Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: IsxDxMilK40eRmFx10YNqYZf0EyAR67sxv7jRZdsV0s=
Subject key identifier: 80:17:EE:87:53:C0:DA:97:7D:F8:33:C3:58:A2:5A:2A:BB:D7:B8:C9
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0198D65F77E52C457328B40A892DAF4E3165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: a5xlbbYvv0cIV+dLRIZP+kxd+jYQd0YTa93E8GTQUgY=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:77:e5:2c:45:73:28:b4:0a:89:2d:af:4e:31:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=8017ee8753c0da977df833c358a25a2abbd7b8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:ac:24:28:db:b7:32:a1:d6:eb:63:32:ca:
3b:07:72:7c:fc:4c:c6:a8:f3:dc:72:1d:39:d7:38:
2f:51:98:11:fa:26:bd:f9:c3:39:6f:16:5c:3d:1f:
09:20:86:b0:1b:5a:fc:89:8e:e7:39:3d:67:ec:0c:
16:ff:5a:2e:c0:6b:53:4c:65:c2:6e:42:d2:f5:16:
93:a2:57:54:d6:5a:1a:3b:bb:82:e9:70:bd:3a:f2:
37:44:d2:79:77:a3:25:99:95:f7:27:c3:13:51:8d:
db:33:c6:39:5c:8c:70:9e:0c:e9:89:a9:24:87:2e:
08:1b:be:84:40:73:5f:49:ca:d1:17:fc:93:e0:1d:
2e:78:8a:17:08:f6:04:cb:4f:43:90:15:ce:42:4c:
db:27:ef:bd:c0:1c:08:cf:f3:84:ad:d2:9b:3b:d1:
4c:0d:92:63:b5:5e:3f:27:80:4c:90:73:56:34:d4:
08:61:4f:98:c3:76:31:ac:e2:fd:df:a9:8f:a4:5e:
e2:2e:1f:25:8c:72:4f:c2:66:76:06:c0:d5:b3:e1:
44:e2:c4:a4:39:61:60:aa:76:e9:da:85:66:b7:f9:
49:5f:08:ce:d3:6e:35:88:1f:29:e5:d1:ad:1a:40:
20:3d:b1:88:1a:93:1e:4d:b1:64:44:06:7c:df:f4:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:EE:87:53:C0:DA:97:7D:F8:33:C3:58:A2:5A:2A:BB:D7:B8:C9
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:69:d5:42:84:0c:d7:27:db:c9:3c:d4:08:d3:3d:09:8e:04:
f3:f4:a6:0c:c1:79:39:76:77:90:2b:45:d7:90:5c:d5:a9:b0:
e5:67:41:04:a0:0f:1a:85:4d:61:ed:18:bd:a0:be:74:c0:90:
9a:ca:d2:1e:57:6a:c3:b9:16:29:d9:61:99:b1:fa:40:b2:cb:
dd:59:8f:01:21:fe:9e:ef:73:ec:fc:3e:e3:a5:c9:91:d0:bc:
f3:7b:8f:60:13:dc:1e:a8:47:52:4c:14:e9:c8:b4:57:00:b2:
9f:4d:b8:19:aa:80:30:89:1b:0a:20:2c:7a:42:7b:71:f9:f2:
8d:04:09:ec:0b:b8:f3:b4:61:d1:4f:c3:bf:7a:82:92:2e:0b:
57:8e:53:f2:17:2a:d7:d4:b5:7c:ac:88:fd:b9:b7:23:7f:a7:
2b:95:65:dd:9c:06:69:8a:3c:03:e0:a7:33:53:69:c7:c4:20:
62:36:05:b1:4a:82:32:e2:6b:4b:6e:80:f4:f8:47:bb:6c:41:
8f:62:23:db:47:09:12:26:16:d8:9c:a1:74:85:5c:b7:6a:75:
a2:17:04:48:a5:c6:fb:f0:2c:f4:60:30:2b:ea:ba:45:6e:08:
70:5d:f3:ec:41:7a:ed:bc:c9:ca:4f:7d:c1:c9:dc:02:8c:fa:
b9:76:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:11 2025 by rpki-client