Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
File: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft (raw, json)
Hash identifier: QHiDukDgpAT5tjP13Bt2h4GNlKHLtsxCiYKyV5LHjec=
Subject key identifier: 91:C3:1F:45:8E:C5:3B:48:AC:D4:69:70:5D:C9:B4:DC:63:19:E3:9E
Authority key identifier: 30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
Certificate issuer: /CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Certificate serial: 0197B70F2D11257E278377358E52ED7B1F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
Manifest number: 0F2B
Signing time: Sat 28 Jun 2025 15:01:54 +0000
Manifest this update: Sat 28 Jun 2025 15:01:54 +0000
Manifest next update: Sun 29 Jun 2025 15:01:54 +0000
Files and hashes: 1: MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl (hash: t2w+I7YFBpOqzvqhPxEFOBplRjkOhOEa6/LIqq9swqY=)
2: hfNN3XiVLhZTBEzmZ9kxsFWjtgU.roa (hash: rdvuWCnmeSdDSQrFfaBCbjsr2zsTzqKaLeEHczQ6fHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:2d:11:25:7e:27:83:77:35:8e:52:ed:7b:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d66b66a3982d20a81ef201dc755ed3353b16a4
Validity
Not Before: Jun 28 15:01:54 2025 GMT
Not After : Jun 29 15:01:54 2025 GMT
Subject: CN=91c31f458ec53b48acd469705dc9b4dc6319e39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:ec:61:bb:44:c6:9d:24:fd:cc:da:26:94:
1f:56:7c:ca:20:e1:7e:71:f6:ca:0e:7e:3f:13:45:
96:ea:60:fb:4e:fb:78:99:ab:85:ef:ac:20:97:3f:
24:af:57:d7:73:10:90:1f:8d:11:b5:35:ce:a6:87:
6a:39:ad:ca:70:42:38:0c:d0:9e:40:3c:55:4e:f8:
bf:12:d4:7e:bd:7e:02:d5:c2:fd:66:e6:f7:ff:48:
cd:a9:e9:4b:cd:1a:a5:67:7f:ee:27:b3:9a:6f:4f:
93:da:ad:20:3d:4d:c1:fc:6d:f0:aa:c3:9e:1e:12:
67:c5:68:c8:57:e1:72:23:67:e7:8a:c3:c7:13:46:
76:dc:f1:24:ba:ab:c2:dd:f9:44:59:c6:98:20:d3:
c7:6f:bc:1b:fb:cb:d3:55:41:13:cb:d3:bc:fc:e4:
b7:7e:b6:27:3d:43:2d:b5:c2:c8:4b:c4:7e:ea:bf:
ff:a3:ad:64:02:30:98:8d:78:a2:6a:86:96:e6:2f:
b5:fd:87:89:f8:6e:2d:22:72:9f:5f:ad:e5:07:9d:
20:48:19:40:12:be:3d:2d:7b:1b:7f:c6:1c:dc:07:
e5:f4:2a:45:ab:dd:ad:06:e6:89:7c:ac:56:bc:57:
a8:98:31:3f:66:88:de:fc:25:4a:51:8a:ef:ba:21:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:1F:45:8E:C5:3B:48:AC:D4:69:70:5D:C9:B4:DC:63:19:E3:9E
X509v3 Authority Key Identifier:
keyid:30:D6:6B:66:A3:98:2D:20:A8:1E:F2:01:DC:75:5E:D3:35:3B:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/88e482-8277-4280-9f5b-8144b140edf9/1/MNZrZqOYLSCoHvIB3HVe0zU7FqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:51:5b:be:8a:63:11:36:ca:e9:5c:9e:53:34:e8:b7:15:
60:aa:88:c4:cf:de:50:aa:68:c4:48:14:dc:b4:87:8b:65:95:
29:8d:d1:11:e8:6d:ec:93:a0:6f:4a:39:bc:b0:da:ae:0a:dc:
b5:0c:fe:73:8c:29:8a:49:ab:bf:35:c3:31:a6:28:01:11:64:
cd:c3:3f:fc:c0:4e:0d:bd:73:78:8f:48:1d:b9:dc:fd:e1:c7:
27:f1:4f:b4:46:71:54:af:4a:41:85:a6:5c:ec:63:f4:a6:ac:
b8:28:be:c7:56:b6:2c:71:2a:63:53:88:fc:08:92:20:03:18:
0c:db:4b:12:e0:2d:99:78:15:33:98:9d:6d:f5:fa:85:b5:e7:
39:6e:70:62:a0:d6:8a:24:61:46:8e:3c:fb:7d:42:7e:17:9e:
d2:2a:46:99:13:e6:71:cd:01:94:d5:af:aa:a7:9c:3f:01:04:
15:56:bc:00:a6:29:e8:0b:1a:f6:b4:7a:ff:79:8f:5d:6d:f7:
b7:ad:83:f0:94:8a:f5:a3:14:28:c7:c0:0f:e2:32:b5:92:05:
aa:b7:20:56:7b:8b:39:fa:65:1c:6b:fe:97:03:84:e7:46:41:
83:30:96:ea:4d:66:6c:4a:8d:66:63:08:7b:c4:65:53:85:fd:
6b:76:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:13 2025 by rpki-client