:b7:92:e2:e1:f0:4f:bb:ca:cc:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Oct 27 10:00:46 2025 GMT
Not After : Oct 28 10:00:46 2025 GMT
Subject: CN=8a585fe16f5c501ee9aeac44b8cd4463f47153e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:7a:5f:86:75:c7:1c:98:3a:4d:70:00:82:
05:3c:f4:26:b5:9c:f9:ff:48:21:8f:ab:70:2a:38:
50:78:c0:00:ea:a1:38:8c:4f:77:73:b2:2e:42:76:
c2:d4:78:15:29:fa:ee:3d:2f:a5:76:c1:f6:38:2e:
fc:e6:31:ee:3c:9d:db:e2:89:72:68:7c:1f:21:39:
eb:27:05:e1:b3:96:92:bb:81:1a:f9:3d:60:c9:48:
43:20:e6:db:f5:f1:75:7b:30:d9:2b:a8:b8:f6:e6:
c7:bb:42:ce:82:da:dc:b6:fc:0f:9d:47:20:2b:6e:
9f:3f:0a:bd:42:be:32:a0:f2:5d:37:83:8d:ca:23:
c1:ab:5f:48:10:12:e7:d6:7b:3b:16:0f:93:82:30:
be:87:fd:f1:fe:3e:c1:b2:b5:e7:62:75:42:61:77:
7c:3a:4f:75:ca:92:f4:6d:11:d1:71:a3:66:85:55:
54:0e:f8:6b:6e:cc:cc:9f:86:de:3f:78:ab:5a:fe:
8a:09:bf:55:60:d1:2f:26:62:da:9a:4c:a5:3c:7d:
d5:1e:15:24:41:e6:c4:b4:85:57:03:57:ba:f5:a6:
de:04:cd:dc:c2:0c:6f:15:e0:f0:2e:b7:ed:94:7e:
13:1d:06:2e:3b:d5:cb:bd:dd:f2:de:21:4a:ba:78:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:5F:E1:6F:5C:50:1E:E9:AE:AC:44:B8:CD:44:63:F4:71:53:E8
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:77:66:c7:d1:2b:97:9f:21:9e:ce:bd:bd:e1:d1:83:80:b3:
4e:a6:21:1e:6e:e0:8c:c4:c6:1a:8e:a9:cb:08:3a:67:8a:cf:
fa:36:d9:f2:c0:1b:36:c0:50:e4:de:2c:c4:a8:18:b4:87:27:
28:35:f0:67:84:39:95:04:4e:be:dd:e4:32:42:81:03:37:90:
d1:23:07:ba:b8:ae:56:37:18:05:23:8b:a2:09:4a:9a:b2:ae:
3e:cc:ff:72:e7:ac:90:66:45:66:95:88:d8:df:85:86:01:56:
88:2d:9e:39:cd:2f:9c:a4:c2:2a:fc:6d:06:40:fa:74:13:a6:
87:24:d3:6d:64:8e:07:32:a3:97:1a:40:69:54:3a:ed:fb:15:
88:f4:7e:d2:58:1c:71:79:83:49:02:6b:69:9a:db:d3:be:a6:
d1:df:4c:be:3e:8b:8d:f3:c6:0f:ce:38:17:1a:f0:7a:0e:10:
ad:fa:c1:08:97:d9:10:43:b4:c1:74:92:17:c0:e2:1a:4f:e7:
ef:e0:0a:c6:5a:1c:b9:99:2a:88:bf:6c:b7:61:8c:3f:32:a4:
c8:b1:4b:3b:b5:c3:93:46:28:32:3d:23:c7:71:5d:c6:d7:b3:
ee:22:a5:dc:5b:63:c4:65:20:75:4c:0d:9c:ca:0b:45:4a:10:
15:46:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:08:16 2025 by rpki-client