Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: tvVS7phJkHgbsHGtiwn3ZIh+K6ovvx3TALr+zFvwaAQ=
Subject key identifier: BF:EB:01:21:A4:16:2D:2D:29:D5:82:2B:F8:19:0A:AE:30:4A:C9:CB
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0198439A559208ACD6CD109DE3D941427EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 22:00:44 +0000
Manifest this update: Fri 25 Jul 2025 22:00:44 +0000
Manifest next update: Sat 26 Jul 2025 22:00:44 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: s04j6fgt8C22GmU+vA5DY2cum0Vhaut9KDnEEXSUyPY=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:55:92:08:ac:d6:cd:10:9d:e3:d9:41:42:7e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jul 25 22:00:44 2025 GMT
Not After : Jul 26 22:00:44 2025 GMT
Subject: CN=bfeb0121a4162d2d29d5822bf8190aae304ac9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:ae:5a:3b:a9:32:dd:8a:b5:f2:df:73:4f:
c8:63:f1:a8:09:de:72:66:d8:3e:74:2a:b0:1b:d2:
52:9e:bc:1a:cb:2a:80:d4:59:7a:7f:ff:34:73:4a:
4c:c8:f4:f5:cb:82:1e:73:2c:95:fa:80:f2:11:dd:
16:e9:67:87:a6:49:3f:33:08:e6:20:c6:d6:f2:8d:
c1:76:90:70:5b:b8:fa:a9:39:61:7f:56:25:47:4f:
cb:0b:72:63:65:1a:8c:07:6c:56:45:ed:df:31:2b:
df:44:fd:cf:29:0d:fb:84:b9:c1:5b:54:4a:89:30:
05:c7:ef:39:f5:e9:cd:51:13:7b:cf:f0:19:88:b9:
a9:f3:ae:f3:0b:65:c5:43:12:c9:0f:fe:55:26:a1:
4d:81:93:9b:fe:40:6e:fc:8e:dd:b1:7f:9c:d3:cb:
b3:d2:d2:08:ad:7b:96:86:33:ba:83:94:01:ea:48:
83:40:dd:2a:76:cd:b1:21:ca:21:de:93:b5:91:33:
8d:88:48:97:ec:bd:bc:6c:f5:6a:cd:da:0a:c9:85:
f5:6d:c8:7f:d9:eb:31:69:b8:e0:f5:da:f3:59:7f:
34:23:d8:a2:69:15:b0:a7:f1:71:19:1b:db:8d:d9:
08:16:3c:ed:44:5c:80:13:a4:a5:76:1b:0a:17:ad:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:01:21:A4:16:2D:2D:29:D5:82:2B:F8:19:0A:AE:30:4A:C9:CB
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a2:7b:89:19:91:d5:63:7f:2e:67:fe:f7:4f:ba:e8:ed:70:
89:8b:75:c0:de:02:74:7f:13:cf:dc:23:37:81:c0:75:12:e3:
7a:82:03:dc:d8:e7:73:57:e2:21:53:12:23:71:e0:09:95:83:
70:d8:64:44:6a:3e:fa:88:9b:06:01:bc:c8:d0:28:a3:34:46:
bd:3f:23:4d:8f:37:f9:74:e5:51:f7:cf:88:23:9d:05:0c:fb:
2c:81:d5:0f:cb:3b:d0:dd:64:2b:62:1a:bc:cf:f6:0d:51:78:
4a:63:89:a9:38:1f:ff:b0:08:12:74:c6:6b:24:a4:75:f5:04:
48:46:52:3e:2e:bd:58:03:47:f1:cd:eb:27:bd:e3:11:09:08:
5a:d0:2a:91:2a:04:c8:96:9e:54:dc:07:9b:d3:6a:64:c6:41:
0c:b2:ce:3a:71:88:77:3a:b5:8b:7b:c9:b2:7c:66:bc:17:87:
ab:91:b4:44:84:36:83:45:6e:46:7a:b8:c7:1c:e7:03:ad:70:
7f:f8:16:db:a7:2c:7c:61:80:f9:e3:b1:d0:c6:f7:f9:a9:9f:
5a:cc:78:f4:50:49:3e:36:67:62:bf:91:ac:08:d7:88:c7:37:
0a:15:b0:7f:71:9a:8a:88:f6:e9:8e:5f:2a:38:c9:77:18:0f:
56:6c:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:35 2025 by rpki-client