
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
File: MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft (raw, json)
Hash identifier: 6FsNYiX42/h1KT1h+6xJ6o8REnjwbUuM5ujckxd7Hcw=
Subject key identifier: F2:AE:AA:63:E1:92:8B:F5:9D:0B:93:4E:40:35:E4:F7:AB:E6:1E:03
Authority key identifier: 31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
Certificate issuer: /CN=3195f73419e822329794cf17fba7e93f375374a9
Certificate serial: 0197B70EBCFACD7276E8CF14477C03B78961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
Manifest number: 115B
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl (hash: Dgz0I1MH6vnodqEH1BH4kPvNrWc56S+hWcSw/5yPpVg=)
2: SCHcZAvBuEDabGE8ZnvuGrNm6LM.roa (hash: +7HN05BMaB78AnyjOqZ5Q8EXtIVzWFh5zSmSPi10HzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bc:fa:cd:72:76:e8:cf:14:47:7c:03:b7:89:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3195f73419e822329794cf17fba7e93f375374a9
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=f2aeaa63e1928bf59d0b934e4035e4f7abe61e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:78:e3:73:4a:fd:95:09:87:bc:e3:44:de:
90:3a:aa:c2:c2:20:b8:ce:1d:15:2e:17:df:8d:83:
30:db:e7:06:ca:1c:08:01:c8:18:6f:8d:7b:70:43:
b0:23:33:6c:09:23:0a:99:f2:14:db:04:64:0c:9a:
db:d0:e7:0c:27:02:f5:68:b1:de:67:a2:de:06:b6:
aa:4c:ef:d6:e2:1d:f5:2e:10:5e:2d:f5:60:6d:c3:
87:a9:55:17:3d:34:1d:c0:4a:f3:f6:a5:6e:ae:1d:
bb:9c:4c:9f:84:e5:58:5a:f2:24:83:7d:59:82:5f:
8a:b0:92:e0:07:e8:e9:2f:af:36:1e:4b:80:10:d5:
5b:25:8c:82:cf:69:e9:8f:62:77:76:66:3c:dd:62:
f0:48:54:ad:77:b1:9e:38:c0:16:11:1a:53:be:6b:
ec:d3:4e:39:93:74:f8:1a:a0:cc:92:3d:cc:f9:7c:
c7:97:f2:b3:51:22:07:ce:ed:c9:c9:fe:cb:d0:e8:
a8:a5:03:f0:c3:f1:b5:84:83:0a:67:0a:cd:2c:bc:
17:fd:97:bc:0c:a2:15:05:a8:85:23:61:66:67:81:
c9:9b:dd:d8:42:30:45:48:ff:0c:a8:ce:0b:c8:7f:
5b:9f:e8:34:f7:e8:98:79:55:53:49:c2:db:3b:d6:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AE:AA:63:E1:92:8B:F5:9D:0B:93:4E:40:35:E4:F7:AB:E6:1E:03
X509v3 Authority Key Identifier:
keyid:31:95:F7:34:19:E8:22:32:97:94:CF:17:FB:A7:E9:3F:37:53:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZX3NBnoIjKXlM8X-6fpPzdTdKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a448a-5e7a-47e0-87da-cdcfbb100447/1/MZX3NBnoIjKXlM8X-6fpPzdTdKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:69:ac:26:bf:f3:8d:59:e2:39:08:9e:35:d0:01:86:71:a9:
ed:6a:85:e5:8d:9a:ff:61:18:3f:87:67:d2:c8:20:61:bb:aa:
f5:05:e4:c1:9a:dd:5a:fe:a6:14:d6:de:af:35:c0:75:bf:b3:
41:cb:48:d6:ee:a8:9b:68:ab:48:65:9f:46:82:c7:cb:65:b7:
b8:38:70:93:79:31:8f:27:05:7a:2e:7f:86:c3:d4:1e:fe:ea:
c4:26:ed:b1:61:0a:ea:f1:b1:5e:78:c4:52:17:7b:9d:bb:c5:
1f:c0:a1:53:d7:c5:a4:32:72:5c:cf:6c:38:42:69:f7:2b:ff:
b8:27:88:17:23:a6:3a:c6:f0:3b:fe:1c:30:df:02:e6:f6:b4:
6d:b6:6a:24:05:9b:60:1d:c1:f9:f5:b6:fb:55:2b:77:f1:8e:
61:7b:b6:70:3d:8a:76:6f:2e:bf:f1:3d:68:48:33:56:ab:06:
19:86:69:3e:1a:fe:25:b6:d5:fa:ed:f3:68:19:43:34:6f:db:
45:15:80:d6:15:2b:b2:5e:f1:5b:5e:bd:ef:ce:cd:42:e6:80:
ee:23:60:e0:59:00:7b:1c:90:18:11:e4:ca:20:fb:d1:77:0f:
47:b6:d9:a9:f1:2c:fb:74:8e:63:ce:7a:56:c1:6b:93:54:fe:
96:5f:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:22 2025 by rpki-client