Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: 4zcKJ2MHxjRQnaKtlBtQN+IwrGeimj2m0G8Wx9+D3Vs=
Subject key identifier: AA:93:98:CB:FC:62:0D:F6:60:4E:4B:7A:99:62:68:B9:9A:D9:56:30
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 0197B7B339E285BA8E75C63E5B8467146F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 1189
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: E3MwzG8ZBjfbnkPNY6dAl37rRUPMEToRVzHDlA4UkeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:39:e2:85:ba:8e:75:c6:3e:5b:84:67:14:6f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=aa9398cbfc620df6604e4b7a996268b99ad95630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:74:8e:02:0c:a7:1b:29:20:2c:bb:35:e4:
d3:64:d4:0f:e9:4b:31:86:2d:c0:84:92:03:4c:c4:
9d:19:0a:ef:52:74:78:01:ee:a0:b1:89:4c:bb:db:
06:fd:c9:1f:b2:5e:0d:16:87:c9:66:77:b3:6e:d2:
2a:1f:c2:10:bc:75:07:01:18:b5:ca:ce:bd:fb:71:
4b:0e:8e:91:08:1d:61:e7:5b:95:1f:86:bc:63:e1:
00:a4:04:94:60:f3:a5:12:21:70:12:3c:3a:1e:13:
9d:23:85:6c:9b:5c:bc:46:97:69:ff:1a:52:d8:36:
44:9d:4b:26:9a:0b:33:06:0d:89:0a:ff:9c:95:14:
3e:fc:09:f9:8f:d8:f0:e1:86:ac:0b:13:ed:91:77:
d4:2f:c7:59:d8:cd:fb:64:e4:0c:69:e4:62:ad:70:
7e:fa:1b:5b:05:b5:5b:df:96:fc:aa:a8:a2:c8:c3:
ff:4c:55:58:65:36:bc:99:39:7f:66:0f:a6:9f:b6:
02:5d:c8:f7:85:99:f3:f9:3c:0b:99:6c:88:20:d1:
1e:0c:e5:8c:3c:df:2a:98:34:12:29:79:40:ce:66:
6f:49:9e:0c:a2:9b:24:e2:ec:c1:aa:08:d2:28:a2:
0f:23:53:e0:8d:4c:21:58:2c:b7:58:fd:64:3e:8e:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:98:CB:FC:62:0D:F6:60:4E:4B:7A:99:62:68:B9:9A:D9:56:30
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:b8:14:b4:5e:3d:dd:5f:0c:00:ba:50:95:92:39:a0:33:
73:ab:8e:2b:df:59:b7:d9:80:62:f8:b8:9f:2c:a0:ac:02:5e:
33:99:4a:5f:17:21:d4:b5:f1:10:89:65:52:ca:f6:4f:5d:51:
b8:43:ff:f7:04:3e:b1:c2:bf:6b:7e:38:7a:50:c9:33:1d:00:
99:59:87:fe:20:64:87:79:ea:88:48:18:a6:5b:a0:aa:c0:a6:
32:ab:68:0e:b4:89:3e:37:9e:73:2b:82:12:fb:1e:0e:67:0a:
92:9e:14:ef:e8:fd:6a:88:b6:5e:2d:b7:26:f4:7c:a2:18:5c:
a1:29:b6:44:b2:bf:74:89:dc:ae:5f:ae:78:84:f0:6e:e4:b0:
06:57:6e:5d:08:c3:55:f6:67:16:c9:6c:9a:f1:64:e5:52:05:
55:32:09:50:bf:3d:e2:0f:8f:92:f9:92:fa:27:33:e9:1e:ae:
d3:d7:1a:5a:dc:9b:7a:07:6d:8d:b6:41:45:b4:77:c3:32:6a:
14:39:26:6d:40:9a:55:10:ea:e4:00:df:54:44:8f:10:a0:fb:
66:b3:0b:9c:79:bb:c6:11:44:85:77:a8:25:39:ea:7e:2e:38:
24:5b:29:64:d8:39:af:a0:70:fd:cb:ad:ce:5a:ad:b5:a6:22:
83:1b:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:39 2025 by rpki-client