Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json)
Hash identifier: wkvgG2fk1IDwcGf0gWC6Bz/BI58CLrmSBoFXBEG0EkI=
Subject key identifier: A9:45:8D:7B:57:09:28:0F:1B:DF:1F:E7:C7:0D:0E:7E:D1:AE:C9:9C
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 0197B7452CD31C52CF342FF8854B45182F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
Manifest number: 02E0
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: 8nAU79PDJMTkUmuTijTWBc+67eSiplbXgVHQzECeH3U=)
2: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (hash: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2c:d3:1c:52:cf:34:2f:f8:85:4b:45:18:2f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=a9458d7b5709280f1bdf1fe7c70d0e7ed1aec99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:ae:0e:ed:82:82:15:01:59:c0:9d:71:3c:
ec:65:8a:ac:0e:d8:f4:97:89:b7:ce:d7:26:1d:ec:
01:66:ae:fb:7a:21:cc:fb:3d:f1:d8:55:a7:74:91:
7b:1e:c3:d6:f5:2e:64:d7:16:31:0b:88:df:b5:44:
60:67:d6:36:94:26:cb:a3:1c:f4:4f:8f:a6:be:07:
19:a1:22:24:ba:de:4d:dd:63:71:46:f0:d5:83:62:
f1:d6:60:41:ae:46:a8:b8:54:1f:9d:92:6f:cb:d2:
1c:34:1e:d6:32:80:88:5e:ea:69:17:11:53:3f:9b:
4f:8c:24:3c:71:08:50:2e:5f:ed:e1:01:95:8a:da:
6a:26:bc:30:8e:ed:7b:eb:a0:03:3b:92:fe:8a:e0:
40:2e:2c:c7:3f:8b:29:55:82:05:8e:b1:72:44:a7:
26:88:bd:40:5c:70:82:f1:2d:02:4d:4e:89:38:47:
3d:ed:c8:31:7b:5c:4e:5b:00:d6:c5:96:66:48:97:
64:f8:84:f4:c9:cf:1b:de:dd:bc:52:b4:3a:9b:93:
20:89:a9:a9:10:3b:ce:87:83:cb:68:44:67:f5:27:
50:d2:cd:11:c0:6a:ee:54:9f:b0:85:e9:20:31:92:
76:ce:ca:17:fa:f5:2a:c9:31:78:de:0e:2d:08:2f:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:45:8D:7B:57:09:28:0F:1B:DF:1F:E7:C7:0D:0E:7E:D1:AE:C9:9C
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ab:e4:99:ab:e8:64:a7:cf:b3:65:99:6e:0a:4e:cc:9d:1a:
40:c9:4e:9c:97:2c:d1:2d:38:c4:2a:6f:d6:8e:bd:c9:b6:e1:
4d:e5:3f:0b:db:4f:de:0f:8b:7f:4c:df:82:57:a1:ab:91:0b:
3f:3e:4a:1c:f5:b3:5d:e4:3c:e0:bb:f5:53:79:f1:42:bb:91:
68:6b:d9:84:7e:8f:0d:00:b3:68:1f:9c:cf:2d:36:5f:b7:43:
28:4f:05:03:50:3d:71:56:81:34:16:6f:39:f3:9a:3d:a0:8c:
1c:c9:aa:cd:a9:3c:43:be:92:c2:12:88:fc:ac:64:64:b8:54:
42:5d:74:49:4f:6b:cc:2a:06:ca:e2:33:4a:cc:48:84:73:3e:
3a:d3:7d:01:a5:1b:6a:5c:b4:2f:58:1a:dd:3b:90:80:39:d1:
35:80:9e:c6:95:8b:7b:66:39:0a:b0:61:af:4c:de:69:a0:29:
56:63:fd:52:67:21:df:f6:fb:48:65:cd:1a:42:99:07:38:52:
77:00:1f:fb:61:54:f1:5c:e6:85:a2:60:ff:3f:87:91:c0:f5:
99:80:dc:de:6c:a8:ec:b2:91:3e:a7:af:d9:7f:23:4c:c5:be:
8d:e5:7d:95:c9:00:b3:f6:82:ca:8b:62:99:76:07:c9:09:90:
3b:63:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:32 2025 by rpki-client