Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: fKd8S4uVnKNLnSj9RN5k5ce8I0JpInUkf7n9yQVO8do=
Subject key identifier: 56:96:D2:9A:8F:F7:23:E1:ED:C2:A3:41:B5:02:17:63:16:45:F2:5B
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 01984777B8FFC14CE1B556C7DBF13355BD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0967
Signing time: Sat 26 Jul 2025 16:01:25 +0000
Manifest this update: Sat 26 Jul 2025 16:01:25 +0000
Manifest next update: Sun 27 Jul 2025 16:01:25 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: ZpeHrRGBCmQBbvVw66XcxrKmgA8SqofDmQk/PByAy4g=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:b8:ff:c1:4c:e1:b5:56:c7:db:f1:33:55:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Jul 26 16:01:25 2025 GMT
Not After : Jul 27 16:01:25 2025 GMT
Subject: CN=5696d29a8ff723e1edc2a341b50217631645f25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:12:30:57:65:b4:a6:ed:2f:87:16:f2:53:
56:f8:fb:b9:17:76:57:a3:71:33:55:22:05:aa:86:
d6:26:b4:ba:04:52:85:b9:8a:ec:98:0d:91:0a:dc:
08:f6:0c:1d:f6:17:1d:01:7d:1e:96:e9:fd:37:19:
6f:cf:3a:9f:25:4e:1d:ca:6a:f0:07:1e:b6:ec:b1:
77:f0:54:87:ea:9f:04:53:7e:a5:ea:74:df:d5:a9:
5b:08:5c:26:b0:c2:dd:51:fa:7c:70:9b:41:38:28:
20:ac:77:b0:e7:99:87:38:53:e1:e7:ac:4f:68:83:
d0:57:5c:bc:31:d0:72:57:86:2a:04:06:a9:22:0a:
0a:ee:0a:11:56:55:43:16:c3:b0:5b:d1:65:0e:ea:
1f:60:df:fc:36:e4:d4:65:9c:7e:a1:49:41:e6:9d:
c2:a7:09:1f:53:97:58:22:84:e8:a5:8c:d5:5a:61:
f2:cb:89:39:4d:c3:49:8f:0e:11:8c:ae:13:70:4f:
a8:cc:b9:5a:cf:a8:42:9f:61:62:c9:2a:9d:57:ab:
7d:6c:cc:92:74:95:a2:8f:ff:71:2c:ad:cd:76:92:
ac:b3:80:80:70:a5:f9:65:0e:2b:97:30:af:7f:b8:
bc:c2:4f:03:89:44:75:c8:a7:dd:b0:bf:72:27:4d:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:96:D2:9A:8F:F7:23:E1:ED:C2:A3:41:B5:02:17:63:16:45:F2:5B
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:78:bf:13:b3:d0:27:e1:08:89:08:4b:30:a2:20:9a:5b:4d:
01:13:d6:f5:12:25:ff:94:f1:74:72:87:35:b4:b6:a4:69:dc:
b9:c9:23:ba:45:f4:8d:55:0c:4e:37:51:e5:bd:a5:7f:a7:3d:
10:ec:c5:19:34:10:ee:8d:d0:c4:ae:0a:8b:56:71:a2:00:01:
8f:cc:f6:63:f9:5c:4b:64:97:28:eb:b5:06:89:67:69:c4:0c:
54:3c:f0:ba:3a:83:16:6a:5e:c6:94:4a:78:0c:7f:75:c0:cb:
b1:28:4a:7f:a4:ef:1f:74:63:9c:f6:9b:56:00:9f:2e:88:3c:
96:c1:d7:fb:b3:33:1d:c8:fa:a9:2d:ba:26:4f:61:b6:a2:09:
f6:f3:42:f4:92:40:15:a5:c6:77:f8:c9:e7:c4:fc:60:44:01:
7f:79:a2:cb:96:56:2b:9b:92:cf:5b:cb:2d:76:aa:cb:a1:34:
9e:e5:6d:e1:26:bc:eb:a4:33:92:62:66:f0:f2:6e:75:64:9e:
a3:70:9b:41:2c:51:7b:31:d8:10:3e:c8:9c:f5:e5:9c:2f:ef:
2f:c7:ea:17:79:c7:ae:6a:32:63:57:38:35:d2:0a:0f:d6:90:
c1:32:ff:8c:a9:0a:4c:89:87:e1:ee:d1:a5:f0:cf:5e:ac:bf:
8b:f9:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:42:07 2025 by rpki-client