Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
File: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft (raw, json)
Hash identifier: 2/VXxiyY95axKF5zkYOPURZkec76WVavMMCC1lv5/sA=
Subject key identifier: B1:CC:FF:0D:2F:6A:EB:3E:BB:95:C5:0B:B4:DE:2B:B3:B6:A9:CE:79
Authority key identifier: 30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
Certificate issuer: /CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Certificate serial: 019750B4041469D249519E3F8E600A053D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
Manifest number: 0EF6
Signing time: Sun 08 Jun 2025 18:01:04 +0000
Manifest this update: Sun 08 Jun 2025 18:01:04 +0000
Manifest next update: Mon 09 Jun 2025 18:01:04 +0000
Files and hashes: 1: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl (hash: 1pg2VmSWwlk0bEoI5UAHki80rLznQU5BfhAC9cVASB0=)
2: hfNN3XiVLhZTBEzmZ9kxsFWjtgU.roa (hash: rdvuWCnmeSdDSQrFfaBCbjsr2zsTzqKaLeEHczQ6fHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:04:14:69:d2:49:51:9e:3f:8e:60:0a:05:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Validity
Not Before: Jun 8 18:01:04 2025 GMT
Not After : Jun 9 18:01:04 2025 GMT
Subject: CN=b1ccff0d2f6aeb3ebb95c50bb4de2bb3b6a9ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:a8:dd:5f:b5:52:c4:76:e4:c7:20:0e:e3:
dd:b7:38:e7:8e:08:6f:42:ff:34:4b:94:78:d0:db:
5a:e6:37:b6:be:ad:80:cb:ad:52:b6:44:76:37:40:
78:44:89:a9:c7:b5:fa:e2:db:60:61:b0:fa:11:b1:
ec:fa:e4:df:83:cd:fb:76:23:22:29:99:81:bd:be:
43:d8:26:47:08:da:ef:75:d8:f9:35:91:35:b4:3d:
e5:42:f5:a6:f0:6c:dd:99:5d:1a:5c:50:87:15:a3:
92:48:ac:bd:f0:70:3a:6a:48:57:49:90:5e:b2:db:
9e:25:57:95:87:ec:bd:ce:2e:30:c8:76:0e:03:e5:
e7:a0:dc:44:62:4e:6a:15:b3:ec:6b:c9:e2:45:2f:
92:3d:8b:d5:41:f3:f8:da:9b:d6:f8:78:fa:09:6c:
d3:c1:3a:71:a1:7f:82:f7:37:f2:e9:d8:f5:59:8c:
5d:93:98:81:1f:79:42:c2:21:80:98:4b:bb:a9:83:
40:27:2b:38:37:6d:c9:3b:cb:ac:fc:8d:d0:75:70:
d8:f9:e1:78:bb:da:9c:1d:49:76:60:fb:98:5f:9f:
fa:fe:76:12:79:d8:04:4c:0c:9b:c2:10:08:32:1f:
61:6d:0e:fb:f9:2b:3b:49:c7:da:b0:2c:be:6d:89:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CC:FF:0D:2F:6A:EB:3E:BB:95:C5:0B:B4:DE:2B:B3:B6:A9:CE:79
X509v3 Authority Key Identifier:
keyid:30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:18:c0:dc:38:f7:70:00:c2:31:70:d2:9b:21:24:ca:ba:d6:
a0:c7:b4:79:c8:11:b9:f7:13:75:3c:90:57:35:0f:ea:ff:d1:
15:fd:4e:24:7a:29:91:53:ee:dd:60:f4:fb:26:38:8c:9d:4d:
2e:a4:db:fd:36:a1:aa:f3:00:4e:af:59:b1:5c:24:80:1a:17:
10:11:e9:fd:46:e5:93:46:af:e4:68:db:89:04:55:a8:f7:9a:
0c:35:64:a3:32:99:b3:22:b6:34:b6:41:d5:93:01:09:f4:93:
f9:ee:07:41:2f:52:4c:b2:2b:8f:25:91:ca:50:ef:54:03:90:
d8:11:2e:26:98:1f:77:59:d4:ab:0c:9f:0c:f6:06:a9:c1:2f:
37:b4:e1:3b:5f:ba:7f:b2:49:22:1f:b4:26:c1:55:a3:c2:71:
0c:e8:1c:99:76:a7:1c:b2:fd:37:0e:5f:87:0c:79:36:c6:bd:
d2:f8:3b:b6:59:d9:d8:d0:da:a0:28:68:57:8f:42:b1:48:9e:
89:15:fb:82:8f:71:b2:6a:1e:e8:cb:31:e1:6e:b7:0a:b8:ff:
d7:27:0f:d1:d5:91:0f:08:4f:77:4d:8c:42:dc:b2:5d:c9:dd:
5e:76:87:98:c8:60:01:35:b4:1f:89:b9:37:15:fd:9b:26:fd:
82:c4:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:18 2025 by rpki-client