Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json)
Hash identifier: L2Gfgq/j9/ZGGM2hbPhQw6vqx6eGxfs0rzw0n3YS7jU=
Subject key identifier: F7:6E:C0:58:84:AF:B3:B5:76:EA:AE:F8:6B:02:1F:69:96:A0:B4:6B
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 01974FD7FCFCBA79C3C61D4D00C4E0ADAA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 14:00:44 +0000
Manifest this update: Sun 08 Jun 2025 14:00:44 +0000
Manifest next update: Mon 09 Jun 2025 14:00:44 +0000
Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: 5H8mx1KXzabKOFGm8LEji3hvQFy+lKShnOGvJ4ivJhk=)
2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:fc:fc:ba:79:c3:c6:1d:4d:00:c4:e0:ad:aa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Jun 8 14:00:44 2025 GMT
Not After : Jun 9 14:00:44 2025 GMT
Subject: CN=f76ec05884afb3b576eaaef86b021f6996a0b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:97:fe:c3:18:77:ac:f5:00:56:b9:2b:c1:
32:1c:4e:a3:ea:f5:40:2e:32:52:51:24:b2:6b:b6:
7e:b9:5b:a7:2c:94:10:88:20:44:97:d8:66:e6:37:
0a:e7:3f:d1:83:33:fa:c3:09:d8:a4:2f:91:f9:7b:
e4:73:88:d0:80:b0:22:6c:13:14:f0:73:21:69:15:
09:a2:ae:03:b5:85:d3:de:f3:2b:0b:4d:1d:69:df:
33:7d:0f:69:48:9e:a7:6a:9e:1c:a0:17:03:57:28:
a3:36:5a:cc:14:77:b3:50:c7:1a:20:0d:ab:9d:13:
a8:b0:58:34:00:aa:4c:78:de:00:0f:8f:62:d6:b6:
f3:65:94:fc:27:bc:36:db:6e:4b:45:04:44:3c:17:
ef:87:c0:b7:ba:90:58:a9:ed:d9:dd:24:d4:74:63:
04:16:23:ba:45:d8:d8:98:9b:b2:ef:96:f7:60:fc:
a7:20:05:a6:be:2c:a0:76:0f:93:18:a3:64:fc:9b:
8e:b4:53:39:da:09:a1:d5:b0:f0:4c:0f:c6:1b:e3:
6a:ba:e0:e3:54:a4:11:b7:89:d7:f6:2a:93:48:1e:
7b:b2:f5:7c:43:2f:ab:43:4d:89:4d:c8:28:69:c5:
1d:ef:24:4d:dc:5e:a1:93:b3:b8:40:45:49:f0:70:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6E:C0:58:84:AF:B3:B5:76:EA:AE:F8:6B:02:1F:69:96:A0:B4:6B
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:00:21:43:0e:7c:77:81:64:73:5c:91:2d:e2:6d:91:9b:24:
85:f8:b1:f4:c3:18:7a:1a:df:37:5f:bd:2b:aa:1c:c2:f1:cb:
ec:a1:87:5f:6e:34:87:50:b6:bb:55:27:d0:c1:6f:bd:df:7e:
e2:a6:cf:5d:dc:10:5b:e9:62:b2:29:3b:e0:a9:6b:db:d6:dd:
e0:ed:ad:6b:00:68:bf:96:40:ff:5a:92:54:a3:70:c0:16:47:
e9:b5:02:bd:f2:6c:1f:1c:3c:6b:46:d6:7f:c7:ca:4d:dd:d5:
48:ce:33:77:54:74:45:8f:c5:b4:9c:ec:b2:2b:cf:50:2e:cd:
05:3f:ec:f5:5d:60:30:93:3c:53:33:fe:8a:ea:13:90:d8:57:
7b:04:88:f3:bb:61:99:a4:cb:6f:e5:09:60:db:52:b2:94:82:
f9:47:b3:3f:f6:86:94:8b:18:0e:3d:dc:6b:2d:2f:c0:bb:b3:
dc:fa:71:b6:fb:b3:df:a1:19:d5:80:42:d5:17:79:44:01:6f:
20:28:cd:67:b5:cc:95:06:08:f6:37:bf:d9:81:47:56:5b:27:
8d:d4:3b:5b:4f:b3:2d:c7:29:0c:c8:e3:e8:58:4c:ba:2a:10:
a4:3a:36:3f:d9:88:37:60:ac:62:99:93:f2:89:4c:63:f4:e7:
50:0c:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:05:17 2025 by rpki-client