Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: 70DyWuKYf4G7IpN+j7dNewCUUzmzSMcv9xe+Q5o32a8=
Subject key identifier: 31:D2:92:20:6B:94:49:D9:1D:5F:57:CA:06:4D:30:B9:BF:74:4A:46
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 019848F76A26B41C32168EBAA37CA545944A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 1556
Signing time: Sat 26 Jul 2025 23:00:30 +0000
Manifest this update: Sat 26 Jul 2025 23:00:30 +0000
Manifest next update: Sun 27 Jul 2025 23:00:30 +0000
Files and hashes: 1: LgelsY-16hZE8VmZ4UWScnrAkQA.roa (hash: 5MPF2K6ZagDsXMwY0mVJRSAJCcCewM4ZcbU+TqCGJzs=)
2: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: Qx8Zu+NsQdBKuiI3NGZp29s9zRp5WbeUzOpFZjVSX5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:6a:26:b4:1c:32:16:8e:ba:a3:7c:a5:45:94:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Jul 26 23:00:30 2025 GMT
Not After : Jul 27 23:00:30 2025 GMT
Subject: CN=31d292206b9449d91d5f57ca064d30b9bf744a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:75:96:84:f8:4b:1d:da:a2:16:56:a8:85:
5e:39:1f:e3:78:69:d6:91:34:1c:a6:8b:0b:0c:44:
eb:4a:b9:b0:27:7f:dc:4a:31:22:63:a7:aa:a3:0a:
0f:d3:d9:65:7a:2a:c4:33:53:2e:5a:17:39:02:ab:
7f:53:76:89:83:2e:7d:d0:3a:de:fb:9d:96:30:9d:
41:dd:fa:cb:63:2b:d2:2d:21:7c:4a:98:59:3b:d6:
76:78:43:4a:c4:a9:72:be:07:14:15:7c:a9:9f:c7:
fb:97:0c:8e:b1:d0:1d:e1:cd:95:79:1d:f9:22:26:
df:67:3f:9d:03:1e:64:61:23:f1:fb:3a:88:f8:0b:
de:ad:ad:7b:1a:71:44:d5:ec:c4:38:7b:6b:0e:c4:
86:a6:4a:41:7c:8f:19:b3:a9:56:da:32:f4:6b:f7:
18:ba:41:46:df:f8:3b:b2:04:0c:32:80:b1:61:90:
70:79:d7:f0:fb:49:48:db:f4:4d:fe:4b:9e:bf:11:
03:f0:14:18:18:ba:da:43:f2:9a:ec:da:2f:3d:f5:
8f:4b:25:ed:cb:9d:59:a0:d0:02:f9:47:1c:6e:ee:
9a:ed:dd:1e:c8:cb:a3:4c:30:7e:8a:36:2e:b2:b5:
49:99:96:a6:70:4f:f2:f0:02:64:3a:79:0f:1a:31:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D2:92:20:6B:94:49:D9:1D:5F:57:CA:06:4D:30:B9:BF:74:4A:46
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7b:28:5d:9d:6c:29:88:dd:26:6c:53:28:c3:78:ee:4e:cc:
fa:39:90:91:3a:4f:4c:95:62:f2:71:52:cf:9c:57:ab:f6:f0:
37:ba:98:33:cf:ba:04:a0:35:24:c3:64:a6:c3:89:10:56:fd:
0a:60:1d:6d:38:13:39:06:25:57:66:de:13:f8:b6:7d:cc:ff:
58:af:6c:6d:2d:3a:71:07:5b:2e:29:d2:d3:92:09:51:4d:27:
e6:78:77:3c:5d:24:0b:9f:6d:0d:a8:9c:46:72:c7:32:ab:55:
11:78:d0:a4:a4:56:46:ee:5b:d5:9f:ed:72:38:86:fc:16:c5:
4f:e8:79:f3:9a:b8:96:2e:29:d1:40:df:da:e5:65:c2:10:53:
87:d6:a2:08:b9:de:c2:37:3c:76:80:59:f2:b3:cb:f4:cb:f6:
4f:79:b6:aa:b8:5b:31:05:21:bc:df:a0:50:32:9c:03:8a:21:
1f:65:d8:fc:bb:57:2e:0b:4c:e6:3c:c8:99:b0:f4:a2:09:0b:
c2:81:94:5c:7b:de:eb:0e:79:24:65:ad:ef:e0:f4:4a:4e:fc:
66:4e:7c:a1:3a:e9:f2:0b:d2:75:11:1b:77:00:43:d5:9b:0c:
e0:22:ef:2d:d7:d0:e4:26:8a:c1:20:fa:ee:07:2d:07:4e:94:
21:7a:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:04 2025 by rpki-client