Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json)
Hash identifier: SkW8Gf5nUKMpjDPHclB3UaCs4fYHQLLx72VxCIWysdw=
Subject key identifier: 00:E8:7B:F9:42:BB:20:95:B4:5C:5F:CD:03:03:4B:BE:49:62:8C:CB
Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Certificate serial: 019A2855D4DB3D3888577A535E7F09ED2D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
Manifest number: 0663
Signing time: Tue 28 Oct 2025 01:01:44 +0000
Manifest this update: Tue 28 Oct 2025 01:01:44 +0000
Manifest next update: Wed 29 Oct 2025 01:01:44 +0000
Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: J9TuIVoNfIR/rNB5srjunuHq8bzuMdWZM/Btn51qX6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:d4:db:3d:38:88:57:7a:53:5e:7f:09:ed:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1
Validity
Not Before: Oct 28 01:01:44 2025 GMT
Not After : Oct 29 01:01:44 2025 GMT
Subject: CN=00e87bf942bb2095b45c5fcd03034bbe49628ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:d8:18:7b:99:dc:67:ca:0c:a2:67:20:49:
13:f1:52:50:70:a7:f9:23:17:5d:3b:09:d4:f1:5a:
1b:b6:d1:b1:18:2c:fb:bf:ba:09:72:c0:f0:81:47:
2e:f0:09:3b:8a:2e:d7:dc:21:b5:3c:1e:84:71:3b:
57:b7:c0:bb:c4:00:51:25:c7:5a:a6:09:cb:c2:ee:
7e:cf:0f:1d:6d:43:59:81:5a:07:a2:ad:d0:28:e2:
40:55:ac:29:6b:10:3b:72:00:4c:93:43:75:9e:5c:
b2:cf:28:dc:59:53:86:f4:f7:b4:aa:c6:fe:e2:89:
6d:85:01:4a:c5:81:d0:c5:17:4e:93:5e:cf:17:bf:
f4:d7:c2:e9:86:de:88:c7:ef:2c:8f:6d:92:69:99:
cd:2a:67:29:93:5e:2b:1e:1c:bc:41:af:00:0a:3f:
29:a4:d0:71:f3:04:1a:be:87:2f:68:20:e4:53:96:
af:94:80:46:f2:19:52:16:86:0f:bf:d7:a2:4d:11:
8f:9b:8a:a5:03:36:20:e2:70:fa:c8:14:80:7d:90:
86:73:c0:0e:7a:53:1a:55:51:b1:e0:8f:c5:57:5a:
f0:15:1b:66:d6:3d:59:ad:20:12:10:99:d1:2c:0c:
9c:af:cc:c3:c9:d4:dc:27:ea:19:e3:d1:d6:5d:64:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:7B:F9:42:BB:20:95:B4:5C:5F:CD:03:03:4B:BE:49:62:8C:CB
X509v3 Authority Key Identifier:
keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:36:15:a3:32:85:3c:a3:b8:b3:10:53:32:a1:1d:26:64:3c:
9a:35:f4:59:7d:88:c9:6b:13:94:5a:7d:2d:93:5b:74:a0:fe:
3c:0a:8b:97:93:7b:0b:1e:af:fb:66:93:a4:4c:a5:21:bb:04:
0d:23:4a:d2:ff:fb:59:b5:16:ef:b1:d7:68:f3:92:94:5c:77:
86:a0:f9:46:8a:89:9f:16:f5:48:ee:99:b3:8c:80:10:0d:8d:
85:e1:ec:53:aa:18:71:cf:42:a9:c8:6b:3b:4c:3d:7e:73:38:
a7:63:58:e1:94:06:0b:60:1b:ed:47:bf:1c:ae:68:c5:12:96:
4a:b6:7f:5e:93:22:a4:49:df:dc:74:a4:d2:f2:a2:5c:68:90:
5a:6b:10:23:a8:19:90:ed:3b:d4:83:c2:43:e9:21:09:fd:a0:
2e:06:18:64:99:e2:29:7a:c7:79:de:8c:55:04:b1:b1:d5:6a:
b6:72:aa:bc:af:41:9c:96:01:f4:74:5b:04:4f:b4:26:50:a1:
85:b2:86:1f:b3:50:5a:6c:ed:1a:cb:9b:47:b7:6b:a2:6d:bd:
9d:bc:1e:a7:4a:d5:43:62:40:b3:97:da:1f:9a:16:57:cd:2c:
0d:23:19:28:2d:0f:d5:76:62:15:b2:af:9f:ba:07:a9:5c:59:
5c:ea:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:45:18 2025 by rpki-client