Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
File: E6-mzmVC4btSPh0DvQCk0it_2u0.mft (raw, json)
Hash identifier: G89ycmzacy/0cxViXrTEI1cFo9Nh1EoD43oLM+ihPnM=
Subject key identifier: 9D:12:12:1C:52:F2:6D:31:C0:A5:45:C6:48:50:29:AA:D3:C9:8F:03
Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Certificate serial: 0197B6A23764B6707681FC752949FF30E26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
Manifest number: 10C7
Signing time: Sat 28 Jun 2025 13:02:53 +0000
Manifest this update: Sat 28 Jun 2025 13:02:53 +0000
Manifest next update: Sun 29 Jun 2025 13:02:53 +0000
Files and hashes: 1: 3RGBqUK3Xv0JP7ez0P-m3VNiDHY.roa (hash: yrCq7iHuvCP3ZZOy9TgGhkh7qYKM+uZzphtzhnPZGC4=)
2: E6-mzmVC4btSPh0DvQCk0it_2u0.crl (hash: r8wIJnhgab5T70ZzsIggzn4qDME6bohU5wYGHREO1X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:37:64:b6:70:76:81:fc:75:29:49:ff:30:e2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Validity
Not Before: Jun 28 13:02:53 2025 GMT
Not After : Jun 29 13:02:53 2025 GMT
Subject: CN=9d12121c52f26d31c0a545c6485029aad3c98f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:b2:12:95:f7:73:3e:42:5a:e9:0c:dc:90:
d0:38:06:1b:c8:68:2a:f9:8b:13:18:93:27:06:c9:
1a:a8:91:10:81:e9:76:c3:3d:d0:db:c1:8d:98:f1:
da:31:d7:3c:5a:f6:0a:4f:c2:66:9f:b0:3b:3b:0a:
08:6f:0d:5a:00:39:9f:dd:63:52:06:f2:17:18:fc:
aa:7c:de:46:f7:f5:80:cd:38:ba:6c:07:d3:2b:44:
51:11:8b:bf:a4:36:af:6a:b7:1c:85:36:df:95:46:
31:1c:a5:30:1c:7f:51:55:c3:bf:c4:5b:ca:86:39:
41:16:3d:19:12:8a:58:28:0b:02:52:11:4d:ec:8f:
d0:db:ba:5b:fd:98:a1:c3:48:7a:92:9e:3e:ab:72:
a4:f6:7b:96:7f:5a:ba:7e:83:9c:08:ab:eb:8b:71:
67:19:d0:27:c6:b5:3f:00:45:ec:a8:64:50:14:81:
7d:ee:69:a2:df:5c:ce:d7:90:dc:5a:07:f8:8c:c1:
8a:86:3b:7b:9d:97:5e:33:cf:3b:95:80:95:41:88:
e0:04:46:50:12:8b:56:e5:3d:0d:ff:2b:70:85:e9:
e5:56:e9:13:d6:5e:0b:73:85:2f:98:42:3a:c2:d1:
67:57:23:e2:c7:24:f1:fb:f8:72:1b:7d:99:03:1f:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:12:1C:52:F2:6D:31:C0:A5:45:C6:48:50:29:AA:D3:C9:8F:03
X509v3 Authority Key Identifier:
keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c9:cd:f9:fe:47:6b:45:f5:bf:3c:59:ba:63:3f:18:1f:48:
f5:21:28:0c:f6:74:ba:23:b6:b0:f2:d1:30:62:aa:c1:ed:ee:
52:96:53:58:99:9a:4e:63:96:ea:e3:f9:e4:22:7e:79:1c:5b:
bd:58:37:d1:c7:cd:65:47:a0:2f:80:a8:8b:f8:be:bb:89:0a:
34:b9:4c:f8:1d:36:b4:51:03:1b:76:0a:47:30:9d:77:f5:f9:
ba:72:4a:f8:ea:0c:c1:f8:06:6b:37:fd:af:2c:ed:14:63:1f:
45:6b:0a:eb:95:fb:2c:69:f8:af:5d:3a:e5:83:b1:7e:c4:66:
7a:dc:bc:f1:33:5f:11:28:14:f8:79:06:41:bf:6e:e4:46:9d:
ad:e6:8a:e0:87:e9:6e:f1:40:ee:fc:86:22:6e:7a:ac:5e:0a:
39:6c:58:ff:bd:4c:3f:07:14:c7:18:b7:d8:32:25:9f:f6:1a:
44:39:f3:a0:b5:54:a4:30:c4:df:43:87:7c:9f:4c:ea:85:70:
fe:fc:1d:5e:d9:31:27:2b:90:6e:67:96:6f:e3:f2:35:a3:ff:
42:cb:69:b1:de:9f:10:e9:a8:af:64:f3:d7:ee:a8:55:ab:99:
e4:3a:8c:a9:70:c0:12:22:48:50:83:2c:33:ce:38:81:2a:d4:
cc:dd:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:01 2025 by rpki-client