Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: Ro4nbNwP2Fmg3AiSOFEhZvJ5i+aOLy7JkC4GpLZM25A=
Subject key identifier: 68:27:1D:F2:5D:B9:62:A0:B3:36:93:05:FA:2F:75:EC:8D:D6:3C:C4
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 019748F9DFAB6ECFBE73FC599F9B1EE5AE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0C4E
Signing time: Sat 07 Jun 2025 06:00:24 +0000
Manifest this update: Sat 07 Jun 2025 06:00:24 +0000
Manifest next update: Sun 08 Jun 2025 06:00:24 +0000
Files and hashes: 1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: i9NozrXgPwwhEo144DGlwiR5nPOuxeUL/nPRgYAV3Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:df:ab:6e:cf:be:73:fc:59:9f:9b:1e:e5:ae:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jun 7 06:00:24 2025 GMT
Not After : Jun 8 06:00:24 2025 GMT
Subject: CN=68271df25db962a0b3369305fa2f75ec8dd63cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:0b:0b:91:13:2e:af:fe:cc:19:d7:43:64:
1e:29:1c:12:0b:67:63:e3:fb:8a:13:df:38:6b:93:
5e:7b:01:44:9b:b3:61:60:b6:ad:76:42:77:48:25:
2f:d8:b9:93:f0:12:ad:d5:6e:e7:1a:b2:cc:bc:2e:
eb:a4:fa:0c:57:40:fd:5e:fb:79:9d:81:39:87:57:
46:d5:39:9d:ea:ec:77:99:b6:f2:98:f2:12:2b:9d:
81:2d:2f:9e:1d:2d:02:90:c6:2a:73:67:d5:a6:11:
0a:92:e3:04:69:b5:e1:07:b2:bb:a5:cb:85:83:1b:
04:88:fd:21:06:15:72:9f:47:e6:c7:c8:41:5f:db:
f1:7b:14:96:72:ff:f2:46:14:77:2b:c8:48:2b:37:
cb:3b:c0:1d:ff:04:d6:bd:c8:0b:1b:dd:33:fa:51:
f0:e7:21:c8:9c:1f:cf:5f:ca:22:74:49:67:cc:56:
c6:9b:df:7b:f0:ed:b3:6e:07:51:86:60:b8:3b:02:
bc:f7:1f:02:57:b8:f9:5e:0c:a2:a8:c2:aa:97:58:
31:f0:00:c9:97:05:2c:d8:b1:63:3f:c6:26:ab:83:
42:5f:ed:d5:ef:04:39:ab:63:96:3e:be:99:fa:2b:
7d:94:c5:aa:98:9b:60:48:a8:77:9c:0f:2d:34:96:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:27:1D:F2:5D:B9:62:A0:B3:36:93:05:FA:2F:75:EC:8D:D6:3C:C4
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:56:95:83:d0:ab:b7:18:4c:0d:c3:93:0a:85:62:db:04:
6f:94:2b:cd:ab:83:4e:05:d7:27:bf:ec:29:59:da:ab:9e:8b:
51:ee:27:47:0d:08:df:0f:5e:52:40:44:44:61:9b:93:dd:01:
a3:66:e0:14:b7:b2:fd:90:3c:f2:08:2a:01:4e:61:82:92:20:
e8:ab:4c:be:fa:a4:5f:c1:36:2a:2f:5e:17:54:d0:e8:5e:6a:
19:ca:1d:3e:56:46:b6:3c:d6:5a:39:68:34:07:82:f5:39:4b:
65:5c:00:b2:83:89:ac:52:f4:ed:91:de:19:db:a0:ba:36:3d:
a5:24:4d:42:7f:85:33:29:0f:69:3f:ec:91:f3:81:e8:06:46:
70:71:cf:c6:9b:d7:9f:bf:12:42:10:ed:a0:4b:f3:b3:c8:d1:
b5:10:71:39:69:25:de:c4:5a:6d:45:c7:c2:b8:53:19:26:96:
6d:08:08:60:35:a6:81:58:f1:ef:61:f8:ac:ac:31:c4:0c:ea:
55:89:d3:ec:eb:72:29:04:f0:b7:ce:00:00:36:4b:ea:4a:a4:
41:99:09:c3:29:44:b3:47:f3:f3:7a:49:26:56:5c:00:68:be:
5d:6d:a5:56:b1:76:77:af:ad:d8:c2:d7:e0:67:29:97:9e:3f:
07:11:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:25 2025 by rpki-client