Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: XErMKK28zSgTWqDJW6SW10JuTaaNDRdel7XhQfhPkrY=
Subject key identifier: 35:21:B4:96:4A:30:AD:9B:81:F5:DE:9B:D2:9C:F8:BD:07:69:0E:62
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0196B77E3135C99B9EB032C9DAEE5F8FD5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 00:00:22 +0000
Manifest this update: Sat 10 May 2025 00:00:22 +0000
Manifest next update: Sun 11 May 2025 00:00:22 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: NyT/PofpzUH18Z02ulZTFYz4zWvcT+q6DVf0YnC+dBk=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:31:35:c9:9b:9e:b0:32:c9:da:ee:5f:8f:d5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: May 10 00:00:22 2025 GMT
Not After : May 11 00:00:22 2025 GMT
Subject: CN=3521b4964a30ad9b81f5de9bd29cf8bd07690e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:7d:43:da:e9:79:b5:1a:5e:1d:28:7c:d9:
e5:30:c1:e6:38:2b:f7:6c:6d:ef:b9:4d:2b:79:4e:
f2:df:5a:1d:d4:dc:37:31:9a:4c:59:24:01:32:86:
2f:fa:7c:6a:00:47:ea:21:eb:6c:a5:bb:69:a2:ae:
40:c9:be:fe:6b:69:bd:a6:63:25:e1:b4:9d:06:9c:
00:9d:1b:34:d9:90:23:bf:ea:36:94:24:80:45:9e:
51:7e:c0:85:b7:6f:bf:45:a8:8e:14:42:ae:9d:de:
69:e8:b9:7c:a7:23:9c:4b:59:9c:3b:fb:41:85:c6:
05:16:ec:3f:f1:c9:b5:ea:1f:8b:8e:80:90:b9:94:
1a:b1:4b:c0:0d:52:ec:51:31:02:3d:4c:59:6d:41:
8d:c0:c6:04:ab:ec:ac:c7:17:08:5e:4d:a7:34:d8:
da:13:0a:d2:b6:9c:84:9d:50:fc:34:33:08:49:ba:
99:ef:26:e4:87:85:42:8c:a6:bc:2a:b4:1d:21:f0:
d7:7d:f3:57:68:ed:77:78:89:98:ea:8d:a1:f6:a8:
37:b6:8c:e6:33:6e:43:69:ae:a8:a1:61:30:57:84:
88:29:58:43:6c:bc:44:a4:84:a5:6f:0e:1c:81:a5:
34:2e:e8:23:76:40:0d:11:c0:4a:01:0f:c1:a2:79:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:B4:96:4A:30:AD:9B:81:F5:DE:9B:D2:9C:F8:BD:07:69:0E:62
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8c:c4:3b:d9:e5:bc:f9:69:34:a6:46:32:1b:27:42:2a:13:
a6:9d:a8:2b:0a:ba:6e:50:15:47:db:33:14:b9:b1:cd:f1:b3:
73:80:76:6f:48:a2:6d:49:88:ba:4c:be:ac:08:6f:ed:dd:55:
85:40:2b:57:af:40:4c:b0:5c:0f:3d:55:3b:d4:f3:4c:1f:a5:
6c:1b:dc:2f:40:5d:6c:d1:cb:6f:19:71:13:ac:f4:7a:19:4c:
14:b4:cd:8a:0d:83:45:5f:3e:26:6c:3f:cd:36:96:aa:e7:23:
a8:a0:33:5a:90:17:a8:33:74:b8:08:a7:ef:f5:17:59:2a:26:
29:8f:d4:74:f0:d8:8e:aa:70:24:5f:80:e2:89:52:e5:dd:3e:
cb:8b:b7:2a:14:ec:e0:ed:e9:90:64:7c:a9:59:fc:e2:41:8a:
ca:bd:b2:e5:89:79:c5:cc:29:18:4d:15:a6:2e:de:1e:f4:90:
8f:89:83:37:1b:f1:0f:b7:8a:c2:77:ef:38:fd:27:1f:1c:0a:
e8:de:e5:e0:e3:04:9b:b8:52:47:59:fd:a8:b0:31:f1:95:95:
28:ad:93:fa:c6:5c:61:fa:8f:77:da:06:16:83:84:f4:60:c8:
80:c2:3a:52:11:f2:6b:cc:31:1d:e8:26:af:aa:93:79:1d:59:
c2:89:d0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:16:12 2025 by rpki-client