Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: 93Wuc2qxihyy563Rr4snP8/ghrHMpyTtTNJPdBbgwwE=
Subject key identifier: 91:6E:27:69:4F:C5:9A:44:BA:56:4D:5D:38:14:3B:78:23:0B:C7:82
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 01987B9C6DC3F5733AA1B43DE2C3DA519AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 19:01:45 +0000
Manifest this update: Tue 05 Aug 2025 19:01:45 +0000
Manifest next update: Wed 06 Aug 2025 19:01:45 +0000
Files and hashes: 1: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: /CrQHbj+Q1IDgCBVxIUzLD77ZxzCFeqZYHUua+K/W48=)
2: l-uO9C6tKcC2lkHq5_ltCjByOUs.roa (hash: TUNIXLUXFg+4nA9Zr3IEFRMFcebg5+gpL40XGW7pBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:6d:c3:f5:73:3a:a1:b4:3d:e2:c3:da:51:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: Aug 5 19:01:45 2025 GMT
Not After : Aug 6 19:01:45 2025 GMT
Subject: CN=916e27694fc59a44ba564d5d38143b78230bc782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:5e:e2:b7:c0:d4:06:c7:7c:d9:e1:9e:07:
51:68:f5:26:c0:00:d8:19:bc:31:d8:78:27:4a:84:
8d:42:b8:80:d1:2a:84:13:61:5f:fc:32:63:12:3c:
3c:3c:37:ef:1b:65:b4:71:52:79:76:94:6a:5f:b9:
3b:d1:21:39:79:41:09:6b:6f:36:24:e8:16:ab:2c:
f9:17:fc:e9:1f:e3:5f:0b:48:33:bb:16:22:c1:28:
b5:0e:05:75:1c:26:8a:db:9b:2d:12:a4:86:85:03:
63:10:41:2d:74:92:50:46:55:88:b5:17:2e:77:d9:
3e:8a:97:2e:2b:7d:60:07:4a:5d:56:8b:6f:55:16:
dc:37:f6:c4:17:d4:87:83:73:8e:d3:88:41:29:8f:
2a:dc:a6:15:3c:05:c9:2e:8b:28:47:13:3f:24:b7:
ff:94:6c:95:0c:d3:a9:79:51:84:c1:ac:1e:8a:05:
bb:ce:3f:5a:ff:7a:ad:4c:a7:18:92:fb:a8:37:3e:
e7:e4:81:c8:b2:6e:ab:81:03:6d:78:46:2b:2c:4e:
b3:08:84:36:5e:90:a1:53:a2:f9:bc:6b:e5:eb:ae:
f5:59:f3:8c:27:b2:92:a4:da:dd:a0:dc:1e:49:8a:
cd:7c:bb:9e:9c:21:05:af:a2:05:58:34:b7:d2:64:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6E:27:69:4F:C5:9A:44:BA:56:4D:5D:38:14:3B:78:23:0B:C7:82
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:45:85:38:af:89:13:d5:01:cb:e6:32:8d:b2:df:8d:85:
c7:e0:c3:29:ca:a3:3f:4f:2d:15:ea:0e:59:30:e2:d1:ed:05:
cc:f3:8e:8a:29:f8:2d:29:41:dc:07:45:12:ec:db:e0:f8:9b:
e9:4a:bb:c2:0f:ad:73:17:14:69:21:b4:cb:7f:e3:2d:21:85:
d1:f2:02:97:e0:e4:4f:c2:fa:88:cc:61:f5:99:8d:99:49:e3:
05:00:2e:f5:db:ac:26:e0:99:a2:d4:7d:cb:f2:1f:c7:80:fa:
77:03:b8:3c:ef:8d:1c:44:49:4f:4d:1e:95:7a:81:37:f3:41:
db:30:ce:af:b3:cb:25:c8:7f:46:e6:29:80:8e:09:05:ca:1f:
a0:d9:05:59:f6:29:76:1d:bd:d8:39:e3:24:a5:d3:e2:a5:90:
fb:1b:e4:c8:0d:e1:d4:bd:5e:34:45:3a:75:fc:5b:d8:a4:db:
f8:82:5a:6d:0e:e7:f4:28:ce:e8:df:c8:df:44:d1:ec:9a:25:
31:a1:4d:eb:81:53:04:80:7b:cf:5e:48:74:ca:40:51:45:24:
0c:07:59:ec:37:d2:dd:8c:33:a3:b4:20:64:f9:d6:bf:57:ff:
0c:05:63:a5:f6:f9:07:3d:d0:eb:67:88:20:b6:19:fd:e8:11:
dc:b1:34:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nG3D9XM6obQ94sPaUZqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZGQwYjcwODUwZTFmOTg5NTY1OGVkYWJlMjhiOWQ4ZDll
YTAxN2MwHhcNMjUwODA1MTkwMTQ1WhcNMjUwODA2MTkwMTQ1WjAzMTEwLwYDVQQD
Eyg5MTZlMjc2OTRmYzU5YTQ0YmE1NjRkNWQzODE0M2I3ODIzMGJjNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzle4rfA1AbHfNnhngdRaPUmwADY
Gbwx2HgnSoSNQriA0SqEE2Ff/DJjEjw8PDfvG2W0cVJ5dpRqX7k70SE5eUEJa282
JOgWqyz5F/zpH+NfC0gzuxYiwSi1DgV1HCaK25stEqSGhQNjEEEtdJJQRlWItRcu
d9k+ipcuK31gB0pdVotvVRbcN/bEF9SHg3OO04hBKY8q3KYVPAXJLosoRxM/JLf/
lGyVDNOpeVGEwaweigW7zj9a/3qtTKcYkvuoNz7n5IHIsm6rgQNteEYrLE6zCIQ2
XpChU6L5vGvl6671WfOMJ7KSpNrdoNweSYrNfLuenCEFr6IFWDS30mSSNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFuJ2lPxZpEulZNXTgUO3gjC8eCMB8GA1UdIwQY
MBaAFDDdC3CFDh+YlWWO2r4oudjZ6gF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4Njgt
ODEwZGM5ZTFhYTU0LzEvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mY2EyYWUtMjVmYy00NDRiLWE4NjgtODEwZGM5ZTFhYTU0
LzEvTU4wTGNJVU9INWlWWlk3YXZpaTUyTm5xQVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY5FhTiv
iRPVAcvmMo2y342Fx+DDKcqjP08tFeoOWTDi0e0FzPOOiin4LSlB3AdFEuzb4Pib
6Uq7wg+tcxcUaSG0y3/jLSGF0fICl+DkT8L6iMxh9ZmNmUnjBQAu9dusJuCZotR9
y/Ifx4D6dwO4PO+NHERJT00elXqBN/NB2zDOr7PLJch/RuYpgI4JBcofoNkFWfYp
dh292DnjJKXT4qWQ+xvkyA3h1L1eNEU6dfxb2KTb+IJabQ7n9CjO6N/I30TR7Jol
MaFN64FTBIB7z15IdMpAUUUkDAdZ7DfS3Ywzo7QgZPnWv1f/DAVjpfb5Bz3Q62eI
ILYZ/egR3LE0gw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:42 2025 by rpki-client