Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
File: MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft (raw, json)
Hash identifier: DEJMIUKWsCz8jhtgXI7iSzChLetyuQfAq85a5RUH1Eo=
Subject key identifier: E2:C2:6F:45:48:60:F9:51:E8:2A:A1:9A:DB:68:D0:74:53:4D:3E:B9
Authority key identifier: 31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
Certificate issuer: /CN=3195f73419e822329794cf17fba7e93f375374a9
Certificate serial: 019847E55FA80AB4A6A028319DA98CA2DD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
Manifest number: 11A6
Signing time: Sat 26 Jul 2025 18:01:11 +0000
Manifest this update: Sat 26 Jul 2025 18:01:11 +0000
Manifest next update: Sun 27 Jul 2025 18:01:11 +0000
Files and hashes: 1: MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl (hash: 3f+hxSQ+s05aMILkWJ92oez6g1GYalHmTJSTVs8oo90=)
2: SCHcZAvBuEDabGE8ZnvuGrNm6LM.roa (hash: +7HN05BMaB78AnyjOqZ5Q8EXtIVzWFh5zSmSPi10HzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:5f:a8:0a:b4:a6:a0:28:31:9d:a9:8c:a2:dd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3195f73419e822329794cf17fba7e93f375374a9
Validity
Not Before: Jul 26 18:01:11 2025 GMT
Not After : Jul 27 18:01:11 2025 GMT
Subject: CN=e2c26f454860f951e82aa19adb68d074534d3eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:c3:8a:9f:0e:64:d8:a4:cc:12:1e:53:6d:
d6:b2:45:c9:f6:6c:88:28:0a:0f:2c:45:b8:bf:39:
68:e8:08:c1:ac:b9:91:74:9d:94:ed:6b:4a:3e:32:
7d:d7:2a:b8:5a:fb:83:a4:d2:bd:f4:51:2f:d7:6d:
5b:9c:2f:e5:2e:96:91:12:5f:31:22:ea:c7:cd:a6:
95:f2:e5:2f:96:97:5f:65:bc:91:e2:89:50:38:7f:
26:dc:44:94:d2:77:53:2a:55:5a:09:39:b2:a4:7a:
e8:a1:31:52:d0:36:c3:80:39:3b:dd:1f:a3:b0:88:
6e:5e:d9:52:5e:6c:95:49:4b:a1:69:74:d7:26:25:
4b:99:59:ac:99:8a:94:5e:15:88:a8:02:c1:2a:41:
80:a3:5e:65:5d:a5:2c:19:4a:d9:ca:c0:52:bb:bb:
30:cb:a7:6d:8b:d6:86:4a:f3:ae:07:6f:ff:20:9e:
18:63:db:97:0f:fc:18:34:61:8e:8b:1b:92:93:6d:
c8:12:fa:4f:df:a0:c6:63:78:2a:9c:0e:b3:6f:d6:
05:ea:22:61:c3:b8:44:82:53:e9:53:e8:4e:bf:e9:
ac:75:e9:88:64:22:29:6e:12:40:59:92:a6:b0:fa:
db:a3:f8:6e:a3:d7:bb:3f:c9:19:59:a1:60:df:8c:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C2:6F:45:48:60:F9:51:E8:2A:A1:9A:DB:68:D0:74:53:4D:3E:B9
X509v3 Authority Key Identifier:
keyid:31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a7:c6:3f:eb:cf:15:54:6d:4e:dd:ac:34:d1:14:d8:47:d9:
95:51:9b:98:89:46:c5:73:f3:e6:cf:0b:de:54:99:f0:6d:6a:
ca:cd:44:d1:49:a7:d0:b8:af:c3:24:ff:4d:04:eb:5b:df:e1:
0d:a0:a5:25:2b:3d:6b:65:b4:3b:26:60:5c:75:cc:c5:84:1d:
5a:8f:bd:92:48:11:bf:85:0a:0c:3c:36:6f:e0:6b:86:77:b5:
a8:65:6f:1b:81:64:18:cd:e2:e7:74:85:b2:23:78:8b:62:a8:
fe:df:75:63:5f:a6:e8:10:6e:c7:a3:ca:4a:26:f9:71:23:d4:
fa:dd:fc:53:f4:76:6a:15:92:dd:3d:76:db:50:01:04:59:4e:
aa:ba:86:c8:56:38:ca:60:f8:6f:1b:9b:6b:eb:70:dc:95:2e:
6e:cd:87:e5:f5:96:ea:e5:dc:c8:bc:28:54:1c:d1:71:22:80:
95:ac:15:39:45:aa:26:26:78:1b:02:23:62:67:a2:2e:13:9e:
a1:86:b2:01:f2:14:b4:3a:3e:58:40:15:41:95:d5:98:cc:33:
97:78:8f:3c:81:8e:39:cc:f5:cd:06:23:7a:1f:3e:69:0c:33:
f4:df:fe:0b:65:b2:13:19:aa:bd:ad:f0:af:aa:04:0c:7f:b0:
db:bb:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:55 2025 by rpki-client