Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: GWTxaLcLQTvtciO1ESOj3wcGtz7Opof8vYb7wE45TM8=
Subject key identifier: 6F:FB:B2:3D:86:33:D3:8F:23:45:09:4C:79:D4:A5:F4:0B:9E:6A:D8
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 01983495808EE3B7507AC1532F08E6360239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0CC8
Signing time: Wed 23 Jul 2025 00:01:09 +0000
Manifest this update: Wed 23 Jul 2025 00:01:09 +0000
Manifest next update: Thu 24 Jul 2025 00:01:09 +0000
Files and hashes: 1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: +7tqPBaN4NGgPV+NpsXRPLmxHRtdwItKSRGjH/j5ez8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:80:8e:e3:b7:50:7a:c1:53:2f:08:e6:36:02:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jul 23 00:01:09 2025 GMT
Not After : Jul 24 00:01:09 2025 GMT
Subject: CN=6ffbb23d8633d38f2345094c79d4a5f40b9e6ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:dc:98:f8:4d:fc:51:86:29:36:1f:bf:70:
8c:ab:51:bd:10:da:fb:ef:b9:26:d4:cc:d9:47:a3:
65:99:4a:e7:7f:5e:91:48:53:c2:d9:c6:00:1f:89:
92:79:08:0c:ad:37:ed:9a:cb:00:c5:96:c9:2e:e9:
83:86:d0:82:9d:12:0d:98:d2:47:b5:54:ad:19:61:
c5:f5:30:b2:76:81:d3:45:be:f8:53:83:85:ef:0f:
21:b7:2e:a4:55:8c:5f:d2:ba:3c:66:eb:21:86:d3:
4b:73:93:e8:5c:43:41:23:5d:8a:8c:f4:cb:93:10:
cf:5c:4f:8b:fe:ae:dd:b3:09:a8:93:04:3b:e9:85:
cb:51:2b:6b:8d:7a:50:4b:ce:3f:57:fc:8c:7d:02:
98:4e:b1:44:b6:e0:ba:8c:9a:a3:35:40:b7:d2:5a:
7b:2e:9f:d0:eb:fa:a9:d1:ef:2e:4e:c4:13:5a:51:
1b:e7:f4:d2:5b:24:f8:9e:62:26:19:b5:b1:ca:a7:
26:4a:d4:fe:5f:91:ab:63:10:4b:23:80:bf:35:5c:
77:e6:5b:a6:0d:b7:f1:4d:31:3b:79:02:a5:b5:52:
15:65:69:ce:bd:e9:59:64:51:42:3d:2c:56:31:5e:
30:55:a2:46:5b:d3:e5:cc:15:6f:f3:26:45:2c:3a:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FB:B2:3D:86:33:D3:8F:23:45:09:4C:79:D4:A5:F4:0B:9E:6A:D8
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:ef:6b:bd:d1:b8:c2:f0:ab:ef:91:47:29:1e:6e:4d:6e:
a0:71:c3:49:f8:55:e7:89:9f:be:17:b1:24:6f:46:f6:b7:ef:
19:b2:b0:4f:25:8d:4d:bc:70:78:fc:d0:1a:99:66:b6:9a:66:
5a:5d:53:6b:e4:cf:60:dc:18:fa:07:19:a4:da:3f:11:5e:e7:
f2:9c:ce:76:90:cc:04:86:8c:3d:53:d6:37:36:bc:9d:14:6a:
02:33:27:e2:72:4c:cf:77:b1:ad:51:dd:a5:80:1b:d6:ac:e9:
47:ba:85:20:73:f3:55:f8:de:d6:6a:cf:7a:79:b5:a1:ff:55:
61:09:aa:01:2b:7f:65:2e:4f:7c:07:c8:b2:3f:14:f9:93:7a:
70:5e:67:75:37:b7:b5:56:20:1e:24:b2:51:00:9b:5c:7f:fc:
7c:80:6d:cd:49:01:49:e5:8a:86:8f:ae:89:f5:aa:8b:1d:9c:
ba:1e:8c:c2:f0:bb:ab:76:07:07:fc:0b:fd:91:10:05:2c:46:
34:ed:71:64:7f:08:85:75:1b:61:23:99:45:3d:b9:ce:d6:f1:
4d:0e:89:ce:d0:9d:34:b8:50:c9:89:4e:4b:19:de:e4:38:31:
63:df:52:78:e8:53:16:35:1e:e2:92:45:2d:89:99:e8:df:2f:
84:05:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:11 2025 by rpki-client