Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: RGV19f036XKxJR/I+JQF6uNHLKkFF2sVTGKSeLKvzUY=
Subject key identifier: DD:A5:C3:40:E2:9D:9C:8A:24:98:EE:D9:1B:0F:99:2B:C8:D1:07:87
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 01974A7AAD8F14506A04A99ED8A9BCE8ADAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 08E4
Signing time: Sat 07 Jun 2025 13:00:43 +0000
Manifest this update: Sat 07 Jun 2025 13:00:43 +0000
Manifest next update: Sun 08 Jun 2025 13:00:43 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: 9NDC94CeF5cY+pMgG45RV8YLxDGE82ud0fygBQTdoAQ=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ad:8f:14:50:6a:04:a9:9e:d8:a9:bc:e8:ad:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Jun 7 13:00:43 2025 GMT
Not After : Jun 8 13:00:43 2025 GMT
Subject: CN=dda5c340e29d9c8a2498eed91b0f992bc8d10787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:7b:3d:4a:1a:45:00:98:9d:6d:89:44:d4:
fe:05:ed:b0:1a:c1:75:b6:e3:44:55:4a:60:c1:43:
b9:86:75:13:77:33:74:2f:e8:99:fd:6b:47:dc:ee:
80:a7:eb:c1:c6:b7:3f:e1:56:78:c3:35:8f:4a:59:
b4:f3:a4:c6:66:29:ab:3f:b5:df:35:7f:5f:21:10:
0d:a1:25:59:28:25:72:e6:e2:ca:34:19:9f:64:30:
e8:9e:cd:11:4c:28:94:cf:a9:c4:c5:c4:94:eb:8d:
76:f9:ea:ed:f0:92:bd:02:fa:72:6b:4b:d4:b1:1c:
ab:e8:e8:e0:25:09:73:f6:fd:99:59:87:bd:f2:a5:
0a:03:3e:c5:3e:d7:6c:8f:07:64:22:bf:1f:46:58:
3f:ee:c9:39:33:4d:44:1a:e2:b7:81:6b:ee:02:70:
bf:4b:f6:7a:b4:92:1d:32:61:9d:63:42:85:06:d8:
9f:21:e6:aa:fc:97:a8:8b:c6:d7:e0:5e:c6:3f:b3:
5d:70:c0:f2:79:6e:b6:95:d8:ce:51:9a:3c:13:ae:
6c:85:72:17:61:01:a3:8c:30:71:1a:80:4f:17:de:
3c:d7:17:4a:be:4f:24:4d:8f:ec:4a:b5:bb:38:45:
ca:d1:82:d4:63:f0:01:07:b4:82:3d:30:56:42:5b:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:C3:40:E2:9D:9C:8A:24:98:EE:D9:1B:0F:99:2B:C8:D1:07:87
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:00:5a:bf:89:45:6d:9f:8b:cc:01:6e:6d:bc:20:1a:a2:b4:
c5:d0:e6:d5:33:7e:ab:65:f6:2d:6e:3e:61:a8:e1:9f:e0:d7:
02:ae:e6:37:74:37:f2:20:a4:36:77:75:00:b1:d6:4e:e5:28:
04:37:be:a8:8e:99:42:12:5a:09:f5:5a:68:77:e1:64:cb:73:
fc:10:d8:8f:92:6c:81:80:a5:aa:e8:a8:df:13:94:bd:bc:b4:
71:19:78:91:70:aa:3e:f1:df:51:cb:fa:81:9f:de:fb:7f:3f:
3d:61:f0:9c:8c:70:52:b7:36:81:74:46:f3:c2:8a:45:1e:80:
21:3b:81:b6:49:ae:f1:98:29:00:56:f3:03:67:02:f7:e6:f6:
92:dd:25:3c:ce:d1:4b:f6:cc:01:1d:24:b6:b0:2a:72:48:49:
e1:27:d6:2f:3f:48:a2:4c:fb:20:73:7f:72:bc:40:8c:d1:c2:
ce:ee:c6:c2:88:61:75:ca:8b:34:a6:98:91:74:d5:ca:fb:d5:
26:98:57:af:01:ac:ef:bb:88:74:09:02:4f:3c:bb:b9:cf:37:
07:72:e0:e8:05:16:a7:e0:17:18:90:9a:21:b1:28:65:71:4a:
0a:73:2f:be:95:d2:28:83:22:6a:0a:7f:d5:cf:61:85:0b:9d:
38:d3:85:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeq2PFFBqBKme2Km86K2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzI4N2UyM2JlZTY3Y2E2NjJmYmQ3NzlmY2JjMTgyZWM1
NTNiZTMwHhcNMjUwNjA3MTMwMDQzWhcNMjUwNjA4MTMwMDQzWjAzMTEwLwYDVQQD
EyhkZGE1YzM0MGUyOWQ5YzhhMjQ5OGVlZDkxYjBmOTkyYmM4ZDEwNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx417PUoaRQCYnW2JRNT+Be2wGsF1
tuNEVUpgwUO5hnUTdzN0L+iZ/WtH3O6Ap+vBxrc/4VZ4wzWPSlm086TGZimrP7Xf
NX9fIRANoSVZKCVy5uLKNBmfZDDons0RTCiUz6nExcSU6412+ert8JK9Avpya0vU
sRyr6OjgJQlz9v2ZWYe98qUKAz7FPtdsjwdkIr8fRlg/7sk5M01EGuK3gWvuAnC/
S/Z6tJIdMmGdY0KFBtifIeaq/Jeoi8bX4F7GP7NdcMDyeW62ldjOUZo8E65shXIX
YQGjjDBxGoBPF9481xdKvk8kTY/sSrW7OEXK0YLUY/ABB7SCPTBWQlsHmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2lw0DinZyKJJju2RsPmSvI0QeHMB8GA1UdIwQY
MBaAFDMyh+I77mfKZi+9d5/LwYLsVTvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUt
NDljMDcyYTgyNTk1LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUtNDljMDcyYTgyNTk1
LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADABav4lF
bZ+LzAFubbwgGqK0xdDm1TN+q2X2LW4+Yajhn+DXAq7mN3Q38iCkNnd1ALHWTuUo
BDe+qI6ZQhJaCfVaaHfhZMtz/BDYj5JsgYClquio3xOUvby0cRl4kXCqPvHfUcv6
gZ/e+38/PWHwnIxwUrc2gXRG88KKRR6AITuBtkmu8ZgpAFbzA2cC9+b2kt0lPM7R
S/bMAR0ktrAqckhJ4SfWLz9Iokz7IHN/crxAjNHCzu7GwohhdcqLNKaYkXTVyvvV
JphXrwGs77uIdAkCTzy7uc83B3Lg6AUWp+AXGJCaIbEoZXFKCnMvvpXSKIMiagp/
1c9hhQudONOFGg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:55:56 2025 by rpki-client