Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
File: MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json)
Hash identifier: NnKe5WFjmfSa5iwPLPvpeuOvkHvvVjsuje3kaM6Gz44=
Subject key identifier: 22:B5:3D:95:6B:C5:A0:BF:FE:ED:EA:B3:1B:6B:DF:3F:D3:6A:93:20
Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Certificate serial: 0196BA7F2EAC543E2DDAC89B362DBA1E9992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 14:00:19 +0000
Manifest this update: Sat 10 May 2025 14:00:19 +0000
Manifest next update: Sun 11 May 2025 14:00:19 +0000
Files and hashes: 1: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: 75ErbVek6bevqT3msXk0ltfuu2mTcsUago+nAeHA120=)
2: sQzmhjMqbnYxePAUvm9cNK1Tjw4.roa (hash: tJJ1LdtYmxN6Mm4HIKko/zr0MUnt+0ElprJSwioZ+lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:2e:ac:54:3e:2d:da:c8:9b:36:2d:ba:1e:99:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4
Validity
Not Before: May 10 14:00:19 2025 GMT
Not After : May 11 14:00:19 2025 GMT
Subject: CN=22b53d956bc5a0bffeedeab31b6bdf3fd36a9320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:26:46:5f:cd:c5:41:9c:e3:d7:d7:db:c9:
e7:51:bb:f0:bb:d3:9a:ce:dc:e8:e9:2d:00:a2:4a:
40:c8:d5:e5:c5:ef:fd:f2:00:b7:04:ff:6c:34:26:
4d:08:72:f9:6f:a8:9e:81:18:f8:11:9d:a4:25:36:
6d:90:89:8f:80:a1:4f:7d:aa:39:0b:d6:4f:2c:de:
56:97:dc:fe:f4:ee:ae:19:94:bb:fe:25:43:08:a5:
61:b3:d9:ef:90:e9:38:7e:a3:af:ab:55:39:5d:46:
c9:56:c0:fc:2a:4d:d1:9b:92:25:9a:4e:68:22:a8:
2c:bc:42:ed:a6:23:82:a6:e8:f4:41:30:b8:c0:f5:
47:fd:73:9e:f0:8a:7d:49:f6:21:3e:53:06:ef:ed:
30:d2:ee:d2:f2:61:f6:39:4d:3f:e1:77:02:de:6c:
3c:ea:32:59:53:6a:aa:f7:c9:50:8d:a3:78:9b:00:
a2:e6:3e:b7:e0:32:dd:46:c9:c5:88:0a:08:0e:39:
bd:8b:d7:fd:99:65:94:40:25:f7:74:bf:b4:21:d2:
60:c1:40:db:a4:be:23:8d:86:60:3b:80:1d:d7:ae:
ff:5f:16:b3:fe:bd:0d:ff:00:79:ae:60:62:c4:5a:
60:23:4a:11:c4:f4:84:51:84:6a:d6:c6:b8:7d:1a:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B5:3D:95:6B:C5:A0:BF:FE:ED:EA:B3:1B:6B:DF:3F:D3:6A:93:20
X509v3 Authority Key Identifier:
keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ac:0c:1a:36:b0:1f:68:23:73:cf:88:1b:6a:1e:3e:a3:42:
ed:6a:83:9b:5a:2d:a1:01:3b:76:fc:e9:16:a8:c9:bb:0a:8d:
8a:f8:45:b8:f5:aa:8f:b5:c0:0e:f5:e7:78:e3:10:f9:28:8f:
66:cf:52:68:cf:84:cb:03:c0:f4:6e:5d:71:48:82:16:d6:77:
4c:ae:d7:26:33:99:fa:a7:49:f6:be:cb:52:35:ea:1d:1e:eb:
fe:d1:99:d1:f4:c6:a4:fa:0c:d4:63:f8:b1:ec:8e:ad:cd:d0:
4f:a4:20:2a:eb:03:6b:fb:c3:14:78:f1:29:ea:e6:4d:dd:7a:
a9:f7:54:1c:d3:99:1a:81:d3:c0:2d:11:17:08:48:c8:54:f9:
6c:d8:58:f2:18:82:41:a5:21:1b:ac:da:bd:46:fb:87:29:75:
07:0c:ef:5d:c0:97:99:e1:42:0f:c9:ae:59:aa:c1:fa:9e:85:
86:31:1e:39:16:c5:51:7b:87:e7:b3:1c:16:58:01:46:0b:b9:
a5:03:72:72:82:72:01:46:e0:26:24:27:ce:b1:c6:cf:de:f3:
a2:17:dc:08:95:ba:37:13:ba:c7:97:d0:e0:d3:8b:aa:10:ea:
ea:90:3b:ee:7c:17:82:b0:5c:f2:b2:ec:9a:d5:32:a9:f8:d0:
22:14:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:26:51 2025 by rpki-client