Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: B2DlWz+doMhcgnJBMW6wqqf+pPc8GfPC928mHI4H8fs=
Subject key identifier: F1:88:EA:12:B4:2C:2E:48:34:7F:70:7B:59:16:A2:19:5D:75:BD:10
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01984A77D5B05FC6A299F7E3D37EF4016884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 0156
Signing time: Sun 27 Jul 2025 06:00:24 +0000
Manifest this update: Sun 27 Jul 2025 06:00:24 +0000
Manifest next update: Mon 28 Jul 2025 06:00:24 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: OMTXKUyzV3zO8oEzHXfDQXSvHN4B2Csw40Tuzd23Vpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d5:b0:5f:c6:a2:99:f7:e3:d3:7e:f4:01:68:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Jul 27 06:00:24 2025 GMT
Not After : Jul 28 06:00:24 2025 GMT
Subject: CN=f188ea12b42c2e48347f707b5916a2195d75bd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:d1:88:90:32:68:68:79:49:55:db:b9:43:
ec:e9:a5:66:fe:b2:5a:96:58:ab:71:0b:f0:65:ae:
51:a1:82:c9:a6:99:91:0c:1e:ac:4a:ed:a6:99:35:
1b:b7:0d:1c:bd:aa:f3:39:93:e6:c4:52:51:e4:0f:
f7:30:94:cc:5b:a1:12:5b:50:fb:2c:b7:14:11:23:
15:7c:01:87:e9:8f:c6:db:59:0d:cd:ab:c4:1f:0a:
ba:36:db:21:01:7b:8e:0e:7e:77:45:b2:72:de:e2:
42:67:7e:20:33:b2:d7:c9:5c:4c:42:90:b5:27:bd:
5c:c8:4c:c0:a9:c0:db:41:a0:4b:37:3f:0b:50:c2:
d7:ed:71:ac:dc:7d:7a:5e:3e:55:3b:97:f3:4e:fa:
00:f1:5b:ad:b8:89:1d:e4:ba:75:d7:c5:2e:76:87:
ac:d6:f2:b4:61:b3:2c:90:bd:a5:66:78:80:d0:9f:
4d:42:aa:1f:95:76:38:ab:49:35:68:3a:bd:20:df:
0d:01:2e:cd:0a:a0:f8:7c:37:84:bb:61:9d:84:e2:
1f:4e:5c:0b:a5:66:4b:06:17:ce:91:91:aa:68:ed:
8b:99:fb:cc:3f:b8:9a:62:d6:af:eb:2c:6c:4b:75:
b3:cc:22:65:63:a2:41:5f:79:30:2d:0f:81:d5:d0:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:88:EA:12:B4:2C:2E:48:34:7F:70:7B:59:16:A2:19:5D:75:BD:10
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:74:ec:93:01:b4:aa:42:32:5d:c6:48:34:57:59:0e:6f:69:
77:56:dd:0d:73:59:53:aa:a0:95:c3:64:8d:15:71:52:26:e7:
d7:5f:3c:71:ce:e5:46:f8:b4:52:50:ed:fe:13:c1:a5:8e:ab:
79:d0:e2:d6:c9:b6:1c:91:09:36:32:c2:f7:0c:98:21:7a:ad:
dc:d4:27:41:ce:a6:e7:a4:a6:f4:6e:e1:00:23:c4:a4:89:40:
61:bb:15:40:9d:6c:49:8c:8d:a8:63:ec:72:df:c0:5c:e7:3e:
6d:28:5b:1f:51:02:41:97:cd:cd:44:4f:4f:ca:d9:00:57:be:
af:61:fa:7c:ac:69:a7:3f:36:bd:5d:72:c0:b4:cc:6c:07:9d:
38:8f:63:26:12:8d:0f:82:31:75:3c:7d:7b:8b:90:d0:26:e5:
db:3d:a2:ae:48:48:cf:02:1f:29:f1:30:66:d2:4a:3c:af:9e:
6d:3e:e0:1c:02:63:b4:66:0d:03:63:f9:03:4b:25:78:2d:2e:
9a:0e:df:cb:75:b7:fd:16:86:0d:29:90:86:75:19:a3:35:19:
c1:2e:88:e6:a3:9e:ca:27:c9:53:0b:0f:01:94:fc:12:73:81:
ff:df:7a:ee:b2:7a:1e:d0:1c:16:c2:6c:ba:c4:05:1f:f3:31:
01:33:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:44 2025 by rpki-client