Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: wcre4COzjv8DJXMDeQeCcyDWYrZNTNilr0uBGfKa78M=
Subject key identifier: 3A:4A:57:72:CC:BD:EC:B3:DA:1B:F1:37:0D:F9:7B:2C:21:3B:E5:36
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 01974C31C88064FC872BB0848ECB969C383A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 21:00:20 +0000
Manifest this update: Sat 07 Jun 2025 21:00:20 +0000
Manifest next update: Sun 08 Jun 2025 21:00:20 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: MNuojijNmwSpH7YY6G42HPwA1bbjwNyG78BO/zxJM5Q=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:c8:80:64:fc:87:2b:b0:84:8e:cb:96:9c:38:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jun 7 21:00:20 2025 GMT
Not After : Jun 8 21:00:20 2025 GMT
Subject: CN=3a4a5772ccbdecb3da1bf1370df97b2c213be536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:44:73:ec:30:74:5b:e5:7a:f4:9c:f3:a7:
c2:df:da:18:20:c6:25:fd:39:a8:3a:ab:32:1d:5b:
ae:ee:17:6c:ab:ba:d7:82:4d:20:c3:c6:46:a2:1b:
f7:29:ec:8c:1a:bb:cb:37:d4:63:7b:6e:d3:94:76:
5e:9b:c8:a1:96:1e:f9:90:14:49:0d:7a:85:11:c5:
83:46:60:40:38:de:49:85:56:ad:d7:67:63:1a:fc:
85:8a:17:9a:88:87:bd:2b:f4:da:26:61:d4:4c:d6:
df:f6:33:f2:50:d1:00:0e:24:18:c6:5b:88:a8:33:
cc:17:0e:43:8d:8b:6a:d9:be:8d:6b:46:9d:72:5b:
9f:c4:3b:a4:e6:ac:89:2f:6c:6d:12:53:72:10:ac:
4f:9b:f1:5a:77:e2:63:48:4c:fd:a2:1d:c0:b5:5c:
da:ee:20:fb:77:16:c3:7c:9d:b1:82:59:27:5e:e4:
c1:5c:fe:2d:81:58:57:3d:f9:0e:d4:cd:d8:94:eb:
50:50:66:52:1d:c8:1c:a1:71:c4:5c:22:7f:a0:3b:
70:4b:be:28:43:51:45:c4:d2:d5:17:56:fc:65:54:
03:0b:dd:99:a8:6e:9f:a1:f6:b0:62:41:a4:2b:e8:
cd:b3:3b:a9:90:fc:fb:f4:90:88:06:ee:fd:0e:a5:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4A:57:72:CC:BD:EC:B3:DA:1B:F1:37:0D:F9:7B:2C:21:3B:E5:36
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b3:58:8a:f3:06:09:60:88:b4:03:0b:ac:7c:8c:4e:b8:78:
a1:08:99:ed:a5:35:f5:37:bb:31:5c:75:19:7d:36:37:28:07:
fc:39:53:9c:d0:29:74:37:43:1f:de:74:d8:8a:ab:49:30:a8:
1e:13:e3:ca:cb:82:e9:83:6e:3e:81:5d:5d:0f:b4:65:dd:67:
57:2e:c2:c0:ca:fa:a9:76:ba:81:81:9b:f8:53:23:d2:31:4b:
63:17:98:1a:77:97:9a:18:3f:b8:ac:d9:aa:d0:28:71:93:d7:
1e:70:22:de:43:40:d2:1a:fe:de:b4:f5:b8:eb:f1:3e:c5:7b:
13:ba:0a:51:10:af:da:5d:77:59:44:5a:c5:e8:ab:57:0e:c3:
80:e8:e0:69:72:47:3a:f1:e5:51:f3:43:dc:e6:c1:88:74:98:
f8:88:9d:04:b2:fc:8f:06:91:f2:99:59:1e:11:97:c8:7e:e3:
8e:2c:cd:c6:e8:39:ce:95:b2:c2:53:c0:63:6d:fc:97:6a:48:
82:85:5a:73:f5:57:08:64:82:bc:0f:13:ce:55:fc:df:59:1b:
b3:ce:0c:f3:ec:95:e3:78:82:3b:f8:00:e5:09:8f:a3:2d:e8:
f1:a0:aa:f3:3a:c5:1b:56:cf:a3:9e:f6:50:e1:c0:50:03:a2:
41:bc:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:57:43 2025 by rpki-client