Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: bMWT/Vrs37fIhUaeQRNv+2m39/n/6s2wcwr+Sn/ozX0=
Subject key identifier: BF:6D:BF:F5:17:88:CE:DC:F9:8A:F0:65:A2:3A:8B:D8:03:14:4D:EB
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 01974EC5765C09E9C34B668BBAD7D603E534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 09:00:52 +0000
Manifest this update: Sun 08 Jun 2025 09:00:52 +0000
Manifest next update: Mon 09 Jun 2025 09:00:52 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: peBhNYmAcx86m+FqSxhft7wzyFkiGQru/FNUCckQqoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:76:5c:09:e9:c3:4b:66:8b:ba:d7:d6:03:e5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Jun 8 09:00:52 2025 GMT
Not After : Jun 9 09:00:52 2025 GMT
Subject: CN=bf6dbff51788cedcf98af065a23a8bd803144deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:9b:4f:d9:d2:c7:17:a5:d1:47:b4:2b:7e:
fd:f8:58:be:9d:7d:1b:65:92:d3:63:85:c4:e8:e9:
bd:6c:2f:7c:df:6b:ff:3c:e7:26:bd:84:60:08:32:
b6:2c:32:bf:e9:ab:fe:f0:8a:fc:b3:d1:96:eb:66:
3f:a5:4b:3e:95:ba:d0:e6:78:8f:f9:a9:35:a8:95:
a1:a6:92:c0:aa:43:0f:3f:bc:41:2a:44:13:6c:89:
1d:01:07:cd:6a:21:d4:3a:22:ac:55:76:25:a8:b6:
c2:cd:43:b1:b3:ab:9e:4a:e8:9b:00:5f:e7:92:19:
7e:e0:fb:96:29:3c:d3:c3:ad:8c:39:73:4b:c6:3e:
d8:0c:c6:58:25:67:b0:6e:d6:14:c0:60:df:55:fb:
94:25:62:19:3b:6e:c6:c4:47:b4:5e:29:4b:9b:de:
ee:49:2b:80:a6:5e:ba:82:e2:08:0a:06:5b:23:ea:
be:5d:fb:64:39:10:4b:97:5f:50:3d:02:ab:2a:5f:
97:51:ae:d1:70:d3:0b:86:db:4f:55:b8:1a:04:fe:
ea:5c:6d:0d:4f:d3:04:09:56:d4:2f:d9:0f:1d:3a:
fa:2e:36:d3:45:e6:4b:4e:04:37:f9:a8:60:40:8d:
d5:cb:84:02:2b:91:e5:31:53:27:08:d5:7d:69:58:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:BF:F5:17:88:CE:DC:F9:8A:F0:65:A2:3A:8B:D8:03:14:4D:EB
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:48:a0:e7:ec:4a:70:ee:83:67:e7:12:3f:8d:ed:a2:78:
3b:ff:12:68:bb:bd:ad:25:83:ff:bd:7c:10:b2:19:09:a3:2a:
86:a4:27:76:5e:29:6d:df:65:20:20:03:95:61:23:b0:7a:1a:
8d:86:94:26:45:0e:ed:00:1f:0a:2c:fe:df:74:7b:db:b2:aa:
af:b1:07:81:52:f7:18:46:7d:68:1b:7a:70:9b:3f:7e:b1:4b:
57:f6:db:86:2b:8f:37:c5:aa:be:69:53:f8:59:04:27:e6:bc:
27:2d:43:5b:c0:a6:2c:55:40:9b:34:5f:86:be:82:c3:d4:62:
5d:5c:0b:0f:57:a8:96:76:57:81:72:e6:24:0b:5f:f9:35:7f:
cc:04:0c:6e:5f:d1:79:c3:52:80:2b:0f:06:f4:ac:08:7d:1a:
84:cf:86:b2:06:5a:f5:84:c5:6c:5f:9e:3f:9f:00:f3:ea:11:
74:0c:8d:b6:74:f6:40:16:3f:c1:d6:25:22:3e:1f:1d:3d:b2:
c7:8f:da:08:38:a1:05:2f:fc:ba:67:7f:d1:78:97:9c:2f:0d:
ff:95:89:68:a1:9e:ce:0c:39:75:3e:86:e7:33:f8:1e:2b:bc:
10:3c:56:8a:15:be:a8:d9:c3:27:72:3c:4f:3b:14:93:69:21:
42:d8:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:33 2025 by rpki-client