Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
File: MTZAKhRELms6FTnWQlASjc3R7Ns.mft (raw, json)
Hash identifier: 85slY0oodlop1+3F9+eJMg9CiGM33GnsGkCFm6m4P8s=
Subject key identifier: F1:C7:C3:88:65:C5:A5:4A:95:EB:64:F1:9E:CE:4C:D3:C7:32:77:84
Authority key identifier: 31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
Certificate issuer: /CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Certificate serial: 01976583BB47CDD1D809B392CA13CC25A191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
Manifest number: 011C
Signing time: Thu 12 Jun 2025 19:00:21 +0000
Manifest this update: Thu 12 Jun 2025 19:00:21 +0000
Manifest next update: Fri 13 Jun 2025 19:00:21 +0000
Files and hashes: 1: MTZAKhRELms6FTnWQlASjc3R7Ns.crl (hash: A0lur3FJ8N+rHugGwLqzAKR8A5mKMgOgG8rhHjtOvfc=)
2: gk7tvvpNQKzq016DYIQrQnI1zIg.roa (hash: GqU+/Xvx9R7K2mDYSrVU8YpXujBinhqdZQ6UcdPTRQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:83:bb:47:cd:d1:d8:09:b3:92:ca:13:cc:25:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Validity
Not Before: Jun 12 19:00:21 2025 GMT
Not After : Jun 13 19:00:21 2025 GMT
Subject: CN=f1c7c38865c5a54a95eb64f19ece4cd3c7327784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:61:cf:4b:42:52:e4:6d:6f:af:94:26:a2:
29:08:78:1d:5c:d3:7f:21:31:33:b3:73:fd:da:8d:
63:a3:b5:6f:c7:54:12:b4:a3:bb:28:27:62:86:00:
5b:e3:61:a4:86:c4:4e:ed:3d:90:f7:02:18:12:10:
38:d3:df:a5:66:a1:dc:8c:a0:06:53:09:ca:07:b4:
4e:22:5c:d0:8a:27:7c:89:b6:a7:55:23:04:b8:01:
a2:9d:3f:4d:18:50:6e:16:90:b9:d9:c1:3d:14:f7:
f6:ab:b2:c0:03:1e:f5:bd:71:db:0a:e6:c9:57:e9:
2d:06:a7:eb:b8:46:73:0c:51:16:58:24:14:dd:8a:
68:6b:b9:fc:5e:0b:28:c7:b6:a3:4e:31:a9:35:53:
03:9d:a6:bc:d2:19:55:6f:8f:3e:25:2a:f0:ee:8e:
06:31:62:56:74:39:31:51:5d:d5:f5:a2:7b:69:5d:
77:07:2f:35:24:69:f1:7d:db:ee:d6:33:d1:1a:76:
a2:a2:f7:a6:ea:26:a9:2f:3b:67:cd:f3:5f:8e:1d:
f4:2a:92:b2:a4:78:67:a3:50:a6:63:e3:2e:f0:30:
e3:93:ac:cf:20:0a:d8:4e:5e:9d:b1:13:88:99:11:
bb:2b:bd:5b:3d:88:24:f8:75:3f:c8:90:ac:05:c9:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:C3:88:65:C5:A5:4A:95:EB:64:F1:9E:CE:4C:D3:C7:32:77:84
X509v3 Authority Key Identifier:
keyid:31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:72:9d:7f:0d:b4:b4:43:55:36:13:4b:22:6c:a0:33:c4:
fb:6a:06:04:01:3b:69:54:51:79:6b:80:2e:52:2b:6f:f0:f6:
bc:eb:b4:fb:80:8e:06:2a:e6:bd:33:79:07:93:b8:1c:57:d7:
e6:0d:a8:63:ac:30:52:e5:6d:3c:69:6b:68:1d:70:15:00:82:
ac:7b:27:37:31:90:c6:0f:3f:49:aa:a5:aa:c2:38:4e:2e:ac:
d1:b1:52:be:16:91:42:a0:cd:a0:d8:be:75:15:75:6d:9d:e9:
99:14:49:05:86:f6:7c:13:15:58:ca:4b:41:7f:1a:8a:93:85:
40:3b:a9:90:2c:de:3c:04:bb:15:45:03:29:e5:83:ee:b5:34:
05:5f:60:bf:56:26:c7:d7:89:48:cc:39:b3:29:5a:2b:9d:7b:
4a:e5:05:3b:b0:34:90:15:5d:95:c7:31:ad:fb:b9:c5:56:e7:
67:b3:08:35:d6:87:f1:25:81:b4:d4:6c:72:95:9a:a8:50:f1:
d6:5f:36:84:c4:a0:b6:eb:39:11:da:c3:c9:40:bf:da:c0:28:
1d:87:4b:ac:10:b3:1b:b7:f6:94:af:ef:33:c5:a9:1a:9b:09:
18:b8:7e:61:31:ac:4f:91:0c:82:02:74:82:92:d3:0b:06:10:
90:f9:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:11:16 2025 by rpki-client