Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
File: MTZAKhRELms6FTnWQlASjc3R7Ns.mft (raw, json)
Hash identifier: aIsE/lBUMEAV3KIx4GaibAFScFApWKt0inD9nBuMYjY=
Subject key identifier: 85:06:1B:A9:C9:33:38:0E:96:74:BD:18:6C:3C:EA:AF:7C:8D:DD:9F
Authority key identifier: 31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
Certificate issuer: /CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Certificate serial: 0198530EB98454E808CBB0A43FD887CFF640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
Manifest number: 0197
Signing time: Mon 28 Jul 2025 22:02:10 +0000
Manifest this update: Mon 28 Jul 2025 22:02:10 +0000
Manifest next update: Tue 29 Jul 2025 22:02:10 +0000
Files and hashes: 1: MTZAKhRELms6FTnWQlASjc3R7Ns.crl (hash: +aA9bSqFmWr3IbPitS2FLm+wQIVetX+IeFWbdFuRSCk=)
2: gk7tvvpNQKzq016DYIQrQnI1zIg.roa (hash: GqU+/Xvx9R7K2mDYSrVU8YpXujBinhqdZQ6UcdPTRQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:b9:84:54:e8:08:cb:b0:a4:3f:d8:87:cf:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Validity
Not Before: Jul 28 22:02:10 2025 GMT
Not After : Jul 29 22:02:10 2025 GMT
Subject: CN=85061ba9c933380e9674bd186c3ceaaf7c8ddd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:2e:8d:3f:c9:8e:f1:35:a6:e3:e0:da:b0:
75:4e:50:f7:6d:77:18:ca:cf:46:bf:28:74:82:68:
6c:2f:56:03:75:c3:cc:b8:f2:65:07:cd:cc:fd:47:
5d:ab:3d:84:3c:2d:f0:a2:f6:db:46:76:83:2b:a0:
15:7a:75:4e:90:3a:da:fa:b5:f7:dd:17:77:f7:ae:
4b:3d:24:f6:c8:24:80:d1:71:49:ae:0d:a5:34:96:
15:9b:6b:e8:99:1f:b7:84:02:b2:79:69:ae:7d:42:
64:0a:19:5a:e5:5a:e6:2e:c7:9e:61:a9:1d:11:6b:
e7:a9:ca:53:bc:ad:5a:80:79:16:63:91:aa:83:78:
6b:a4:81:38:3e:15:69:33:f0:f7:97:c4:00:83:eb:
00:ef:71:aa:9f:9c:dd:88:90:3d:71:73:91:98:12:
7f:42:1e:e2:74:b2:ae:6a:9f:df:8d:2a:05:dd:85:
f8:82:31:e8:2c:26:76:2d:7b:47:43:48:51:d6:0f:
8f:8a:de:c9:66:29:94:ce:54:04:82:45:12:cd:ec:
a8:d0:a6:81:76:5a:77:f0:ee:6e:03:0f:bb:66:e5:
a3:20:9d:9f:50:c0:e5:60:63:c5:63:2e:eb:00:bb:
b9:5c:fb:0d:6d:44:f5:8b:dd:08:87:e6:92:e8:6e:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:06:1B:A9:C9:33:38:0E:96:74:BD:18:6C:3C:EA:AF:7C:8D:DD:9F
X509v3 Authority Key Identifier:
keyid:31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:72:91:8c:ae:45:fa:5c:d7:9e:b3:9e:f2:d8:f8:f4:27:1b:
ee:2a:a6:fa:05:bb:d5:f7:d5:ec:ae:db:82:a2:3d:b7:30:5e:
6b:5b:cf:b7:ea:0c:fb:53:31:6d:12:4d:74:2b:70:ed:a9:4d:
6d:d2:19:54:71:7d:80:0c:89:db:7f:a9:2a:4e:c4:d4:91:08:
8d:e5:c5:40:f6:c5:99:ed:82:1a:d3:07:ca:02:48:96:a5:b4:
96:28:62:db:8b:04:8b:ed:b9:ef:8c:0c:2d:17:4d:34:ad:79:
3c:91:fb:d7:c2:c5:f9:18:54:74:11:ca:5d:7a:39:be:b1:b9:
5a:a4:52:15:a3:13:8c:8c:67:91:aa:48:52:92:e5:8a:a2:1a:
c6:7a:7a:9f:d9:f0:9c:64:a3:88:fb:74:b1:60:69:47:0f:f2:
bc:08:68:91:8a:fd:89:16:9f:b1:73:ce:95:cb:8c:1b:83:fe:
c6:a5:ce:07:0f:e8:6f:25:26:c0:91:b6:50:fe:98:76:7b:c9:
25:9d:74:c2:52:dd:d6:c7:c4:5d:82:b2:aa:f2:70:b6:7d:09:
c7:8b:08:01:3a:eb:cf:46:8f:b6:ba:ba:60:ca:ce:3a:5b:d5:
f1:d9:be:00:ce:e9:66:80:31:a3:64:d6:fd:14:4f:db:36:bc:
26:3a:dc:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDrmEVOgIy7CkP9iHz/ZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMzY0MDJhMTQ0NDJlNmIzYTE1MzlkNjQyNTAxMjhkY2Rk
MWVjZGIwHhcNMjUwNzI4MjIwMjEwWhcNMjUwNzI5MjIwMjEwWjAzMTEwLwYDVQQD
Eyg4NTA2MWJhOWM5MzMzODBlOTY3NGJkMTg2YzNjZWFhZjdjOGRkZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhYujT/JjvE1puPg2rB1TlD3bXcY
ys9Gvyh0gmhsL1YDdcPMuPJlB83M/Uddqz2EPC3wovbbRnaDK6AVenVOkDra+rX3
3Rd3965LPST2yCSA0XFJrg2lNJYVm2vomR+3hAKyeWmufUJkChla5VrmLseeYakd
EWvnqcpTvK1agHkWY5Gqg3hrpIE4PhVpM/D3l8QAg+sA73Gqn5zdiJA9cXORmBJ/
Qh7idLKuap/fjSoF3YX4gjHoLCZ2LXtHQ0hR1g+Pit7JZimUzlQEgkUSzeyo0KaB
dlp38O5uAw+7ZuWjIJ2fUMDlYGPFYy7rALu5XPsNbUT1i90Ih+aS6G4EewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUGG6nJMzgOlnS9GGw86q98jd2fMB8GA1UdIwQY
MBaAFDE2QCoURC5rOhU51kJQEo3N0ezbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVRaQUtoUkVMbXM2RlRuV1FsQVNqYzNSN05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iMDA5Y2YtNTljYS00M2JjLWJkNTEt
YzBhNDI0ZTY1OTczLzEvTVRaQUtoUkVMbXM2RlRuV1FsQVNqYzNSN05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iMDA5Y2YtNTljYS00M2JjLWJkNTEtYzBhNDI0ZTY1OTcz
LzEvTVRaQUtoUkVMbXM2RlRuV1FsQVNqYzNSN05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnKRjK5F
+lzXnrOe8tj49Ccb7iqm+gW71ffV7K7bgqI9tzBea1vPt+oM+1MxbRJNdCtw7alN
bdIZVHF9gAyJ23+pKk7E1JEIjeXFQPbFme2CGtMHygJIlqW0lihi24sEi+2574wM
LRdNNK15PJH718LF+RhUdBHKXXo5vrG5WqRSFaMTjIxnkapIUpLliqIaxnp6n9nw
nGSjiPt0sWBpRw/yvAhokYr9iRafsXPOlcuMG4P+xqXOBw/obyUmwJG2UP6YdnvJ
JZ10wlLd1sfEXYKyqvJwtn0Jx4sIATrrz0aPtrq6YMrOOlvV8dm+AM7pZoAxo2TW
/RRP2za8JjrcBA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:09:25 2025 by rpki-client