Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: RFUUG38PjGuSS2Dr2knmCUt/0e8yvG09Jwl2Kw8+wjg=
Subject key identifier: BF:D1:2A:0A:63:19:69:A9:DF:4B:4C:DE:EC:46:A5:DE:C2:25:6A:32
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 0197B70F27419C7C61E1123BDF2234DE1F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: 7bw5dNrqSQbRPSWOM9e9sh3oxN6m8yUTZ46H24pJf1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:27:41:9c:7c:61:e1:12:3b:df:22:34:de:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=bfd12a0a631969a9df4b4cdeec46a5dec2256a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:66:38:dc:f8:f3:3f:b7:d6:bf:88:6f:9c:
31:20:6a:4a:78:7d:91:8c:7a:6a:2d:48:98:39:07:
81:42:1d:6a:0a:d0:ed:cb:18:d8:19:63:9d:3b:54:
1f:5a:93:be:20:db:27:e7:70:ee:0c:0d:08:ed:f3:
7a:be:74:4b:95:71:f6:48:93:18:59:1c:1a:64:fa:
96:d1:4e:92:ed:dc:62:67:ac:65:4e:f1:ca:63:e0:
be:b4:14:2e:bb:97:98:8c:32:d7:b3:bc:3d:2f:20:
45:06:6a:a4:a6:6e:50:7c:c4:d8:c5:9f:62:1f:4e:
af:53:00:a1:60:6e:4b:f8:ad:ff:97:c2:08:fa:94:
8c:d0:12:57:63:c8:df:71:6e:ac:f0:87:e0:c0:7d:
c9:36:c7:0e:90:d7:c4:06:9f:e9:7b:ed:28:9e:0a:
ef:6d:b0:35:f8:10:f0:42:06:ac:dc:07:38:64:1e:
e1:6b:4d:34:03:a6:06:f9:3f:2e:0d:20:1b:30:54:
0b:dc:f2:dc:f4:a4:42:1d:9f:1b:fb:d5:30:1b:54:
82:5d:0b:67:6f:f9:81:e1:91:30:9d:8a:5b:4f:71:
f7:7d:a6:49:be:11:06:5f:e2:61:30:a5:5e:66:d9:
b3:58:08:08:87:72:17:f1:21:29:62:8c:a2:6f:19:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D1:2A:0A:63:19:69:A9:DF:4B:4C:DE:EC:46:A5:DE:C2:25:6A:32
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:35:90:9a:ef:68:11:ba:23:c1:bd:9f:f0:d4:15:ba:c6:11:
36:c4:ae:34:ac:47:59:47:f7:71:8b:6c:9b:e3:5a:86:18:48:
2c:8f:ed:2c:b8:20:34:1e:e0:d9:18:c2:53:7a:f9:b2:24:ab:
22:ad:53:5a:ea:6c:25:f4:54:2b:59:1f:00:6c:e5:12:c7:57:
7b:4f:76:6d:04:89:1c:d0:1c:1f:59:40:b3:50:dc:3e:9f:a5:
11:1c:22:ee:f1:9c:07:9d:09:7f:85:1c:d7:de:5a:d2:fc:0e:
62:1a:ea:f0:52:16:26:ba:93:38:d4:01:74:d2:58:04:ab:33:
b3:28:de:c5:10:b6:08:1d:d0:a2:71:00:b0:e1:1b:31:26:57:
b5:f5:24:43:d8:6f:f0:0c:79:c4:e6:f9:e7:2a:2a:b7:7f:a5:
a0:2a:1c:fc:db:17:b4:f2:81:0f:23:58:36:06:3a:90:25:e8:
c8:59:cd:34:89:d7:fa:aa:a6:cf:da:ec:74:3a:d3:64:12:69:
99:c2:54:9a:43:1b:bb:5d:f9:d9:7e:13:7a:65:bf:79:d8:82:
05:49:1a:00:6b:39:66:75:00:f3:c9:63:62:c0:cf:90:4c:36:
eb:de:ec:37:7c:1b:5c:b9:55:1e:e3:7b:bd:a1:ef:9d:00:3e:
41:3e:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:48 2025 by rpki-client