Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
File: MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json)
Hash identifier: 4pRxYEkBDWLLdmUsfbJ4xbnxJ0MYyHxsIIxU3wyiif8=
Subject key identifier: 59:12:C5:A8:78:FE:8A:21:EC:33:58:95:D5:93:57:D7:73:3C:03:2C
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 0197B70F13D80FBEEA4AEDFDA72DEBB9574C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
Manifest number: 0AAD
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=)
2: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: MoAMu3hbKdPNpoGeK1Hv88hXsfMcec5/eVI+H62RYX8=)
3: XXRk-2utC2qSFmq343z5VXrm2u4.roa (hash: ytRglwlu3WOrTr72XPTW+Woc0VzZSF5e3VxmBUNFs3g=)
4: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=)
5: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:13:d8:0f:be:ea:4a:ed:fd:a7:2d:eb:b9:57:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=5912c5a878fe8a21ec335895d59357d7733c032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:a3:b9:ae:75:b8:66:84:cc:e5:50:23:28:
5c:61:4b:e9:f1:ff:3c:cc:d3:8f:a0:57:61:ab:92:
cf:80:04:75:d3:8f:ad:6b:50:6d:f8:f0:0f:24:53:
34:56:9a:01:ae:47:53:eb:98:a2:b1:cf:9b:e7:01:
27:ab:ad:cb:1b:b2:1d:67:63:70:79:e4:14:76:56:
7d:ff:fa:9e:eb:c9:2f:ea:77:d6:d3:00:db:4b:65:
ab:bb:7d:0c:4b:bd:8d:31:4f:fc:1e:6a:03:07:5d:
25:05:f9:61:59:c0:71:4c:86:0a:a5:52:ef:43:d1:
94:99:a4:fc:ec:7b:3f:20:d6:0a:68:5b:77:f6:9e:
5f:90:6a:9b:6e:f7:e3:a4:d7:42:e3:23:bb:84:47:
57:93:03:d7:d5:db:2a:16:49:1e:53:b5:52:1b:34:
f9:b1:a1:e4:00:15:ae:28:7b:e3:03:82:13:9f:82:
41:0a:82:ef:7d:ba:e7:fb:ec:f3:f9:ff:dd:0d:19:
ee:a8:70:f8:32:4f:07:f0:df:1a:21:3f:22:70:d8:
0e:7b:86:b2:36:f8:64:5c:e0:89:e3:c0:5f:87:98:
91:1d:bf:b8:ed:16:30:2f:98:10:eb:df:dc:4f:bf:
79:d0:a3:43:ff:13:e4:32:6c:02:94:a0:17:d0:cd:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:C5:A8:78:FE:8A:21:EC:33:58:95:D5:93:57:D7:73:3C:03:2C
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:13:e6:be:e1:6a:80:49:b5:5a:d1:cc:28:05:24:38:48:e2:
f3:cd:13:39:be:b1:6f:01:44:6c:6c:41:11:46:06:75:5e:6d:
98:77:c7:f2:39:a9:56:f3:dc:8f:e6:4b:95:04:ba:2a:43:7d:
7c:70:31:ff:96:8b:dc:56:e2:16:71:88:08:c5:13:36:9f:1f:
ca:cf:23:ba:74:52:a4:9b:af:54:69:aa:5b:d1:ae:9b:d1:48:
36:77:08:01:9a:6d:dc:1f:e1:05:64:18:bb:a0:86:04:70:75:
76:33:bf:e3:0a:80:8a:0d:5b:53:ec:34:70:02:0a:03:02:c6:
ce:fe:a8:54:ef:de:eb:8e:41:d9:08:30:ed:21:49:70:eb:c4:
b6:06:71:0c:89:df:e0:76:d5:dc:86:d8:9d:1d:65:71:91:94:
b7:90:01:16:41:8d:15:7a:0d:f5:f6:49:28:8a:d7:81:c1:fa:
de:02:fb:da:c6:33:b3:b0:c4:df:a5:2a:7f:46:89:37:69:63:
b5:38:1b:29:bc:b8:06:68:3a:e3:16:d5:0b:56:8b:e9:5d:81:
7a:63:28:5a:19:ae:39:2e:a4:ab:75:31:dc:b9:00:ec:23:ad:
45:98:ee:0a:32:0d:a0:73:de:4b:a9:30:b0:25:5d:38:09:b7:
28:f5:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:21 2025 by rpki-client