Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier: 3AqNeW1cBARKdMAF5J+HgCzwMclthCMfGcc2IdqG034=
Subject key identifier: 3C:4F:17:8B:3D:6A:13:66:50:C2:45:6B:8B:99:86:06:4A:9A:64:39
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 0196B47D7240170DDBD16E4FAA979AC04FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number: 025A
Signing time: Fri 09 May 2025 10:00:42 +0000
Manifest this update: Fri 09 May 2025 10:00:42 +0000
Manifest next update: Sat 10 May 2025 10:00:42 +0000
Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: 1/tIFiEn9EfugV1UCUyT1CY9DCh4uouHQStYQhxobQc=)
2: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (hash: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:72:40:17:0d:db:d1:6e:4f:aa:97:9a:c0:4f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: May 9 10:00:42 2025 GMT
Not After : May 10 10:00:42 2025 GMT
Subject: CN=3c4f178b3d6a136650c2456b8b9986064a9a6439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:2b:41:9f:3a:5d:8a:b4:0e:92:96:d9:84:
60:f9:3d:41:9a:85:5d:58:9e:96:28:b4:d9:2d:2f:
49:58:4d:e1:f8:1e:20:5c:cd:b9:6f:a6:52:40:90:
a5:75:d1:2a:14:e4:8d:66:cb:58:e7:71:38:4d:6b:
5c:90:4f:88:5e:ef:2a:1d:b4:89:ba:d2:63:d7:28:
6d:88:e2:52:9b:fd:b7:cb:39:e3:84:96:0d:db:79:
3e:c9:d9:96:a1:ab:a2:71:de:9e:05:07:cb:21:06:
d6:ee:80:12:8a:08:a1:04:c5:0f:0e:cc:a7:65:e4:
20:ef:b3:3f:a3:ff:fe:87:41:a0:28:cd:f2:fa:4c:
f1:f5:c9:0a:1c:3b:18:0d:bf:86:06:d9:06:c5:96:
dc:0a:5b:12:41:20:03:3d:fc:c1:89:4c:81:45:7c:
b2:28:d5:50:1c:26:5e:8a:fe:5a:0b:14:b9:ac:57:
b8:83:bb:c8:68:68:be:2f:11:57:32:b4:5d:0d:b1:
f1:7f:4b:d6:78:d1:a8:80:5e:52:93:98:78:c1:1a:
d6:15:0d:65:47:20:15:68:87:8f:94:85:92:1e:1f:
4d:22:b4:5a:9e:34:7b:44:1e:08:48:f0:fd:55:21:
ab:06:0e:39:30:51:24:cd:49:31:19:71:ff:3a:67:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:17:8B:3D:6A:13:66:50:C2:45:6B:8B:99:86:06:4A:9A:64:39
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:56:b5:27:3b:c9:69:2f:e8:ad:b6:16:43:03:f1:cc:21:49:
71:f5:ed:ee:96:7c:a9:46:a0:81:2c:1c:ae:8b:17:7d:58:44:
45:98:21:1c:9b:07:94:53:34:07:88:8e:b3:c2:64:fa:86:3e:
e6:37:4d:b8:bf:be:5b:2c:dc:ed:6e:93:10:ad:c1:d7:62:b9:
0e:3f:03:08:0d:71:a8:1d:e0:f0:ac:d1:07:8e:e4:70:40:7c:
3e:8b:09:6f:60:57:42:eb:fe:ec:fb:53:3a:4f:63:db:31:29:
d8:b2:8c:35:93:1e:58:ad:0d:85:9e:97:42:f5:af:d4:db:61:
f1:9f:3d:9f:22:57:a3:2a:93:81:64:40:97:12:80:c9:1f:83:
2e:ae:0d:e8:7d:25:05:74:6b:1c:8e:f9:e6:6d:16:23:49:08:
71:bb:8d:09:70:c5:98:c1:18:9f:f2:a9:2d:29:17:57:69:74:
fa:03:d8:b8:60:01:12:9c:34:3d:18:c5:bd:3f:f2:ec:62:90:
dd:7b:9b:55:1f:44:5c:6b:89:ba:ad:bb:84:00:81:2b:cf:0b:
06:63:eb:4d:8d:08:0e:7c:f2:e6:e1:13:8a:be:81:ed:b2:1b:
b0:ce:ca:d1:50:65:90:dc:b8:5b:a3:ce:68:7c:d5:42:3d:6c:
ff:39:df:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0fXJAFw3b0W5PqpeawE/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDVlMjAyMmVhODJlYzc3ZjkyZGRkYjc3NjYxOGNkNmMw
NTc1NzUwHhcNMjUwNTA5MTAwMDQyWhcNMjUwNTEwMTAwMDQyWjAzMTEwLwYDVQQD
EygzYzRmMTc4YjNkNmExMzY2NTBjMjQ1NmI4Yjk5ODYwNjRhOWE2NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/MrQZ86XYq0DpKW2YRg+T1BmoVd
WJ6WKLTZLS9JWE3h+B4gXM25b6ZSQJClddEqFOSNZstY53E4TWtckE+IXu8qHbSJ
utJj1yhtiOJSm/23yznjhJYN23k+ydmWoauicd6eBQfLIQbW7oASigihBMUPDsyn
ZeQg77M/o//+h0GgKM3y+kzx9ckKHDsYDb+GBtkGxZbcClsSQSADPfzBiUyBRXyy
KNVQHCZeiv5aCxS5rFe4g7vIaGi+LxFXMrRdDbHxf0vWeNGogF5Sk5h4wRrWFQ1l
RyAVaIePlIWSHh9NIrRanjR7RB4ISPD9VSGrBg45MFEkzUkxGXH/OmcrJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxPF4s9ahNmUMJFa4uZhgZKmmQ5MB8GA1UdIwQY
MBaAFDDV4gIuqC7Hf5Ld23dmGM1sBXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDct
OWIyZjUxYjgwYTk4LzEvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDctOWIyZjUxYjgwYTk4
LzEvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1a1JzvJ
aS/orbYWQwPxzCFJcfXt7pZ8qUaggSwcrosXfVhERZghHJsHlFM0B4iOs8Jk+oY+
5jdNuL++Wyzc7W6TEK3B12K5Dj8DCA1xqB3g8KzRB47kcEB8PosJb2BXQuv+7PtT
Ok9j2zEp2LKMNZMeWK0NhZ6XQvWv1Nth8Z89nyJXoyqTgWRAlxKAyR+DLq4N6H0l
BXRrHI755m0WI0kIcbuNCXDFmMEYn/KpLSkXV2l0+gPYuGABEpw0PRjFvT/y7GKQ
3XubVR9EXGuJuq27hACBK88LBmPrTY0IDnzy5uETir6B7bIbsM7K0VBlkNy4W6PO
aHzVQj1s/znfDA==
-----END CERTIFICATE-----
Generated at Fri May 9 15:59:53 2025 by rpki-client