Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: cIja7cSTMKiEV+NZ6gKV96oKK3lpBWDxE3aY5zU49VE=
Subject key identifier: 26:9E:84:EA:03:60:45:97:5A:F5:2A:AC:E0:7C:2B:0E:45:17:F0:DE
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 0197B7458A5E1C21A0A5D01CABB666666C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: dBmQRUMCT08HOh+UV3yulIvH5D93lsrxT1BO/yEOWy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8a:5e:1c:21:a0:a5:d0:1c:ab:b6:66:66:6c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=269e84ea036045975af52aace07c2b0e4517f0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:5c:f9:f8:8e:99:4f:7a:a8:0f:56:0f:8b:
c0:b1:12:d7:cf:96:8d:bf:59:9e:46:cb:bc:a0:d2:
e1:e7:d6:07:e0:2d:69:7e:d4:a4:99:06:9e:43:62:
f6:2b:20:74:50:b9:89:e5:9d:86:18:ba:ea:23:ba:
a1:fd:dc:8b:3c:7c:b3:37:eb:77:6d:ae:ff:4a:60:
34:67:11:89:7a:b6:ad:76:ad:5e:20:f7:52:60:d4:
f2:8c:f6:c6:72:74:f5:54:2b:01:07:3b:9c:3b:ae:
7a:bb:7d:d1:32:30:2a:c0:ce:b2:c5:65:d4:f5:2a:
bd:3c:a4:36:75:f9:23:ab:0a:cf:27:56:3c:99:1e:
f0:89:3b:57:42:54:17:f9:27:e9:d0:66:02:cf:2e:
c7:a0:37:73:fb:7d:8a:80:f6:48:92:21:26:50:5a:
f7:c1:52:b0:01:89:1f:9d:08:a5:71:12:63:d3:08:
29:86:e8:eb:ae:85:77:c7:a6:74:9f:d3:f8:04:75:
c9:f7:5c:97:d8:a7:60:c5:6a:af:ce:4f:9e:69:05:
bb:3a:b4:28:36:86:0a:d8:ae:83:32:51:be:99:53:
ba:1b:e0:a1:52:ee:1b:33:22:dd:6d:af:49:bb:08:
b9:cd:00:6b:73:95:c2:21:ac:1f:10:07:1a:48:88:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:84:EA:03:60:45:97:5A:F5:2A:AC:E0:7C:2B:0E:45:17:F0:DE
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8d:11:19:bd:76:87:6f:9e:71:d3:30:8f:75:ba:92:05:56:
0a:f3:06:3a:e5:65:9b:f7:0c:c0:52:f2:64:e9:41:34:e0:ed:
a9:e1:b0:b1:f3:8d:53:be:2f:24:57:21:b5:1b:70:88:21:c4:
8d:a1:65:a2:ee:2a:3c:e9:68:bd:33:0f:fe:f6:95:d1:ad:a8:
69:99:a6:86:b3:ff:69:ac:76:03:59:5b:17:03:a6:11:74:77:
1b:50:17:cd:93:94:67:63:bc:14:51:bb:42:26:cd:3c:63:16:
9d:51:af:85:9a:16:e1:be:90:3d:00:0f:6e:1a:c5:ad:98:1f:
d6:64:7f:4f:70:a0:81:6d:48:06:62:02:7d:b6:77:c5:bf:21:
bf:ee:5b:e2:21:a8:c9:47:21:10:43:08:4f:61:98:9a:ae:64:
cc:c5:3a:48:fb:03:f2:c5:3b:e8:a6:06:b4:09:39:a7:4e:75:
ac:92:e8:fa:70:65:89:ab:51:01:a2:f5:e2:ef:72:00:10:4c:
da:44:73:d5:dd:cd:cb:4f:32:d7:8e:b6:2c:00:23:99:80:df:
46:c4:af:1b:56:79:77:e6:c3:46:57:25:d8:c2:63:88:03:45:
8a:a1:66:8a:28:4d:07:10:59:51:61:67:ab:ad:9d:96:40:5f:
37:28:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:16 2025 by rpki-client