Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: bm2iTFRpr7OK9bAJz7XWC+5fH2Nh7eQug/wA3BH4Oks=
Subject key identifier: EC:70:41:89:2A:41:D5:8B:1E:32:46:59:21:E5:A2:1C:2F:E0:27:05
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 0197B6A0A1976D2C3AFB96BD77E7E7C22F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 091C
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: LwyXQ158U6kl6NXaOiOlVaMn4queY6cHJWkQsI07KgU=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a1:97:6d:2c:3a:fb:96:bd:77:e7:e7:c2:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=ec7041892a41d58b1e32465921e5a21c2fe02705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:ea:02:d6:ce:8d:81:e1:e9:e6:46:45:1c:
01:4b:e6:ab:b4:cf:dc:23:56:62:a8:25:17:cb:24:
fc:02:ca:92:95:6c:7f:6f:7f:4c:bd:74:63:c2:7d:
0c:61:e5:a1:ae:8d:91:fc:9b:e4:73:85:fe:6e:a5:
6d:dd:cf:0e:9d:c4:3b:cb:d0:e0:8c:25:99:53:d8:
44:6e:46:32:b5:7f:5c:2e:5f:95:c1:2b:2c:c9:0e:
3c:a1:be:3b:b1:55:f5:43:fc:e7:7d:16:61:ab:c4:
9f:30:2e:81:ed:17:6a:01:04:46:81:a6:e5:9b:bb:
8a:17:4e:f6:c3:fe:a6:6a:19:98:76:59:32:cc:1a:
0b:db:f0:3a:62:50:d4:a9:0f:5d:c7:e5:7a:1f:8f:
ef:7f:4c:c8:23:7f:ed:00:23:e9:8a:0c:dc:33:9f:
44:64:89:81:5c:40:0d:d3:c9:7a:2b:73:f2:ec:df:
06:a2:33:f9:47:9b:18:a7:60:44:21:26:b4:e4:ff:
92:c6:47:88:a4:88:e9:72:82:84:c6:67:c0:15:c1:
7e:f0:d8:a3:e2:fe:35:a7:14:89:b5:1d:cd:77:c2:
09:61:39:fd:f6:f4:a4:5f:72:f9:4b:39:fa:af:30:
76:f3:c4:a0:ed:d1:43:71:62:9f:75:9b:82:b9:26:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:41:89:2A:41:D5:8B:1E:32:46:59:21:E5:A2:1C:2F:E0:27:05
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4e:21:8a:d7:ee:86:56:6b:5e:23:91:e1:72:9c:9b:79:2a:
84:d6:d8:05:ca:a0:a8:af:4e:59:f0:95:6e:b6:5c:be:43:7f:
22:8d:fb:9c:cf:01:0d:6d:de:5e:46:34:a7:e3:9c:0b:4b:0a:
f2:a5:4a:91:e2:dd:66:32:2a:e3:51:97:7d:e7:c3:70:f2:59:
76:54:a7:f9:47:35:f7:f4:ad:ff:10:dd:d4:09:43:57:c9:62:
83:cc:bf:30:7c:b7:db:8c:f8:2f:d2:dc:b8:b5:fb:47:65:ca:
4a:ea:09:90:3f:38:94:4b:be:48:2e:f4:9a:42:08:2b:1e:e6:
09:8d:84:5a:45:ec:f6:88:1a:bc:d5:d8:ab:e6:4f:55:19:8a:
9e:cc:3e:8d:26:55:7d:47:7f:82:3d:4d:a5:00:27:5f:71:42:
1a:ec:42:70:d5:7d:2a:5a:79:6f:b9:28:76:20:cf:e0:1a:5c:
ae:02:06:18:08:1d:a8:5a:d6:a3:32:a6:d2:9d:d4:7b:4c:0d:
4d:6e:82:6e:4b:47:a2:e4:4a:54:6d:7a:c0:18:c0:f9:db:63:
24:ac:cb:2d:87:70:01:a6:5b:cd:bd:b7:bc:fe:4a:f6:4f:43:
c6:1b:61:eb:78:60:77:36:23:c9:d9:0b:f2:b4:71:fd:3d:f3:
9f:fb:83:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKGXbSw6+5a9d+fnwi9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzI4N2UyM2JlZTY3Y2E2NjJmYmQ3NzlmY2JjMTgyZWM1
NTNiZTMwHhcNMjUwNjI4MTMwMTA5WhcNMjUwNjI5MTMwMTA5WjAzMTEwLwYDVQQD
EyhlYzcwNDE4OTJhNDFkNThiMWUzMjQ2NTkyMWU1YTIxYzJmZTAyNzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvujqAtbOjYHh6eZGRRwBS+artM/c
I1ZiqCUXyyT8AsqSlWx/b39MvXRjwn0MYeWhro2R/Jvkc4X+bqVt3c8OncQ7y9Dg
jCWZU9hEbkYytX9cLl+VwSssyQ48ob47sVX1Q/znfRZhq8SfMC6B7RdqAQRGgabl
m7uKF072w/6mahmYdlkyzBoL2/A6YlDUqQ9dx+V6H4/vf0zII3/tACPpigzcM59E
ZImBXEAN08l6K3Py7N8GojP5R5sYp2BEISa05P+SxkeIpIjpcoKExmfAFcF+8Nij
4v41pxSJtR3Nd8IJYTn99vSkX3L5Szn6rzB288Sg7dFDcWKfdZuCuSZpbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxwQYkqQdWLHjJGWSHlohwv4CcFMB8GA1UdIwQY
MBaAFDMyh+I77mfKZi+9d5/LwYLsVTvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUt
NDljMDcyYTgyNTk1LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUtNDljMDcyYTgyNTk1
LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU4hitfu
hlZrXiOR4XKcm3kqhNbYBcqgqK9OWfCVbrZcvkN/Io37nM8BDW3eXkY0p+OcC0sK
8qVKkeLdZjIq41GXfefDcPJZdlSn+Uc19/St/xDd1AlDV8lig8y/MHy324z4L9Lc
uLX7R2XKSuoJkD84lEu+SC70mkIIKx7mCY2EWkXs9ogavNXYq+ZPVRmKnsw+jSZV
fUd/gj1NpQAnX3FCGuxCcNV9Klp5b7kodiDP4BpcrgIGGAgdqFrWozKm0p3Ue0wN
TW6CbktHouRKVG16wBjA+dtjJKzLLYdwAaZbzb23vP5K9k9Dxhth63hgdzYjydkL
8rRx/T3zn/uDeg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:52 2025 by rpki-client