Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: kygcfjTCMW0jsPjMN1hV9HwUH7lt3OU3wwhVF8+gdfQ=
Subject key identifier: AB:2F:75:B9:E6:00:72:0A:F5:F2:CF:EE:92:40:0F:B3:20:6B:77:70
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019747B116223C26CCC90EDD5EB0FF6B822A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: D0
Signing time: Sat 07 Jun 2025 00:01:17 +0000
Manifest this update: Sat 07 Jun 2025 00:01:17 +0000
Manifest next update: Sun 08 Jun 2025 00:01:17 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: 9YqECouQSpF1WVcdv+fAMuESF7jBkmZvPeNPXad0/1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:16:22:3c:26:cc:c9:0e:dd:5e:b0:ff:6b:82:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Jun 7 00:01:17 2025 GMT
Not After : Jun 8 00:01:17 2025 GMT
Subject: CN=ab2f75b9e600720af5f2cfee92400fb3206b7770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:66:33:ba:a7:ff:a4:d1:21:3d:01:d3:c9:
33:7d:bc:01:f2:13:07:44:0a:d1:1e:fb:2c:53:70:
a6:84:c1:03:0d:cd:28:74:93:b3:4c:8d:11:aa:87:
46:b3:78:65:69:cf:19:96:2a:ae:b0:66:83:1a:12:
02:59:d1:f8:9c:58:4c:62:4c:d6:c5:00:2a:84:9a:
cd:9f:b2:20:44:51:71:f6:18:52:8b:08:aa:c8:86:
80:b2:06:aa:d1:ba:2b:bf:c2:57:c0:00:81:f2:6b:
5b:23:51:0e:81:7f:f1:5a:6f:ea:c4:6d:5b:d4:11:
64:c7:e8:63:9e:77:e8:4d:32:7e:fe:a9:76:de:b1:
74:23:de:59:2b:75:40:42:ca:38:a4:2b:15:fb:5b:
cf:af:44:d9:dc:cc:ae:25:a4:45:f8:7d:a2:e7:64:
28:dc:68:30:d9:dc:5e:89:22:df:f2:09:24:73:a6:
b9:66:8b:d2:e5:c9:ad:91:81:8b:4c:ec:4b:a9:e9:
75:1d:fd:a9:53:7b:5f:fb:07:7c:6d:0a:71:73:e9:
fe:5c:a5:00:a4:82:17:a7:3c:81:f4:08:42:82:8e:
d9:57:09:6d:e8:71:66:a3:d3:8d:b6:f8:78:3d:3a:
df:d6:34:70:e9:d6:2a:ac:1b:94:be:ff:cb:51:a6:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:75:B9:E6:00:72:0A:F5:F2:CF:EE:92:40:0F:B3:20:6B:77:70
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b6:83:f2:b5:71:85:57:ac:f5:03:ca:b7:9e:77:c9:77:02:
49:d4:fb:01:15:48:fd:e9:a0:25:1c:f3:ba:38:12:c8:20:00:
4d:fa:c1:d8:ac:c5:08:d8:79:51:b0:e4:22:b3:ae:bb:a8:c4:
eb:81:a5:e3:db:18:5a:2c:79:d1:fb:41:4d:ee:15:9c:74:0b:
45:b0:c4:cc:34:66:f9:a3:d5:78:c4:84:11:2a:56:27:72:e2:
33:45:03:94:bc:01:61:8a:fb:21:43:18:dc:41:63:d7:82:a9:
4e:b3:53:06:af:b5:7f:fc:50:74:c5:a9:0a:70:c2:db:ae:f2:
6d:b8:0c:9b:2d:26:43:08:4f:27:d3:c5:20:f2:15:22:53:0e:
36:93:66:4e:e9:2e:b9:d5:ca:96:17:2e:1c:ed:f3:69:81:97:
62:88:1b:d4:c4:9d:b0:20:81:b8:a2:e8:ad:cf:ea:be:cc:d3:
1c:2d:f9:7b:dd:aa:4c:65:17:08:1b:d6:9e:ab:46:63:f9:46:
c9:74:29:b6:7d:ed:f2:29:55:94:90:fe:07:16:cd:63:b6:bb:
e6:1d:69:73:ce:b9:4a:7d:a8:05:9c:27:5f:3c:52:6d:9a:da:
d3:e2:0e:b4:66:3b:ea:48:63:ba:75:16:25:a9:ef:b3:17:e1:
02:20:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:18 2025 by rpki-client