Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: IfqlM+i6zuKZCWNgAoLJ4wVhmFDEDSR9eEzsgQJSNXY=
Subject key identifier: 94:5A:AC:77:9E:55:99:C5:B3:F7:55:EF:2D:D0:DA:57:C0:27:54:84
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0196496A5DF9908CCE880922FE92F4B5D846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 15:00:29 +0000
Manifest this update: Fri 18 Apr 2025 15:00:29 +0000
Manifest next update: Sat 19 Apr 2025 15:00:29 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: fI77uFIXpeYfiW8jO4YnmN3Eog4hPlxBMle3XSYRlqo=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:5d:f9:90:8c:ce:88:09:22:fe:92:f4:b5:d8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Apr 18 15:00:29 2025 GMT
Not After : Apr 19 15:00:29 2025 GMT
Subject: CN=945aac779e5599c5b3f755ef2dd0da57c0275484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:15:e7:42:64:96:a9:62:95:da:07:fe:e4:
c1:58:a5:b3:95:09:d2:c9:6f:1b:aa:f5:66:44:bf:
34:33:7a:67:db:5a:2a:09:ca:cd:35:59:66:05:17:
91:d9:77:97:19:cd:55:d0:02:c7:4b:05:c0:a0:e1:
f8:e0:d2:65:e7:4b:92:a0:7c:6d:30:e9:1f:69:1d:
44:32:cf:2f:08:04:f2:f0:fe:76:c1:9d:98:21:f4:
87:a3:d8:ff:4d:86:d7:0e:d9:5b:4c:9e:7b:2f:d8:
07:d0:c7:60:ad:f8:c7:74:c5:f9:eb:9d:78:d6:be:
51:32:63:96:1d:ac:2a:26:77:13:b6:36:6a:d4:7c:
2c:b7:ae:f6:c3:93:f0:e5:16:c9:f3:7d:f0:37:8c:
d8:da:36:c4:fe:52:4f:74:6c:58:8f:87:72:76:3e:
28:ff:6b:55:33:a0:e0:ba:92:95:a7:93:a8:f1:ac:
f6:10:b8:c9:b4:20:fd:a3:d4:47:e8:33:98:8b:2b:
7e:27:1c:40:67:cb:60:fd:51:9c:a6:d7:d0:dd:05:
e3:84:a6:a1:bb:1b:08:3f:a8:32:de:f0:90:9f:00:
df:2a:19:3e:8f:5f:ef:06:2d:e2:23:fa:d3:10:ae:
bf:5d:6d:80:0c:91:c7:3d:cf:63:c4:1c:68:a0:18:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:AC:77:9E:55:99:C5:B3:F7:55:EF:2D:D0:DA:57:C0:27:54:84
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:78:9f:1a:07:48:90:fb:b9:03:57:a1:6e:80:2a:ac:23:3e:
0c:e2:2e:93:56:b8:f8:c5:3f:a0:7b:54:e5:df:43:bb:99:bf:
ae:07:48:ad:61:ff:20:d7:d9:fd:70:4a:f6:07:79:32:44:f3:
73:07:8b:50:f0:85:84:f7:0d:bc:9c:f2:9b:a4:12:60:c9:3c:
8f:98:01:24:d5:62:04:b2:32:d2:c0:50:61:e9:ea:1f:ef:9a:
eb:b0:78:02:62:0f:ff:fa:e7:f2:57:9a:e6:ce:af:78:fd:5c:
d7:10:24:43:76:49:1a:26:a6:e7:72:a3:f5:1e:c3:9e:dc:4c:
89:36:d3:a9:7a:12:1c:f7:42:2b:d9:8c:68:47:f0:03:fb:92:
53:af:bc:f5:24:09:b5:78:5b:eb:99:18:17:a6:27:5e:11:7e:
9f:9c:78:67:4c:e0:d9:59:92:3c:5e:5e:bd:e6:8d:cb:f8:e2:
4d:98:b0:f6:fa:62:cb:b6:06:52:a3:0c:56:e6:82:2e:77:1c:
c1:9c:93:08:54:bc:4e:c8:ac:eb:ea:05:0e:cf:5b:f7:ae:84:
c5:29:5e:68:30:70:5f:97:fe:a9:af:5e:ab:4c:92:a8:01:cb:
98:26:d3:75:7e:ce:26:4b:1d:65:ec:6a:3c:08:6d:51:f2:04:
45:b7:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:18 2025 by rpki-client