Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: rYE/z8fTJCzTlbEG7CKJ835ed/05LYL+08wEPmAZN2g=
Subject key identifier: A4:61:56:B4:85:17:C1:AE:DE:A0:2A:A0:B3:03:F7:69:48:77:C4:32
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 0197B5FC80FED6E0C53FE9AF2522F1AD95A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 10:01:53 +0000
Manifest this update: Sat 28 Jun 2025 10:01:53 +0000
Manifest next update: Sun 29 Jun 2025 10:01:53 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: Q1q/5ZVyqER71e0jY2PwshA9vsrbxUx9hiXlR0yYtmY=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:80:fe:d6:e0:c5:3f:e9:af:25:22:f1:ad:95:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Jun 28 10:01:53 2025 GMT
Not After : Jun 29 10:01:53 2025 GMT
Subject: CN=a46156b48517c1aedea02aa0b303f7694877c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:d9:06:53:7d:84:33:b6:a5:92:c7:2f:6b:
a7:02:78:44:e9:c7:f2:65:cd:18:92:bb:9b:a4:d4:
23:53:4c:7f:05:a7:89:75:e0:47:29:79:b0:56:0b:
e9:dd:c7:6b:7f:da:cd:c6:2d:d1:66:4c:1c:b3:f6:
2c:d9:9c:18:76:81:88:cd:2d:c2:58:29:14:2a:4a:
94:5c:85:b2:a3:93:a5:65:6a:aa:fb:08:a2:b9:45:
b8:18:24:cf:27:13:20:4e:81:77:12:b3:3f:b8:a1:
81:0a:67:05:d8:ac:0f:ad:bf:ff:f0:dd:7a:19:08:
0c:82:be:a6:23:22:5e:dc:29:2f:e6:05:33:0e:62:
c0:eb:1c:57:00:9b:d7:2d:57:3b:4c:41:f6:9c:d3:
f5:ea:a5:2d:c2:c7:e5:09:15:f0:8a:b7:73:34:10:
29:a1:cd:c9:c4:c2:34:87:62:03:7b:df:1a:3d:07:
35:e3:d5:83:4e:eb:e6:00:bc:55:e9:68:e8:37:0e:
62:26:53:41:c2:dc:b0:95:6c:9c:e0:2d:3c:e8:e0:
cd:30:2f:5c:54:32:59:8a:d4:bc:44:b6:a9:39:f8:
d5:eb:45:dc:09:f4:98:47:67:a6:86:eb:b4:1c:2c:
7c:43:49:b1:a6:f7:e5:c0:0f:ac:e7:7a:01:af:c1:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:56:B4:85:17:C1:AE:DE:A0:2A:A0:B3:03:F7:69:48:77:C4:32
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9c:80:d1:7d:23:c7:68:d5:0e:4e:e3:78:94:e5:5d:45:54:
d4:24:c9:e0:1e:b3:05:55:a5:92:58:6b:45:a1:7c:7c:85:75:
6f:d4:31:a0:58:c2:eb:15:20:20:26:4a:17:0b:1b:e0:53:89:
9a:5c:a7:a8:e9:cc:c5:ae:9a:2e:92:9a:6a:14:95:90:b1:07:
53:25:6b:42:d4:4f:19:54:72:09:00:5a:88:52:35:9c:eb:d5:
de:df:22:3d:48:f7:75:bd:76:2b:b7:52:17:2c:0d:11:9f:17:
16:2e:6d:c4:99:29:c2:98:4e:ad:4f:ff:43:8e:b3:b0:b3:75:
e3:41:bd:26:e7:34:80:61:91:77:f8:b8:1d:f9:fe:21:9e:18:
48:93:e4:cc:30:e2:8f:51:de:52:d4:bc:cd:90:bd:4c:89:4b:
76:6f:0c:c1:c2:67:7e:f9:a9:20:a3:19:b0:0c:52:84:50:fb:
e2:40:48:f8:7a:bd:a6:7b:33:32:c9:0a:f6:4c:c5:2b:8a:2c:
6e:22:16:b5:a1:cd:41:bc:67:d6:1e:cc:27:24:2c:65:e2:dd:
4f:64:87:0b:49:f5:ab:03:88:27:ff:71:45:56:e8:0e:90:29:
a0:19:99:cf:51:57:8d:07:f3:fe:b6:0a:4e:b5:3d:bd:be:c5:
db:7f:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:35 2025 by rpki-client