Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: LKJ4jjtCeXP5S6ZJtAWnmRf3BH04t0LKS1vyozQnKoQ=
Subject key identifier: A1:4F:F2:81:8B:44:FB:0C:0D:09:5C:A5:35:31:BF:34:0A:0D:F4:31
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 0198D6CD79F2C47FB0EEEADD0670AD09E989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0D1C
Signing time: Sat 23 Aug 2025 12:00:46 +0000
Manifest this update: Sat 23 Aug 2025 12:00:46 +0000
Manifest next update: Sun 24 Aug 2025 12:00:46 +0000
Files and hashes: 1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: Mjv23bzrkGVDKvA79nLrH4AXDP3TshjX8Ayj1IooSVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:79:f2:c4:7f:b0:ee:ea:dd:06:70:ad:09:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Aug 23 12:00:46 2025 GMT
Not After : Aug 24 12:00:46 2025 GMT
Subject: CN=a14ff2818b44fb0c0d095ca53531bf340a0df431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:71:05:9f:8d:63:92:4b:5c:be:44:27:10:
3b:58:23:8e:d6:c7:a0:0f:a1:93:9f:18:4b:78:df:
2c:ff:0b:80:5d:bc:c3:52:e2:8f:e7:bc:d6:68:8d:
56:17:f4:90:32:d1:22:c5:75:c2:5e:49:ac:e3:5b:
bf:82:d8:96:98:13:cf:e3:0e:a1:f1:4a:5e:c3:62:
f3:ef:3c:af:65:66:1e:26:3f:c8:2a:f1:f0:00:fb:
d3:59:9c:75:64:e0:49:a3:6b:77:ec:22:74:7f:0a:
33:a6:f3:4c:7d:f1:95:a4:5a:8f:5a:66:3e:5a:a9:
03:ba:63:1c:af:c1:1d:85:d2:a1:7f:86:ed:39:6f:
c7:1d:e7:ac:c0:c1:de:e5:ad:7f:19:9f:40:89:41:
2b:94:04:f8:5a:52:7c:0f:d5:07:b6:bf:f0:c2:46:
c8:fe:06:fa:6b:74:81:b6:b6:a1:06:23:2e:4b:09:
f1:65:22:77:7e:3a:ad:ea:a5:63:f2:65:ae:52:08:
2a:b1:2e:31:f7:72:70:dd:c0:9b:4d:f7:a6:f3:38:
99:7a:6b:eb:60:95:3a:1d:cc:ab:da:76:51:df:6a:
16:4b:3c:36:e5:74:6b:45:09:22:3f:15:59:9f:26:
96:96:c1:61:74:42:8d:fd:61:cc:f4:83:ff:89:32:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:F2:81:8B:44:FB:0C:0D:09:5C:A5:35:31:BF:34:0A:0D:F4:31
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bb:98:71:80:74:6d:c9:87:19:95:ca:61:4b:0d:e7:c4:c3:
90:54:57:43:bb:16:71:8d:61:cc:99:d6:a5:8f:e8:b3:6b:1a:
ce:cd:3d:1c:08:23:5f:46:bb:49:00:31:d5:5b:de:ee:a6:9e:
30:34:5c:1b:d7:82:f9:f9:47:5f:3b:87:dd:ca:5e:72:ae:2d:
69:2b:61:64:2b:e4:d7:01:a6:dc:b2:4f:a5:e2:80:de:de:94:
f3:73:ab:1c:e6:88:26:c3:e2:24:8e:1f:ec:f2:98:fe:06:e4:
2f:69:ae:3f:77:bb:c8:38:25:19:85:0e:8b:14:a2:d8:43:6e:
c3:7a:29:21:21:4a:c0:a1:0d:c3:18:33:dd:24:67:e9:0c:ef:
60:8f:9c:9f:0c:a9:80:03:7b:7f:86:19:30:af:0a:b4:a1:9b:
75:99:ee:37:82:ca:11:c2:2f:19:58:d5:77:1f:f3:20:4d:3d:
ba:85:d2:ca:5d:b1:22:29:68:9b:5c:50:0c:34:4b:f7:af:29:
6a:41:7e:05:a5:7a:5c:f1:fe:15:cc:f8:ba:9b:eb:e1:83:ab:
a2:58:79:8f:78:a8:2b:78:9f:eb:c4:b7:c9:42:70:87:fa:5e:
d0:6f:f6:6e:2a:32:0b:ce:44:f6:85:46:9c:2d:c4:b8:69:d7:
63:33:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:13 2025 by rpki-client