Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: 0j9N+PRA7reQhZTw1o1QhWG9xTbeGS2cUaG0bxL7M6o=
Subject key identifier: B3:2C:20:2C:76:37:DA:5E:9B:42:32:3C:48:2C:99:2F:58:18:F6:61
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019847E5624DD9DF4CDDBD7C49E4F0BCA409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 18:01:11 +0000
Manifest this update: Sat 26 Jul 2025 18:01:11 +0000
Manifest next update: Sun 27 Jul 2025 18:01:11 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: DDQYBL1tCGh1uB5Vjmtcb7TMx63ZvdKgk+1wIkQtNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:62:4d:d9:df:4c:dd:bd:7c:49:e4:f0:bc:a4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jul 26 18:01:11 2025 GMT
Not After : Jul 27 18:01:11 2025 GMT
Subject: CN=b32c202c7637da5e9b42323c482c992f5818f661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:9e:c1:4e:45:bb:7c:e1:25:bd:a9:08:ae:
cb:bf:85:2f:e0:6f:e3:19:14:ee:0c:14:ca:8b:2c:
7a:6f:d0:02:7a:f6:f5:7c:ea:5f:d9:dd:50:3b:89:
59:e9:5a:68:66:60:b9:3b:7a:4a:17:79:ad:09:7a:
35:95:b5:58:12:8f:20:e3:65:74:7e:c0:eb:08:b8:
df:26:78:f0:30:59:c6:8d:58:4d:de:9c:f4:40:40:
4a:1b:1f:a1:fd:8b:b2:fd:8d:3b:35:09:8b:1e:59:
3f:be:de:a2:58:bf:26:08:61:78:fb:19:31:14:cd:
4a:ad:81:1d:b0:b1:df:35:79:2b:6b:45:5e:fa:b0:
4c:68:9f:e7:76:b4:75:ed:38:38:11:35:a0:8c:38:
cd:f4:e8:66:ba:b4:02:bd:a6:a2:6b:61:64:29:88:
95:b2:61:13:e2:b9:24:3b:e2:f9:bd:57:57:77:af:
0d:2f:fb:e9:00:f0:fb:62:48:d3:84:a5:c0:30:6a:
85:34:5a:7c:1a:93:c2:81:06:df:f2:95:d2:8f:0f:
73:bb:2b:90:0b:d3:71:95:1c:bb:f8:1a:24:be:e4:
fa:2a:31:0f:01:04:44:8f:69:4b:e1:58:f3:41:1a:
25:d8:8d:8c:66:40:6a:f7:06:5f:b8:84:dd:ea:49:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:20:2C:76:37:DA:5E:9B:42:32:3C:48:2C:99:2F:58:18:F6:61
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4c:4e:ea:97:c6:e4:8e:87:0b:46:fa:1d:6e:e0:ae:bb:d5:
a7:85:70:d6:e5:bc:84:ce:74:44:cd:2b:27:7a:72:d3:de:80:
0d:7c:a1:dc:55:98:94:aa:ed:c8:0f:be:c4:0a:20:a7:09:4c:
88:f9:ce:c1:d9:00:0f:95:a4:91:0b:59:0c:ab:a8:49:bc:67:
1b:76:8b:2d:74:33:bf:53:d6:5b:7e:07:0a:d8:3c:61:b3:ec:
62:94:49:e9:5a:68:f5:38:94:1c:89:8a:c5:31:bf:03:6c:5a:
67:27:f1:ed:78:9c:33:b7:22:89:49:c2:be:c8:28:13:72:86:
62:29:f5:91:e4:c1:86:13:2c:5b:08:c0:b9:20:45:58:f3:9b:
fc:dd:aa:bf:fe:05:ad:46:78:77:e7:e7:2b:be:72:67:70:ec:
9d:00:d4:35:1e:dd:1a:f7:ac:4c:f2:1a:05:af:23:0b:4f:18:
f8:7d:f9:2d:e9:04:99:de:d7:27:44:07:57:57:8b:96:86:4a:
74:a5:56:64:9c:aa:3e:37:f5:9d:e0:6f:e9:38:be:25:f1:68:
91:35:99:3b:88:1e:10:a2:86:fd:a5:8b:64:1f:1d:23:be:04:
18:8f:5f:83:2b:f2:af:bb:cd:40:ec:76:7c:b0:8c:81:7b:68:
57:6a:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:18 2025 by rpki-client