Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: UX5GqSwWwIollSHR/DgcpsOe7OFPI5ZSSSXxV+s757o=
Subject key identifier: D5:2C:3D:D1:74:2B:91:23:D7:13:25:8A:78:87:10:AC:3B:8F:D2:3D
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 01983E3D08CDD346D8F532725A5A69D730DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0CCD
Signing time: Thu 24 Jul 2025 21:00:44 +0000
Manifest this update: Thu 24 Jul 2025 21:00:44 +0000
Manifest next update: Fri 25 Jul 2025 21:00:44 +0000
Files and hashes: 1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: LxAoJ/ipWfEy6KIHCBtxk8cWsACGaJBG51Sq6rjA11E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3d:08:cd:d3:46:d8:f5:32:72:5a:5a:69:d7:30:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jul 24 21:00:44 2025 GMT
Not After : Jul 25 21:00:44 2025 GMT
Subject: CN=d52c3dd1742b9123d713258a788710ac3b8fd23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:e6:96:fd:1a:87:06:22:7d:5a:31:57:1c:
96:64:a2:c2:b9:67:5b:c4:7f:a7:70:c1:5e:6a:5a:
73:81:60:98:1a:58:c1:53:8a:16:6e:87:6d:22:83:
37:2a:9d:c6:07:20:bc:14:f5:9a:75:55:b6:a5:48:
41:21:32:15:8f:30:f7:da:76:61:4c:4f:db:a7:6c:
b6:65:6e:67:16:ae:1d:ec:4a:8c:9a:db:28:fa:36:
e0:d6:05:06:4b:d8:da:ff:29:ce:fa:ae:92:7a:8f:
2d:fb:c3:ec:21:5f:cb:48:63:4d:85:f5:4f:0c:11:
d3:5b:da:a0:6a:70:88:7b:c7:64:4c:ed:df:b8:31:
11:2e:6d:b0:d4:1e:51:41:12:d4:3e:91:c5:5d:9b:
24:08:be:99:35:d0:f8:9d:cf:fb:9c:80:11:4c:68:
bd:71:41:b6:19:d0:11:33:87:eb:53:04:16:43:a8:
0b:b0:10:f7:37:a9:9e:2b:e6:b1:cc:72:2d:47:32:
06:0d:7f:ee:c6:3a:c9:d0:fe:db:71:96:b9:7b:5a:
e0:70:6f:1d:28:5b:6e:19:9f:ed:ca:ee:f2:e8:0b:
46:73:eb:2f:ef:7b:d4:92:03:39:2f:75:52:24:87:
64:36:b0:97:84:3f:b1:96:3d:2c:4e:22:c4:e1:d6:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2C:3D:D1:74:2B:91:23:D7:13:25:8A:78:87:10:AC:3B:8F:D2:3D
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:d3:85:4c:34:28:05:9f:1b:46:24:cc:4e:77:58:54:f4:
a0:48:be:3b:0a:a3:df:9a:1c:15:f1:32:c1:70:c6:78:c2:30:
77:62:32:d7:f7:f3:67:ff:ba:cf:4d:1b:2c:1d:13:7b:3e:ce:
d9:26:22:53:3a:19:8f:39:2c:d3:c1:fb:8a:c5:50:82:89:86:
3a:be:7c:f6:03:58:27:3d:98:b0:40:75:56:fc:39:00:29:84:
3e:5a:3f:a4:5f:e1:c5:05:a0:86:55:30:79:84:06:65:c5:ec:
ef:e4:1d:db:19:16:48:33:bd:33:4b:6c:a2:7e:0f:7b:39:66:
26:b3:a2:5e:b7:58:06:af:43:a4:cf:f1:ae:ba:7d:58:af:82:
36:cb:85:81:e3:99:65:a9:a0:fe:a3:07:15:0e:0c:c9:ef:b9:
84:8e:5c:3b:72:c1:53:23:6e:c5:5a:be:60:a8:12:7b:11:d3:
7c:4e:45:29:7d:b9:fe:72:67:64:b1:01:c8:3b:dd:5c:5d:d1:
64:10:90:16:46:5c:6d:5d:1f:38:8e:d8:23:36:20:a7:a9:d0:
7e:2a:68:40:be:3f:bd:65:f8:71:b1:79:f2:a0:4a:3c:a9:29:
bb:1a:06:3d:11:1d:90:6a:c2:56:2c:99:ca:63:ed:36:0a:68:
0b:45:8f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+PQjN00bY9TJyWlpp1zDbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0
MDE2MTMwHhcNMjUwNzI0MjEwMDQ0WhcNMjUwNzI1MjEwMDQ0WjAzMTEwLwYDVQQD
EyhkNTJjM2RkMTc0MmI5MTIzZDcxMzI1OGE3ODg3MTBhYzNiOGZkMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm3mlv0ahwYifVoxVxyWZKLCuWdb
xH+ncMFealpzgWCYGljBU4oWbodtIoM3Kp3GByC8FPWadVW2pUhBITIVjzD32nZh
TE/bp2y2ZW5nFq4d7EqMmtso+jbg1gUGS9ja/ynO+q6Seo8t+8PsIV/LSGNNhfVP
DBHTW9qganCIe8dkTO3fuDERLm2w1B5RQRLUPpHFXZskCL6ZNdD4nc/7nIARTGi9
cUG2GdARM4frUwQWQ6gLsBD3N6meK+axzHItRzIGDX/uxjrJ0P7bcZa5e1rgcG8d
KFtuGZ/tyu7y6AtGc+sv73vUkgM5L3VSJIdkNrCXhD+xlj0sTiLE4dZLoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUsPdF0K5Ej1xMliniHEKw7j9I9MB8GA1UdIwQY
MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt
ZDQ3YmQ3ZDAxOTJmLzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm
LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBXThUw0
KAWfG0YkzE53WFT0oEi+Owqj35ocFfEywXDGeMIwd2Iy1/fzZ/+6z00bLB0Tez7O
2SYiUzoZjzks08H7isVQgomGOr589gNYJz2YsEB1Vvw5ACmEPlo/pF/hxQWghlUw
eYQGZcXs7+Qd2xkWSDO9M0tson4PezlmJrOiXrdYBq9DpM/xrrp9WK+CNsuFgeOZ
Zamg/qMHFQ4Mye+5hI5cO3LBUyNuxVq+YKgSexHTfE5FKX25/nJnZLEByDvdXF3R
ZBCQFkZcbV0fOI7YIzYgp6nQfipoQL4/vWX4cbF58qBKPKkpuxoGPREdkGrCViyZ
ymPtNgpoC0WPDw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:07:13 2025 by rpki-client