Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: o0p/eDanHfopAa9h2s0B4N/q4J5EYjSXSpwSM4rO2aQ=
Subject key identifier: FB:1C:41:B1:B5:A7:77:98:57:04:D7:87:45:71:A4:28:64:2B:BD:D4
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 019849651E989A8DB25C5FEC27565E287AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 0A4B
Signing time: Sun 27 Jul 2025 01:00:20 +0000
Manifest this update: Sun 27 Jul 2025 01:00:20 +0000
Manifest next update: Mon 28 Jul 2025 01:00:20 +0000
Files and hashes: 1: 0SGERXpsIldifCTWUfwaAPLWZj8.roa (hash: Wl6639BT2YEzAcDZ1BBEKA7sfTmRzgLCKdjibP72VaE=)
2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: TB35xJIOu2XJPk+yCA7Xy4bT8aA8N2nO3t8kFvUXs3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:1e:98:9a:8d:b2:5c:5f:ec:27:56:5e:28:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Jul 27 01:00:20 2025 GMT
Not After : Jul 28 01:00:20 2025 GMT
Subject: CN=fb1c41b1b5a777985704d7874571a428642bbdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:fa:92:cb:22:12:24:17:17:6c:23:26:ff:
41:a8:d0:9c:08:72:e3:54:07:b5:54:0e:cf:4e:67:
12:b0:75:99:01:73:2b:a2:62:4a:8c:3e:b2:19:82:
fe:0b:67:81:b5:2b:c7:77:b2:a6:56:04:90:50:ca:
11:b1:9d:2a:8b:7a:56:1f:49:8b:42:01:dd:5d:d6:
ca:18:57:ec:c1:99:0d:bb:9e:b3:9e:4b:33:f1:13:
6a:b5:b5:29:e8:8c:18:30:57:0d:38:a7:2c:7e:b3:
bc:35:7b:7c:02:42:c5:99:d0:67:d9:a8:c8:32:a2:
7a:98:63:fa:d9:c6:a6:fd:db:1a:e6:46:d5:5c:e3:
16:6e:aa:bd:97:25:45:bb:1d:e3:c5:46:fa:62:4d:
cf:7e:df:ff:4f:ee:63:50:7f:b8:8d:5f:0d:c7:56:
f7:fa:01:b2:e6:e2:5d:51:59:96:a2:7a:69:ad:b7:
85:85:71:c0:62:e6:2f:a5:b7:94:61:1c:2e:0b:6b:
a3:36:a7:56:65:4f:15:d5:ad:05:68:49:f6:5b:d9:
a3:07:15:9b:66:14:23:0e:87:22:06:a4:08:90:41:
0f:43:4a:a1:5f:87:ec:0d:6d:3d:da:c1:5c:b1:be:
8a:15:2a:00:da:f4:48:56:62:f2:9e:cc:07:58:ca:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:41:B1:B5:A7:77:98:57:04:D7:87:45:71:A4:28:64:2B:BD:D4
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:ca:81:00:3b:27:8e:51:e7:60:8d:31:e1:64:a9:d9:91:
d4:fe:34:e5:d8:79:f7:44:de:6d:3f:54:a1:92:19:e9:46:d6:
cc:79:d6:4c:4e:aa:2d:24:4a:e7:94:61:96:fa:56:06:0b:a4:
d1:12:5b:66:46:2b:1e:dc:05:9f:cc:9b:4c:21:6d:18:28:a0:
fd:56:a4:b9:8c:8b:0a:b5:f9:06:fd:2d:be:cf:75:61:8c:d0:
c7:70:5a:4e:0b:76:ad:77:b5:b6:3e:3c:f0:3f:0b:55:a4:eb:
79:7f:38:b2:e7:0a:31:e7:95:64:f8:f5:3d:3b:b1:9e:f8:b7:
d4:4b:5e:f6:2c:a7:e4:9b:65:2a:af:05:b3:34:f9:d4:8b:bf:
69:05:e3:80:14:b0:28:1f:87:79:1e:60:9c:98:26:89:a9:0c:
3c:d5:86:31:ac:fd:06:24:ec:09:c9:6c:7d:e7:25:7f:aa:fd:
70:98:50:8d:44:0c:84:d5:02:09:08:a0:e4:94:8f:b8:4f:30:
94:88:ab:57:86:39:bf:c4:93:55:ab:ef:89:99:67:8b:39:a4:
1b:b1:01:24:44:9c:29:51:07:ee:59:02:8c:fa:09:a8:80:eb:
19:81:99:00:d6:47:ab:01:a7:34:8f:aa:5c:75:d6:73:96:10:
91:5a:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:02 2025 by rpki-client