Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File: MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier: n3z0b4CcgIdx22RINbJVj/ERXjEhqz2UtxVZdrVGc1c=
Subject key identifier: CC:B0:CF:12:18:62:16:48:12:03:D9:06:A9:6E:B2:26:CC:71:C6:AE
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial: 01984A40DFA85797B8FD38101690FF7E2FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:22 +0000
Manifest this update: Sun 27 Jul 2025 05:00:22 +0000
Manifest next update: Mon 28 Jul 2025 05:00:22 +0000
Files and hashes: 1: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: T6zgamUr+5AWdpLxFE5co+Za7LyEWbkCAxCZABOKDFI=)
2: sQzmhjMqbnYxePAUvm9cNK1Tjw4.roa (hash: tJJ1LdtYmxN6Mm4HIKko/zr0MUnt+0ElprJSwioZ+lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:df:a8:57:97:b8:fd:38:10:16:90:ff:7e:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Validity
Not Before: Jul 27 05:00:22 2025 GMT
Not After : Jul 28 05:00:22 2025 GMT
Subject: CN=ccb0cf12186216481203d906a96eb226cc71c6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:f2:50:49:4a:19:6e:6d:22:8c:45:5f:4d:
90:e2:45:c3:9d:69:6b:d0:97:f6:b1:d4:d3:1f:89:
55:56:73:48:0f:7f:ae:80:f4:c7:57:13:03:83:65:
69:fc:f2:69:3f:d4:05:47:4c:32:7c:6f:dc:b9:97:
96:5d:fa:33:3c:c5:14:ff:a9:85:48:88:49:01:c3:
fa:0c:18:27:8f:46:98:67:0f:b4:f7:97:01:07:a4:
d3:f2:98:6e:74:13:86:f4:de:f7:6e:0a:9a:9b:07:
ef:bf:7a:2d:72:9f:36:2a:44:85:e2:5d:e1:43:43:
47:b4:22:4d:04:3b:8e:7b:cd:82:e7:aa:ee:d8:aa:
08:e6:58:63:80:b7:22:96:f5:27:e1:72:11:ca:e3:
bf:19:bc:fb:32:48:85:b5:7a:e8:98:7c:c2:69:b9:
06:ce:7f:f2:d4:e5:05:a3:fd:f7:55:6f:46:74:17:
28:51:01:a9:ef:9f:4a:17:e7:84:91:da:17:1e:30:
32:58:72:8a:3b:0a:57:d5:a6:3a:58:7b:21:48:60:
45:38:f0:b0:58:a0:15:ae:ef:b7:7b:57:fe:e7:ec:
31:61:75:bc:76:12:6b:b5:50:a3:c4:c7:03:9d:24:
17:15:ab:61:be:f5:e1:ae:06:30:d1:56:42:4d:be:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B0:CF:12:18:62:16:48:12:03:D9:06:A9:6E:B2:26:CC:71:C6:AE
X509v3 Authority Key Identifier:
keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a2:a9:9f:ea:a4:f1:bb:d7:dd:72:10:3c:79:2c:c7:4f:fd:
32:c7:f5:d2:c2:6d:f6:58:7a:28:b7:3f:82:2d:d8:e2:5c:de:
ca:4f:d7:59:c8:f1:ca:82:f8:38:8a:f4:08:fd:c1:79:fb:1a:
f1:48:fb:4e:eb:28:26:ba:41:bf:1e:42:21:02:37:12:1c:a9:
89:5f:e9:5e:e4:58:fd:4b:70:ee:f2:4b:cb:2c:78:b3:4a:b6:
bd:4b:08:11:e2:41:dd:b4:09:d7:b1:d1:12:99:ff:a0:ae:73:
74:17:54:9e:43:35:09:ae:98:31:71:0f:50:9f:fe:44:75:97:
99:f8:34:f5:7b:0b:f2:24:64:3d:06:f7:51:9d:fe:73:ca:3d:
4e:39:4c:47:db:4b:0d:05:1f:88:ba:f6:d1:0c:da:f2:ff:1a:
75:df:21:6d:75:b6:c0:3f:13:6a:67:00:cf:84:29:c1:62:cf:
51:dd:a0:ea:4f:ee:a1:a0:63:de:ae:f1:9e:9f:3a:76:9d:50:
74:96:06:67:a3:b8:63:77:64:ba:c9:6f:2b:85:de:f3:73:8d:
ca:a2:ae:ce:5d:81:4c:54:c2:71:e8:34:4c:8d:89:94:76:6c:
23:f5:45:18:cc:f4:5c:87:5b:98:63:14:2c:f5:cd:9c:d7:3d:
ad:ff:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:45:54 2025 by rpki-client