Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: uz/xhTbYLfIxlEkHzC6DhLBHFNzwD1HWBUANJDssoqI=
Subject key identifier: 9D:6E:2C:DD:67:99:55:33:AD:A1:F3:C2:46:00:37:06:8F:10:42:A7
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 0197B6A22C730968DC95FB8A4103D6FC40F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:50 +0000
Manifest this update: Sat 28 Jun 2025 13:02:50 +0000
Manifest next update: Sun 29 Jun 2025 13:02:50 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: Q1+AXxuLQ4LYjiKh5uUbbFCij408zff/8QHq6bTzr5E=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2c:73:09:68:dc:95:fb:8a:41:03:d6:fc:40:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Jun 28 13:02:50 2025 GMT
Not After : Jun 29 13:02:50 2025 GMT
Subject: CN=9d6e2cdd67995533ada1f3c2460037068f1042a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:04:26:dd:9f:63:68:8e:9b:5c:23:43:c0:
fd:af:5f:f0:02:66:a3:86:fe:ab:47:59:16:25:66:
0e:37:5e:c4:ba:43:2a:20:04:78:d6:53:a8:7e:83:
aa:40:df:0e:65:b6:d1:fa:3a:36:32:d7:3e:57:7f:
b8:e0:46:46:1c:25:1c:72:60:71:de:ac:be:fe:02:
24:b8:cd:80:ad:d3:6f:ab:4b:d3:65:0c:ee:0b:94:
0d:6a:e4:e6:d0:47:6f:0b:22:dc:ac:85:4b:7a:97:
17:cf:ce:29:0e:6a:bb:53:a8:98:82:67:59:55:cf:
09:52:5d:e7:50:d3:1a:92:99:81:cd:0a:63:00:81:
44:b3:4e:50:62:24:6c:fb:e8:f5:69:4b:b3:9d:fe:
21:78:29:65:69:f0:b6:e8:13:09:90:75:d6:27:a0:
e4:32:5c:07:99:00:a8:ee:1b:5e:8c:c7:5d:6b:b6:
33:70:cb:05:1c:a4:f5:b6:70:f8:05:da:f2:f6:93:
1b:e0:a8:52:ef:93:45:15:40:95:6d:db:c1:01:56:
44:6e:d3:7c:d9:3e:50:24:7c:be:db:88:16:5a:61:
51:a1:71:cb:3e:e1:84:7a:99:81:b1:ce:aa:62:2d:
f7:e7:73:82:40:e8:5b:05:0f:0f:e0:ff:ed:00:9d:
f6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6E:2C:DD:67:99:55:33:AD:A1:F3:C2:46:00:37:06:8F:10:42:A7
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6f:b5:76:cd:89:9f:96:56:bc:84:d1:0f:a2:19:38:e9:02:
e6:ab:1c:65:00:6d:c9:2b:fa:d3:37:55:8f:c0:82:89:13:ce:
e2:5f:7b:e1:4b:36:a0:0f:fc:26:92:0f:c2:72:1f:72:94:93:
5e:aa:c8:1e:8d:1b:d2:bf:de:84:29:8b:36:5b:74:36:1e:bb:
c9:43:7c:c5:7c:4b:82:ab:3b:44:7c:c7:98:53:94:36:0d:bf:
95:48:3a:74:91:0d:c0:1d:4c:64:74:90:97:be:f0:27:b1:fd:
d3:f0:37:04:72:7a:de:a5:2e:26:03:d6:b9:38:bc:76:3d:39:
81:fe:8f:c5:fb:d7:42:31:5e:f9:9d:55:c7:d0:4f:2c:51:1a:
f3:dc:8b:62:f0:83:b0:99:77:43:ba:e6:87:32:f1:90:bf:19:
12:45:f9:cd:0e:96:b2:51:df:ef:28:1c:2b:2c:91:e4:5b:45:
47:fb:bd:6f:49:d0:2c:6c:72:b6:29:14:f9:51:a3:fd:f2:ff:
8e:62:8d:19:dd:d9:73:ae:51:e5:ea:9f:f5:46:76:20:96:66:
93:7e:c2:15:2c:e3:9b:ac:d2:5e:76:77:7f:f1:98:c9:c0:a1:
87:28:04:20:b3:cb:57:5c:b8:b5:6f:f6:4f:8b:45:4a:6f:73:
cb:4e:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:46 2025 by rpki-client