Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: 8+jsdCS4h4QA6ZgNt0U4Kwn8RLrTZdK+9wHBrGtGO8o=
Subject key identifier: A1:EC:3B:F8:AA:B5:C4:2C:35:55:B4:9E:76:1F:92:22:10:5C:72:8A
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 019677C3ADF12CB1CFE68D24486A10981DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 15:00:34 +0000
Manifest this update: Sun 27 Apr 2025 15:00:34 +0000
Manifest next update: Mon 28 Apr 2025 15:00:34 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: w3klJpQQORiWnEyB5U+cAG9ZHXfOfWg6+tXVGKzK4QY=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:ad:f1:2c:b1:cf:e6:8d:24:48:6a:10:98:1d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Apr 27 15:00:34 2025 GMT
Not After : Apr 28 15:00:34 2025 GMT
Subject: CN=a1ec3bf8aab5c42c3555b49e761f9222105c728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:5c:f2:35:f7:19:9a:cf:2d:2a:ac:7b:e4:
5a:99:4f:22:73:e3:00:eb:2c:5d:9a:69:0b:5b:5a:
7a:5e:a5:59:bd:e4:7b:5b:a0:40:cc:85:6a:4c:65:
d6:4f:a3:d9:0f:05:7e:b7:e5:89:b4:24:f5:6b:71:
f0:e3:44:02:c1:b4:76:67:c8:85:ff:20:0d:3e:73:
40:b1:11:5d:6a:f2:f6:0e:cb:e1:85:b9:f6:be:e4:
03:4b:aa:99:38:5a:3f:07:7b:b6:20:10:98:f0:d1:
37:12:d8:8e:ee:d2:8e:5c:7d:d4:ec:38:64:0d:f3:
55:7d:83:65:cd:1c:89:8c:ca:d8:de:a6:52:64:ee:
a7:c3:86:9a:d5:40:42:42:67:1b:45:c5:6e:39:26:
8d:0f:47:2e:76:89:77:14:90:c0:93:62:b1:77:d6:
9f:03:86:ee:85:65:da:e1:d2:91:38:0c:79:8d:e3:
ee:ea:49:1d:cf:ef:db:e9:8f:73:24:fd:81:ed:8f:
69:94:d1:3d:5b:49:c5:c9:d0:80:ed:9e:b2:5b:72:
85:89:fa:4e:e0:0b:3b:90:40:61:49:5f:d9:02:e5:
2a:9f:b4:8c:a2:63:d0:ff:cc:ab:e3:2c:18:ae:5e:
b4:99:f5:16:3b:4d:92:7c:d3:60:c3:80:bc:70:d0:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:3B:F8:AA:B5:C4:2C:35:55:B4:9E:76:1F:92:22:10:5C:72:8A
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3e:46:9d:78:4a:77:22:95:8a:01:da:90:24:df:dc:c9:98:
db:65:b2:16:88:fa:7d:c2:6f:ac:59:db:a8:17:34:70:d5:47:
c4:02:4b:5c:5d:96:da:24:d4:09:70:ea:b4:ce:bd:52:1d:d6:
73:fc:6c:2f:41:7b:0f:b3:a0:b5:18:be:d7:5a:40:59:fd:61:
2c:a4:0d:66:71:71:66:e1:5a:16:a6:ee:7c:5c:22:87:09:d5:
59:aa:7b:92:e6:46:dd:e6:e3:e5:05:5e:5d:86:73:23:0f:b0:
b1:3a:f8:80:8d:89:54:7e:e5:d5:94:e4:eb:d7:2d:3a:e9:f3:
50:28:95:ab:59:b8:90:5e:ca:1a:03:66:07:dc:5d:b7:cb:d8:
81:aa:c8:66:c7:f2:bf:52:c6:72:1e:75:e5:d4:b7:9c:66:22:
3f:26:22:e6:9a:50:88:6f:7e:9e:1e:9b:b2:db:77:1b:c5:d7:
fb:bd:42:11:a0:25:e0:14:aa:d0:e9:67:e0:b3:4b:82:b4:b6:
82:5c:12:aa:16:cb:40:58:04:40:30:45:02:39:a3:2f:f2:00:
d6:84:52:8b:a9:66:4e:2c:a5:41:6d:c9:03:5d:b7:fe:72:c4:
a5:ab:09:de:6e:8c:e1:9f:d5:9b:0a:73:a9:b8:20:22:f5:bb:
c9:ce:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:33 2025 by rpki-client