Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: MABe3Ng31z46v6dWIxOowR1c1scLDM9UJtMmjOgzT0w=
Subject key identifier: 74:BF:A0:BC:46:8D:38:5F:E8:37:1F:54:E3:21:01:87:80:33:69:F4
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 01985231A61F5E24CCDEDAC99F433F28BCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 18:00:42 +0000
Manifest this update: Mon 28 Jul 2025 18:00:42 +0000
Manifest next update: Tue 29 Jul 2025 18:00:42 +0000
Files and hashes: 1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: cLweebilPiZEYn6T5mRXV9jKmqQJSZMWzxq4PaGr+Uc=)
2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=)
3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:a6:1f:5e:24:cc:de:da:c9:9f:43:3f:28:bc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Jul 28 18:00:42 2025 GMT
Not After : Jul 29 18:00:42 2025 GMT
Subject: CN=74bfa0bc468d385fe8371f54e3210187803369f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:85:a0:36:8f:d3:25:61:b2:68:49:ba:60:
1d:82:8e:0c:28:ee:db:84:87:b5:11:7b:40:f7:47:
75:74:6e:af:48:a1:b7:7a:43:af:9d:5d:6f:e8:77:
e2:dc:c6:54:95:49:6a:b9:a4:5c:1e:05:38:9e:3e:
c0:81:1f:52:ba:54:12:ec:23:27:4a:2c:30:ec:ad:
b6:75:7a:04:c9:bb:f1:a1:61:9c:f3:dd:dc:9b:ac:
25:1a:79:61:6d:ac:2a:37:17:17:a1:85:38:55:4e:
9a:34:be:b4:55:02:06:80:f2:e6:8c:5a:8d:9d:3f:
0f:fc:d1:5a:d0:15:d8:01:9c:83:ff:40:b6:f3:cc:
5f:b3:9f:40:4c:bf:82:d3:e5:59:cd:df:77:05:ed:
56:52:57:11:60:64:a5:3a:a2:30:0b:eb:95:32:2f:
93:0a:27:24:29:e4:e1:cf:82:45:4b:42:4d:25:a0:
23:19:33:68:25:fb:bc:f8:36:f6:6c:79:93:e5:90:
01:fa:0f:c9:4d:dc:bd:6c:51:9f:90:8e:a8:a4:bb:
18:e1:a4:32:63:15:3f:55:fe:96:41:bc:78:f4:62:
48:87:f6:49:be:32:b5:ab:da:f5:b3:c5:a2:ba:e4:
58:fe:50:89:fe:fd:84:96:83:ee:dd:81:99:65:9f:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BF:A0:BC:46:8D:38:5F:E8:37:1F:54:E3:21:01:87:80:33:69:F4
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e6:cb:08:c8:7d:ca:6c:45:be:96:ba:ce:a9:cb:5e:50:47:
8c:10:7a:f2:c2:6d:8f:ab:5b:7b:b3:03:89:30:4e:ef:1b:16:
3c:c7:c6:4c:61:a5:9d:69:b5:fa:65:3f:fb:35:e7:d6:47:46:
09:60:10:a9:a0:ef:e5:ad:b6:0e:42:f2:d4:a6:12:04:c4:3c:
69:42:b3:36:d6:8e:6a:65:42:89:ce:8d:6f:e9:7e:a8:41:e8:
8f:7e:d4:57:45:d8:a9:e7:7e:8d:24:3b:80:63:05:8c:ae:f8:
58:4b:98:f4:58:eb:d1:a5:02:96:9a:4f:ea:c3:38:83:0b:86:
c6:2b:13:2f:08:dc:c1:cf:55:34:c9:fc:38:ef:66:41:7a:78:
be:2d:12:9b:39:a7:ed:84:9f:ee:c4:d4:8d:7d:f0:5b:b4:03:
d4:e2:e9:ff:23:3d:9d:a2:e5:96:68:9a:20:f5:1a:1c:89:21:
f1:8c:41:23:c6:96:e8:39:6e:40:1c:b9:26:3e:80:55:4b:c9:
b6:10:aa:b4:6f:69:0e:e1:25:06:4c:06:cf:3a:7f:75:63:b0:
0f:b7:09:89:5f:44:a5:47:08:a3:e3:76:e7:ec:40:63:b1:2d:
3a:df:59:5f:6c:f9:12:d4:55:d9:aa:5b:64:8f:5e:19:74:4f:
c3:8c:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:23 2025 by rpki-client