Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File: MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier: UA5SxSCWftis3ym/FCa0PdoVvr8JUzmkV+cp9FSdWfM=
Subject key identifier: 65:D1:43:96:99:0C:81:0A:0C:8A:A2:B2:F8:E1:5D:DE:EF:C8:48:81
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial: 019A70A5631F73DFAB5C7EAAB4E4AE11A590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 02:01:18 +0000
Manifest this update: Tue 11 Nov 2025 02:01:18 +0000
Manifest next update: Wed 12 Nov 2025 02:01:18 +0000
Files and hashes: 1: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: cLlSb2qqIC0CkEr5rcXP9Shcp3XD77Jq7pYS/bdpnyc=)
2: sQzmhjMqbnYxePAUvm9cNK1Tjw4.roa (hash: tJJ1LdtYmxN6Mm4HIKko/zr0MUnt+0ElprJSwioZ+lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:63:1f:73:df:ab:5c:7e:aa:b4:e4:ae:11:a5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Validity
Not Before: Nov 11 02:01:18 2025 GMT
Not After : Nov 12 02:01:18 2025 GMT
Subject: CN=65d14396990c810a0c8aa2b2f8e15ddeefc84881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:12:e0:81:eb:49:ca:89:16:f8:3e:84:22:
f0:a6:1c:5a:98:34:49:8d:20:ad:d0:a0:9b:a8:f0:
d1:73:0d:c0:36:ee:1b:4e:4a:1d:03:7d:51:43:3e:
54:64:ad:e1:86:7b:50:a3:11:9c:de:23:ce:2b:b6:
61:52:e1:f8:e9:0c:da:9e:6f:64:04:d5:ff:ac:c9:
fa:8a:3e:5d:da:ed:61:74:7b:c0:60:fb:6d:92:66:
99:88:c6:7c:cf:cb:c7:04:fc:6f:95:6d:df:6a:06:
b5:3f:2e:0d:7d:7b:b9:ff:83:e6:bf:b6:18:51:ec:
2f:79:39:68:95:29:c4:45:0c:20:99:14:32:c2:59:
30:ff:92:73:06:86:0a:74:d2:64:db:97:fe:d9:d8:
14:77:86:52:22:9b:0e:24:72:8d:0a:b3:fa:78:29:
44:21:6a:f9:1e:d1:20:51:74:73:5d:48:e5:7e:82:
18:9d:78:25:c2:1b:bf:36:09:24:7c:84:80:fb:77:
78:06:ff:4d:a4:c5:0a:43:5f:6d:34:03:55:af:79:
0a:ad:25:33:c0:23:a6:d2:f4:26:10:d2:09:c3:1d:
a0:45:b2:56:83:78:35:8c:1f:e1:80:c7:c9:99:0a:
8d:9b:e6:dd:8c:65:bf:c7:62:0f:ec:a6:4b:ed:06:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:43:96:99:0C:81:0A:0C:8A:A2:B2:F8:E1:5D:DE:EF:C8:48:81
X509v3 Authority Key Identifier:
keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b0:df:3d:a0:11:13:ad:a3:9a:d8:76:73:5e:cf:11:dc:22:
f6:42:93:01:94:1b:ec:39:ee:5b:4f:08:71:86:39:b3:2d:2e:
bb:c2:ed:95:fb:00:ac:4a:18:91:34:47:44:4e:78:c2:8c:77:
c4:f9:0f:c8:0e:b6:04:5a:7b:ad:d6:11:e8:4a:ac:a4:ad:f5:
2d:81:09:8f:02:a0:f8:d0:0c:86:81:9a:7e:22:8a:f3:a0:fe:
1f:53:b5:cc:0c:81:e8:81:50:a5:c7:d7:5d:c3:62:1d:bd:d0:
71:77:66:97:7d:f3:75:88:98:18:c1:ad:95:70:18:9f:b7:28:
19:fd:35:b9:df:93:f6:1a:e6:b1:77:58:27:49:52:43:29:3d:
15:b8:68:7d:8d:8c:65:31:60:80:9b:c3:32:3e:ef:b5:40:16:
56:f3:3c:84:5f:92:04:76:e3:00:25:1c:22:98:c3:26:9b:d0:
8a:41:63:9a:cf:f4:b4:99:39:ea:ba:3a:ae:1c:09:a8:e2:c5:
af:d2:a0:04:31:e1:00:5e:4c:75:87:15:73:ae:13:4b:c3:b5:
50:81:b4:39:d4:4d:2d:a4:95:68:a1:74:01:d7:82:46:fa:b1:
e5:9c:8e:c1:6c:bd:44:0d:77:0d:dc:d7:53:73:6d:dc:94:c1:
a7:d2:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:41 2025 by rpki-client