Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
File: MTZAKhRELms6FTnWQlASjc3R7Ns.mft (raw, json)
Hash identifier: GtxJLOzKfpSjEQVUrKTIpBf2QWJQdmsotqJPT3riM1A=
Subject key identifier: B7:47:A7:B2:EB:06:E7:36:34:89:3B:5A:26:72:A8:71:57:06:11:14
Authority key identifier: 31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
Certificate issuer: /CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Certificate serial: 019754236225D9C0FC46A48A505691A0C05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
Manifest number: 0113
Signing time: Mon 09 Jun 2025 10:01:34 +0000
Manifest this update: Mon 09 Jun 2025 10:01:34 +0000
Manifest next update: Tue 10 Jun 2025 10:01:34 +0000
Files and hashes: 1: MTZAKhRELms6FTnWQlASjc3R7Ns.crl (hash: NIlRj7xSeTXEfwKYGTTkWN9FvXu8X8nuihGRmyLCeFY=)
2: gk7tvvpNQKzq016DYIQrQnI1zIg.roa (hash: GqU+/Xvx9R7K2mDYSrVU8YpXujBinhqdZQ6UcdPTRQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:62:25:d9:c0:fc:46:a4:8a:50:56:91:a0:c0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Validity
Not Before: Jun 9 10:01:34 2025 GMT
Not After : Jun 10 10:01:34 2025 GMT
Subject: CN=b747a7b2eb06e73634893b5a2672a87157061114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:d7:93:5a:57:fc:16:48:5d:98:4b:c9:3e:
a9:54:b2:c3:9a:59:b0:1a:db:11:4e:76:7b:36:7f:
01:0b:31:83:a3:6e:29:df:1c:3c:6e:e9:97:26:19:
11:d5:ff:6f:a4:fc:87:96:6e:03:2b:3d:df:60:cb:
9e:c2:e2:0f:11:d0:d2:5f:50:d1:f1:ac:86:ea:b0:
32:ad:9c:15:be:fc:80:7e:85:62:3f:46:df:cb:ae:
f5:88:0b:57:ed:01:eb:72:90:c6:03:62:de:87:e2:
d8:1d:75:77:89:10:5b:54:fa:99:d3:65:f1:18:d6:
60:7c:b0:64:d2:62:b6:09:10:3d:b3:90:c4:3c:2d:
d6:54:e0:14:07:69:d7:a3:5d:1d:0a:ac:db:8a:e4:
73:f0:fa:9f:3a:0a:74:52:c8:98:b7:75:ae:53:25:
0e:9b:64:e4:d0:0b:9b:1d:f1:cd:5e:ff:9c:ee:b4:
49:4a:16:f4:a1:05:94:e3:4a:ca:a9:fd:9a:0b:b4:
60:54:41:c2:c3:44:6d:1c:7d:7b:41:7c:52:f8:0e:
a5:22:58:d4:af:aa:d3:e4:ea:8f:f2:a9:10:e3:ce:
b6:c6:ac:83:fd:0d:9d:bb:f6:d8:a7:f7:22:d4:2e:
c8:df:f6:63:7b:3c:6c:67:08:1c:1b:72:90:54:50:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:47:A7:B2:EB:06:E7:36:34:89:3B:5A:26:72:A8:71:57:06:11:14
X509v3 Authority Key Identifier:
keyid:31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:be:28:45:a2:a9:5c:e5:51:d4:ee:67:a9:a3:35:39:a0:a7:
9f:8c:0d:c8:54:c4:cb:e4:09:d8:3f:a2:ac:9d:31:60:dd:d3:
ce:5e:4f:40:d0:04:e3:80:4d:58:2c:c8:48:33:7a:4b:ee:b5:
4b:86:3f:a1:65:93:46:ee:af:20:10:29:ea:fb:45:56:97:74:
2e:f5:ee:d8:6b:6d:34:f1:37:3f:9a:50:98:b0:60:b9:4e:23:
25:87:e5:b6:52:27:ef:33:ae:99:62:95:71:e6:94:2e:3d:b8:
12:70:5b:31:f5:1f:89:18:f4:35:7e:4e:c4:8a:e3:a7:e0:79:
46:9c:2a:40:0d:89:95:f9:fa:75:87:54:79:1e:e4:af:f7:9b:
4c:02:4d:3a:14:37:5a:c7:bc:e8:66:87:4d:f4:48:7d:76:48:
73:18:9e:5d:79:91:87:ff:4b:9e:d7:b6:bb:33:b0:63:be:2f:
78:d9:73:c3:f6:5f:83:91:7b:0e:44:37:c5:38:31:50:d6:e4:
5e:a5:21:02:b6:ba:fa:cd:f0:40:06:90:e5:0d:ef:a1:24:15:
a3:8a:5f:18:32:fa:2e:c8:6e:3d:93:53:de:da:3b:33:12:af:
49:61:c4:39:02:56:e7:04:90:e9:7b:06:b6:ad:b5:60:ac:2d:
7a:9f:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:34:36 2025 by rpki-client