Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
File: MzNh-6hAkXT7PEgrjKJvI169IsI.mft (raw, json)
Hash identifier: LFlLqM00SNjXwk/9IfJc5eKKkc+xysCc1S/FavAjKm8=
Subject key identifier: 9A:C2:12:4D:D5:9F:A9:F5:66:6A:B2:7A:CC:AD:D5:16:88:FB:83:4A
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 019749D5BF73D1AC41581C41436B400DC8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
Manifest number: 1234
Signing time: Sat 07 Jun 2025 10:00:34 +0000
Manifest this update: Sat 07 Jun 2025 10:00:34 +0000
Manifest next update: Sun 08 Jun 2025 10:00:34 +0000
Files and hashes: 1: 7GM2Xqmn6gaMFMomgEM2rAkLKo4.roa (hash: RlyXBzHmtsm995ENs8O6yiu+NFUTpzrFveSmekzl2mQ=)
2: MzNh-6hAkXT7PEgrjKJvI169IsI.crl (hash: C60BVPmo3kqaDgRrNz+pBprmMRQyPDwf70e5iNHc2bE=)
3: eL7L2yvUaHUcrqYa9YfSEkCrZQ0.roa (hash: hRmFfXusSA4yPVBPDkdUWWukYfa7ZjWi3ll24wVEEEs=)
4: rZcv-swn7039blCdnkHsmvuTEE0.roa (hash: YkjIIueA3tSkus+TXP81fG/yVykEarWy1n4j2aCv7FI=)
5: redZ5Lo-6i46yM5qdUMWwkSisZE.roa (hash: HxevwAQ5SK1xf86uDMqoDN6xfryXXeJR1/gwiD3DlWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:bf:73:d1:ac:41:58:1c:41:43:6b:40:0d:c8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jun 7 10:00:34 2025 GMT
Not After : Jun 8 10:00:34 2025 GMT
Subject: CN=9ac2124dd59fa9f5666ab27accadd51688fb834a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:4b:a1:8b:21:47:4c:ec:ca:20:d6:9b:98:
61:cd:99:8c:65:20:ca:06:f2:0b:de:8d:62:fe:a9:
97:21:56:7e:24:16:fc:99:97:5a:2c:24:c3:49:93:
10:f3:7f:79:28:32:4c:c9:74:af:6c:da:33:25:95:
88:e0:f9:49:fb:b8:83:ef:f1:11:30:10:1e:9d:38:
90:c6:ea:55:5d:9e:f0:5b:7f:e6:ba:49:bc:56:0e:
8f:2a:06:c1:89:4f:ae:35:8d:cc:6c:da:d1:b2:0e:
1b:49:7a:5f:d0:34:52:f7:9b:b8:ad:12:b5:2a:a1:
ce:13:f1:86:e4:01:ef:b0:37:1a:a3:6d:56:5c:15:
0c:3a:0d:9d:c3:12:d1:c5:10:17:71:a9:9a:65:23:
d7:1b:4f:e3:05:c9:a9:9a:fd:27:42:08:ef:b3:83:
00:99:a5:2c:a8:2a:d4:83:39:a4:d8:99:c6:39:8a:
cd:a1:cc:9a:0e:20:d3:60:68:16:71:13:9a:4d:52:
64:f8:9d:e3:f6:bf:77:88:5f:88:3f:78:74:6d:f4:
08:7e:ba:51:31:20:fa:8b:98:62:85:ed:40:ab:e5:
bf:29:ff:b4:ae:db:69:bd:40:bc:57:4e:ad:76:6d:
58:39:48:26:da:4d:87:3d:ff:23:9c:c0:8e:58:28:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:12:4D:D5:9F:A9:F5:66:6A:B2:7A:CC:AD:D5:16:88:FB:83:4A
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b0:8f:ab:ed:f3:9c:81:a9:49:17:a9:fe:10:78:a9:3b:fd:
6d:57:d5:21:49:95:be:cd:44:de:c1:64:f6:a8:d1:85:9a:43:
01:60:2a:a8:16:32:7f:4b:77:c3:f9:50:7a:d7:78:85:7d:41:
c2:e8:9a:29:36:08:be:de:29:cb:d1:80:27:1a:5d:2e:7d:50:
09:bb:c6:d9:e1:71:7f:f7:e7:d9:0f:d4:54:1a:fd:fd:f6:23:
90:b9:ee:0a:a1:57:b9:f8:55:99:22:71:97:7e:a1:25:1d:95:
93:29:fa:c6:b7:09:92:16:50:c1:d0:30:75:b4:75:59:a7:3c:
b6:b5:96:e5:ee:de:cc:6e:94:ca:27:5d:e8:e7:6f:1e:68:ce:
7f:87:79:8d:85:06:11:48:2a:25:59:39:33:e4:61:c1:f7:ea:
13:10:5c:09:4c:2b:96:60:cb:39:2c:c8:e3:ee:60:8d:22:0a:
bf:61:55:48:8f:53:e5:ea:6f:17:a5:75:46:f5:2b:de:06:51:
7c:5f:ad:1e:ee:4b:1d:8b:75:19:7e:d8:56:df:85:5c:e4:bb:
e7:c0:eb:a2:58:09:56:39:a0:2e:23:1a:7c:47:84:de:27:b2:
1d:ea:2a:7b:41:ae:70:69:20:b6:96:fb:29:bc:90:a4:83:0f:
07:87:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:39:19 2025 by rpki-client