Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
File: MMOt1700croWgExJC2ahCXZZvTE.mft (raw, json)
Hash identifier: aeFdg9XGm863yA7xuqZUUcRz2jzW/E0oP/2U5E4ttq0=
Subject key identifier: 5E:2B:5D:6E:49:F7:E7:54:22:BD:98:9B:BB:22:09:A4:65:A8:D5:BD
Authority key identifier: 30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
Certificate issuer: /CN=30c3add7bd3472ba16804c490b66a1097659bd31
Certificate serial: 01976C2B3D9331AF57C1F25BB522C5664862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
Manifest number: 0B41
Signing time: Sat 14 Jun 2025 02:01:02 +0000
Manifest this update: Sat 14 Jun 2025 02:01:02 +0000
Manifest next update: Sun 15 Jun 2025 02:01:02 +0000
Files and hashes: 1: MMOt1700croWgExJC2ahCXZZvTE.crl (hash: t40MzxZ21sVfRUJxiLbRdfSgkLF8tcnxG54wER8u288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:3d:93:31:af:57:c1:f2:5b:b5:22:c5:66:48:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c3add7bd3472ba16804c490b66a1097659bd31
Validity
Not Before: Jun 14 02:01:02 2025 GMT
Not After : Jun 15 02:01:02 2025 GMT
Subject: CN=5e2b5d6e49f7e75422bd989bbb2209a465a8d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:7d:e8:1b:98:a2:c1:2c:33:99:ca:19:24:
20:ff:39:9f:35:5b:b1:b3:28:1d:cb:ff:eb:76:da:
a1:6d:85:7e:e5:d6:6c:a5:bd:9e:2c:4c:00:cf:c0:
6c:e3:ab:c2:ed:a9:8e:14:39:aa:71:75:c9:6c:27:
f9:7c:67:28:af:b4:46:f4:c6:d5:11:89:d4:5e:f5:
e4:87:20:2e:74:da:4b:33:88:2e:e4:91:3f:0c:75:
30:9b:fe:9e:1e:dd:e8:4d:82:44:fa:d8:6e:d3:cf:
64:5a:5a:a7:4c:88:70:d6:b7:74:24:6f:eb:c9:e4:
d8:77:fb:b8:63:bb:4d:0c:e9:17:70:f8:c4:df:11:
d9:4b:9e:84:1b:9f:7b:8b:5f:7b:f7:01:6e:7f:70:
63:b8:d9:4c:ca:8e:4e:59:c4:a8:9d:aa:a0:92:41:
a4:72:5f:15:c0:7e:4a:c4:c7:13:d2:06:91:0e:33:
0c:ca:87:4a:52:36:dd:d9:fb:3e:a1:2a:b2:0b:1f:
d9:5a:a7:e4:de:76:4e:54:05:9f:51:c1:a6:95:2d:
e5:f7:be:2b:64:d5:f8:1e:70:cd:33:47:96:a7:2f:
a2:ff:8e:e1:aa:4e:18:83:91:f4:89:b9:2b:85:93:
35:0b:4c:fe:d6:7a:ed:1e:ad:93:d8:f0:dd:23:eb:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:5D:6E:49:F7:E7:54:22:BD:98:9B:BB:22:09:A4:65:A8:D5:BD
X509v3 Authority Key Identifier:
keyid:30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a8:07:b5:51:df:5d:99:31:f1:fa:20:50:a6:0e:83:7c:70:
8c:fe:3c:8d:d4:da:dc:3d:ee:f4:84:b6:af:96:ac:ea:b5:34:
e3:4a:8c:6b:1e:a2:b3:99:9c:3b:66:88:2f:81:28:97:20:63:
a6:49:d4:6a:ff:d9:84:b5:a7:a5:9d:6d:90:87:2b:d4:26:cf:
59:29:c5:a7:35:29:2d:21:88:7d:3e:19:27:34:9e:0a:e1:18:
54:89:a2:57:d4:e9:0c:e6:58:af:c8:96:c3:ba:0b:41:1c:86:
fa:14:47:d0:2f:31:da:6a:84:41:75:b2:93:54:9c:54:97:63:
e1:a1:2a:57:54:f2:c9:87:de:d5:02:44:cf:1f:54:73:0b:e1:
ca:9c:90:dc:a4:4e:31:66:57:59:02:6c:d1:e2:a8:51:7e:34:
dc:5d:fc:5c:d1:40:4b:eb:0e:1e:ef:02:e9:a4:90:60:ea:db:
10:a3:f7:b2:5c:1a:61:57:4e:0d:3c:eb:93:4c:7c:fe:81:f4:
ec:93:af:c9:e2:ff:ba:8e:4a:25:4e:82:5f:68:12:a9:8f:23:
2a:18:67:cd:fe:56:1b:3d:8b:a5:97:2f:d7:a7:32:46:28:93:
38:4f:36:6d:94:69:69:bf:04:16:f1:e4:85:85:92:4f:1e:6c:
b0:7a:aa:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKz2TMa9XwfJbtSLFZkhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzNhZGQ3YmQzNDcyYmExNjgwNGM0OTBiNjZhMTA5NzY1
OWJkMzEwHhcNMjUwNjE0MDIwMTAyWhcNMjUwNjE1MDIwMTAyWjAzMTEwLwYDVQQD
Eyg1ZTJiNWQ2ZTQ5ZjdlNzU0MjJiZDk4OWJiYjIyMDlhNDY1YThkNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVJ96BuYosEsM5nKGSQg/zmfNVux
sygdy//rdtqhbYV+5dZspb2eLEwAz8Bs46vC7amOFDmqcXXJbCf5fGcor7RG9MbV
EYnUXvXkhyAudNpLM4gu5JE/DHUwm/6eHt3oTYJE+thu089kWlqnTIhw1rd0JG/r
yeTYd/u4Y7tNDOkXcPjE3xHZS56EG597i1979wFuf3BjuNlMyo5OWcSonaqgkkGk
cl8VwH5KxMcT0gaRDjMMyodKUjbd2fs+oSqyCx/ZWqfk3nZOVAWfUcGmlS3l974r
ZNX4HnDNM0eWpy+i/47hqk4Yg5H0ibkrhZM1C0z+1nrtHq2T2PDdI+v4nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4rXW5J9+dUIr2Ym7siCaRlqNW9MB8GA1UdIwQY
MBaAFDDDrde9NHK6FoBMSQtmoQl2Wb0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1PdDE3MDBjcm9XZ0V4SkMyYWhDWFpadlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yM2NjYzgtNDcxOC00NTNjLWJlM2Ut
OTVjZDY5MjRhYjRlLzEvTU1PdDE3MDBjcm9XZ0V4SkMyYWhDWFpadlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yM2NjYzgtNDcxOC00NTNjLWJlM2UtOTVjZDY5MjRhYjRl
LzEvTU1PdDE3MDBjcm9XZ0V4SkMyYWhDWFpadlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6gHtVHf
XZkx8fogUKYOg3xwjP48jdTa3D3u9IS2r5as6rU040qMax6is5mcO2aIL4EolyBj
pknUav/ZhLWnpZ1tkIcr1CbPWSnFpzUpLSGIfT4ZJzSeCuEYVImiV9TpDOZYr8iW
w7oLQRyG+hRH0C8x2mqEQXWyk1ScVJdj4aEqV1TyyYfe1QJEzx9UcwvhypyQ3KRO
MWZXWQJs0eKoUX403F38XNFAS+sOHu8C6aSQYOrbEKP3slwaYVdODTzrk0x8/oH0
7JOvyeL/uo5KJU6CX2gSqY8jKhhnzf5WGz2LpZcv16cyRiiTOE82bZRpab8EFvHk
hYWSTx5ssHqq/g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:25 2025 by rpki-client