Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: u2CHmL18j24kxN4XAwEjUz23aP08EPyHR3//oUSvJJs=
Subject key identifier: F4:14:BE:EA:3C:B0:88:39:41:C5:F7:D1:69:A5:9A:C2:80:9B:23:2C
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 019A247863FBFDF722533E7855EE2F89C2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0DDD
Signing time: Mon 27 Oct 2025 07:01:00 +0000
Manifest this update: Mon 27 Oct 2025 07:01:00 +0000
Manifest next update: Tue 28 Oct 2025 07:01:00 +0000
Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: 8vDy7/icwZ52keuNjL9GtlDKn2VeabqHGXj04EhqVQ8=)
2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:63:fb:fd:f7:22:53:3e:78:55:ee:2f:89:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Oct 27 07:01:00 2025 GMT
Not After : Oct 28 07:01:00 2025 GMT
Subject: CN=f414beea3cb0883941c5f7d169a59ac2809b232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:70:7f:7f:83:2b:63:19:da:c9:2f:b4:9c:
01:f4:92:9f:c2:59:84:c2:2d:b3:40:ed:d8:2c:71:
88:a4:77:c3:ac:bd:76:3c:45:16:99:54:bf:61:13:
e2:7b:d7:f6:fc:da:8f:70:67:a8:32:eb:e5:bc:cf:
d6:51:0c:f9:fc:ee:f4:0c:05:ea:c1:ce:03:bc:0d:
7b:dc:2a:f8:f8:7f:46:e5:3a:c8:4e:fb:6e:65:57:
67:6a:ec:d7:95:82:50:64:13:36:d8:fa:e4:50:cb:
4a:fd:da:b7:59:ef:52:ab:ea:b2:84:ac:81:c1:51:
63:82:8a:b9:a6:9a:e2:33:ac:03:50:a1:84:92:39:
38:02:c7:aa:09:6c:a7:ae:cc:bd:33:5e:7f:a1:12:
19:2f:51:97:16:8a:44:da:75:59:63:3d:ba:d0:be:
ee:57:c8:03:e7:1a:d6:7b:4a:ba:c0:71:cc:c8:79:
be:78:0c:bc:26:52:cb:22:7b:db:3a:5e:b3:2a:9f:
e6:5d:66:3a:44:59:f0:3e:99:ad:cf:f1:87:7b:ba:
82:2b:65:0f:10:8e:77:fd:a0:cb:1f:90:53:dc:22:
a0:f7:ab:ac:bf:e4:c4:27:26:b9:30:e5:34:d6:c8:
50:d5:8d:c5:cb:3b:a2:e4:62:5d:e6:e5:70:76:04:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:14:BE:EA:3C:B0:88:39:41:C5:F7:D1:69:A5:9A:C2:80:9B:23:2C
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:70:6e:94:25:c3:17:fd:ae:a1:06:b8:47:9e:ad:cd:89:82:
e4:2a:0b:c6:b6:ec:30:09:a9:6a:f6:1a:44:9a:31:8f:4d:7f:
3e:9a:7b:ce:e6:c6:c1:d7:44:08:08:ac:0f:f5:4f:6d:db:b8:
f2:b3:80:4d:15:16:dd:6c:ac:e8:7c:07:46:ff:6e:8f:2b:fe:
a3:d5:86:6b:14:b0:39:e2:46:9c:e7:eb:17:0a:ab:88:a8:bc:
cf:98:7c:ea:00:e5:72:b0:aa:a2:ee:af:e9:cf:92:44:51:5b:
2e:31:a4:8d:4f:52:c1:86:1e:18:2e:c3:6e:b5:05:13:2a:93:
d6:14:c2:aa:2c:ad:3c:c8:b0:b5:c7:e6:da:8e:27:3a:a8:c7:
ac:16:99:b5:a0:a4:20:88:3f:3b:e1:c1:15:92:21:38:45:e7:
01:e7:df:c1:a7:98:a3:ec:65:ae:61:63:54:8a:cf:49:5a:0a:
0b:4f:f0:dc:23:d4:50:7f:22:14:5c:c2:43:90:e3:9a:8f:14:
c0:34:a0:6f:00:c7:c1:73:83:4e:c5:1d:c3:b0:49:f5:1c:3b:
0b:8d:9d:fe:74:22:de:eb:86:4b:21:88:ee:bf:fa:cc:cc:21:
6c:48:d6:dd:5d:6b:12:2d:db:c5:9f:8a:e8:4f:d5:3a:e8:ae:
93:4e:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:37 2025 by rpki-client