Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier: MYjA9fSrHgIQ2G3wbLkZWrGfNLN/ff8f0lcgvy3B110=
Subject key identifier: D8:48:13:FF:90:23:49:49:75:F1:B7:C2:1F:97:24:1F:FC:4D:4B:15
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 0197481E5FA7FEC8C2AE15FD953AAAA70C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 02:00:39 +0000
Manifest this update: Sat 07 Jun 2025 02:00:39 +0000
Manifest next update: Sun 08 Jun 2025 02:00:39 +0000
Files and hashes: 1: 9HdHpErjzm6R2MG9_t1v0LR-DNs.roa (hash: 44w8h4Syl3hPm5qmixckaJ+qDBSvg2af/1osG9t19Ig=)
2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: 2v5WRB+ZCrBlZ4vx9rRjtoKTl+JvTEZMLCtdOVowP6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:5f:a7:fe:c8:c2:ae:15:fd:95:3a:aa:a7:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Jun 7 02:00:39 2025 GMT
Not After : Jun 8 02:00:39 2025 GMT
Subject: CN=d84813ff9023494975f1b7c21f97241ffc4d4b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:ff:2f:8e:25:27:50:6c:83:57:00:f0:2d:
cb:e7:1d:6f:da:09:1a:30:e6:a1:6b:b0:38:ee:9c:
00:14:14:89:f8:1a:ab:eb:89:13:8c:a2:fc:ff:fb:
ff:1d:63:73:c5:6d:cf:f3:d0:6a:75:04:52:2e:de:
49:77:e2:4c:a7:d1:49:d1:87:7b:ee:e8:d3:6c:0d:
1c:71:c3:fc:8d:6c:e4:a8:31:d3:6d:89:fe:39:e3:
7c:39:dd:a7:56:18:12:1a:4d:6a:c0:80:7b:72:86:
7c:ce:6c:68:d2:ea:a4:76:53:3b:4d:4a:01:5b:34:
f3:2c:16:28:14:05:da:86:62:55:b0:20:7f:c0:27:
72:e0:d3:7d:26:f5:14:ba:c8:d8:57:f6:73:68:0a:
74:ca:cd:b8:60:0f:f8:d3:ce:95:f7:62:5f:74:b3:
c4:76:ba:70:bf:4b:fe:d8:3c:84:33:c0:dd:85:37:
d7:18:1e:8f:3a:32:02:aa:a1:e6:52:e5:63:b1:a5:
96:44:05:f3:d9:6e:bd:8a:c1:fb:81:f8:05:f6:17:
51:5c:09:66:ef:72:75:c2:b9:e6:0a:5b:75:6d:b2:
2a:8f:1e:1f:d0:07:f2:b3:1e:55:00:0f:f5:94:d3:
4b:fd:01:18:a6:93:a1:ba:6e:83:b1:fb:b9:c7:6d:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:13:FF:90:23:49:49:75:F1:B7:C2:1F:97:24:1F:FC:4D:4B:15
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c0:54:37:79:3c:1d:cb:fd:b9:2d:31:31:fc:3d:52:03:1c:
60:4b:02:d8:8c:ba:02:be:6d:0e:62:c7:ac:5c:38:8a:e4:b2:
5b:3c:ff:d6:6e:46:66:12:0a:0a:28:74:27:95:4e:f9:cd:db:
4e:f6:2b:a8:3c:60:da:09:e8:75:04:28:58:cf:b7:d4:0c:e8:
80:b8:62:1c:30:ba:50:70:ae:da:f7:af:4a:b2:d2:46:c9:27:
c8:3e:62:43:c4:d2:57:f8:27:df:53:fb:31:31:f0:6d:9e:e9:
91:1c:d7:0c:74:a4:98:51:18:6b:d7:8f:d5:d0:34:4e:a3:b1:
36:2c:bf:53:bd:dc:c0:3d:55:c8:09:bb:19:28:b8:c6:31:a5:
1d:64:7d:4c:1e:1c:8d:b2:38:f3:e0:42:24:20:4b:2d:c1:5f:
d0:f8:7a:99:68:9f:54:4d:af:9c:35:5e:64:7a:04:18:46:fb:
13:95:c8:5e:80:a5:29:40:02:50:c2:40:97:29:67:0a:4e:e5:
ce:9e:1f:0f:9d:70:59:01:8b:b2:77:b9:26:a3:76:56:8d:95:
30:15:fc:d2:a8:02:5c:62:88:c2:b5:86:02:94:81:cc:36:e1:
f6:1a:89:cb:08:2f:61:65:e1:c6:d6:4b:00:77:c4:79:25:f7:
ed:ed:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:19:13 2025 by rpki-client