Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: saDvcep4b3DXqZnKVQ1i4dmqeOZmGpAQrnvdkoXPiUA=
Subject key identifier: 61:EF:D6:88:CB:CF:A4:6A:E8:72:5E:7F:04:76:2A:20:BF:37:B7:B5
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 019922FAAA69CC71E76C8901F40A77CB71F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: UZds4Kew1ino5VIInKMrbB4VS4+2Whg1wnpORLYWciQ=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:aa:69:cc:71:e7:6c:89:01:f4:0a:77:cb:71:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=61efd688cbcfa46ae8725e7f04762a20bf37b7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:97:87:fa:b5:e5:ce:ae:90:41:6b:09:40:
d7:af:e4:db:21:8e:6b:58:42:c6:27:33:58:f9:01:
2d:7b:80:9b:90:1c:a6:71:65:df:34:2a:80:5c:88:
12:4e:7f:59:29:90:71:cf:1d:84:b6:f6:ef:4a:4d:
eb:dc:75:af:b3:f3:65:79:6f:5d:6c:1f:64:b0:82:
cd:d9:29:9b:61:38:68:a8:0b:f9:2d:0b:52:99:c7:
2c:db:aa:12:ab:b6:8b:4c:e1:cf:09:d5:26:94:29:
0c:59:8a:01:27:d4:c9:24:35:1b:f4:1e:37:52:3b:
ab:ba:13:1f:f1:5c:47:0e:61:61:71:31:49:78:62:
5c:22:9d:2c:cb:bb:e8:5e:a8:c1:a7:41:e8:ee:7b:
32:de:bf:f4:75:ae:a8:24:54:3b:85:51:2a:24:f3:
c2:e6:fc:b4:e2:c1:1d:1c:7f:14:5a:98:3e:1c:4b:
ab:c6:51:7c:45:20:e1:d1:8f:0b:da:65:bf:64:3e:
53:8d:14:67:3d:77:63:76:a1:82:fa:a5:86:ed:e1:
7c:1b:34:a5:bd:ad:97:0f:69:a7:d4:4e:13:c8:b6:
97:43:cb:69:54:37:ad:0d:15:35:37:75:f8:ae:f2:
cd:37:a3:31:e5:de:b0:05:7f:c2:c8:f5:90:24:5f:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:D6:88:CB:CF:A4:6A:E8:72:5E:7F:04:76:2A:20:BF:37:B7:B5
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e9:32:7c:b1:f8:3c:b6:9c:db:cf:32:4e:4b:25:1c:09:de:
db:01:11:14:e0:cc:14:d5:75:81:77:d3:74:88:a2:50:4d:9b:
9b:c1:40:30:6b:47:f7:7e:71:53:4e:27:f1:a0:16:51:11:ab:
01:c8:a7:3b:8f:e0:d4:43:12:82:ee:75:b9:19:47:39:f1:84:
2a:49:06:7c:d4:c1:ec:c6:9d:23:8b:bc:86:01:9c:64:99:3f:
a6:8e:6d:b2:f9:f2:b0:ff:27:89:6c:e5:f4:da:da:66:0c:76:
bb:8f:b9:d1:b4:58:c6:be:7c:a6:d9:fe:54:52:d1:f6:52:01:
75:aa:bc:15:6c:56:ae:73:c5:5b:07:8c:9c:59:0a:6c:35:d9:
d0:21:ff:24:9c:74:75:1c:07:b5:ac:7a:2e:dc:13:29:56:ec:
b2:0c:d3:30:8e:4c:45:db:54:81:e8:04:34:2d:81:20:02:35:
81:62:f1:1c:d2:6f:fc:50:73:1e:50:ca:d9:76:91:7e:d3:bf:
aa:f7:f7:7a:e7:85:fd:ae:1b:89:83:86:5f:94:4e:7d:34:89:
ef:11:f8:5f:0e:31:13:4a:f0:1b:57:76:e2:61:be:3b:00:30:
32:45:1e:9d:96:35:6d:b3:be:16:d9:9f:fa:55:26:7c:f9:33:
73:1f:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:33 2025 by rpki-client