Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: 7lhnguyDVRKc2s7urLD8IuBmaW2SErpEfQdQ/UeI9UE=
Subject key identifier: BB:FB:5E:D6:C6:7B:09:24:84:3A:25:1A:3B:66:02:7D:DD:8D:52:D4
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 019747E73AF4AC7182FEF4DC75D7123C5729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 0F76
Signing time: Sat 07 Jun 2025 01:00:25 +0000
Manifest this update: Sat 07 Jun 2025 01:00:25 +0000
Manifest next update: Sun 08 Jun 2025 01:00:25 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: JOzfpCisTVfmN+0S/VuuF9hCcturqk+CjBM/vPhuV38=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:3a:f4:ac:71:82:fe:f4:dc:75:d7:12:3c:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Jun 7 01:00:25 2025 GMT
Not After : Jun 8 01:00:25 2025 GMT
Subject: CN=bbfb5ed6c67b0924843a251a3b66027ddd8d52d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:49:68:26:45:d5:44:94:1a:9e:8f:93:12:b6:
29:03:7f:12:9e:29:18:58:2b:94:e4:7f:8c:ff:8f:
09:79:ed:a4:8c:66:33:a5:1e:10:69:a6:95:47:4f:
b8:f9:77:24:76:10:94:d1:a5:08:72:25:9f:8d:be:
e3:1b:3d:b4:04:f8:99:ab:a5:ce:55:0e:f5:46:4b:
ff:29:4a:10:99:8f:18:63:dc:de:93:e5:de:5d:87:
f1:b1:4c:79:1e:ab:ab:df:39:11:ce:a0:95:cc:75:
bd:d8:e3:45:ab:38:35:97:b9:c1:16:2d:9b:7f:fe:
fb:b3:e6:c8:4a:e3:87:5c:0e:d6:f8:66:b7:ec:eb:
f8:da:6b:17:d1:8b:13:a6:c2:8f:cf:e1:8b:bc:25:
4f:3a:88:df:f5:0f:5c:a6:a4:50:63:71:eb:36:5d:
d2:89:d1:56:ab:ec:a2:07:88:f5:05:15:8a:da:70:
f9:0e:1d:48:c8:fb:c9:69:b2:57:68:10:68:74:4c:
35:42:cc:c8:df:9f:ab:a9:b0:2c:45:da:9f:9d:50:
9c:be:96:c0:9e:9e:af:35:d8:33:6e:2e:42:1c:31:
16:f4:ce:8a:b0:5c:ca:00:a5:db:ba:5b:6e:50:c3:
83:55:41:0c:a3:e3:eb:e2:12:de:a1:43:f6:f7:0d:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:5E:D6:C6:7B:09:24:84:3A:25:1A:3B:66:02:7D:DD:8D:52:D4
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fe:d1:4e:3b:2b:8e:f0:0d:ee:2b:b6:32:a4:44:38:f0:1f:
16:25:51:34:43:0b:ed:10:01:88:b8:60:f0:8e:cf:89:45:5c:
86:e2:b5:fd:cf:53:08:03:eb:a6:44:81:7d:49:1e:a4:f8:75:
d4:7d:e0:a8:08:d5:fc:aa:f4:7e:14:c3:b7:22:2b:b9:af:f9:
76:32:32:88:1b:4f:83:05:9c:57:ad:8b:07:ee:84:3a:5a:5c:
15:d9:81:db:68:e6:19:2d:da:1e:fa:52:96:3d:c9:5a:23:a8:
ab:f2:91:d7:2b:62:fb:26:35:a0:9f:69:3b:b0:42:48:2a:ed:
a5:fa:64:30:3e:43:98:b7:d2:fa:48:5d:0b:e8:ac:5b:85:76:
ee:2a:b7:d8:e4:6e:97:b8:aa:02:f4:f0:f5:4b:f1:5e:6b:cd:
4d:6d:cf:1b:09:01:22:71:68:ac:6a:06:ee:4a:55:7e:36:cd:
c0:80:54:c5:16:7a:7a:d6:b4:dd:83:b6:69:25:24:8e:16:b2:
4e:5f:a1:2e:65:23:19:c8:12:25:bf:88:31:db:28:c9:29:6a:
60:68:d7:b8:82:47:25:fd:12:e9:08:ae:bc:a2:fc:64:60:f6:
1c:0c:e5:87:b7:82:cf:56:89:36:b3:86:c6:8b:ac:bc:45:f5:
4c:95:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:16:08 2025 by rpki-client