Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: iuFyP1Wh5MJLC9LnUQKw9Kpz4Ik3TEjKmlfYCUW0/YM=
Subject key identifier: 92:66:3F:65:30:5C:BA:D5:38:81:6F:88:B0:97:0A:51:11:AB:06:8B
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 0198D5BC32987A7495EBD1F0315499D6454E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: ejBeqAEYHzvH2Osa1nXYW7IUkuc7yA2ixT93b+u7tjE=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:32:98:7a:74:95:eb:d1:f0:31:54:99:d6:45:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=92663f65305cbad538816f88b0970a5111ab068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:94:f4:15:1a:60:62:71:c4:d5:33:5f:f6:
87:bd:c6:99:4e:a4:20:bb:88:9f:83:3f:69:bd:66:
83:ef:27:0f:64:19:3f:b9:22:f8:2a:c8:09:2f:50:
61:39:c4:53:a5:05:64:9e:d7:ab:15:0f:51:3e:f3:
bb:2d:cd:5c:36:62:f8:0b:0a:c0:21:2e:54:44:72:
a2:a7:42:85:19:1e:f5:e7:6f:48:d3:f4:45:e3:f2:
aa:9b:42:b7:b8:67:34:57:86:f9:b0:f7:14:65:f1:
00:45:70:41:55:f3:c6:65:f5:49:59:61:45:b3:6a:
ac:87:ed:fd:52:30:f3:6a:a4:b1:1b:3d:12:2b:25:
a2:91:04:53:47:14:f5:aa:ed:5b:96:34:e8:15:6b:
06:83:8b:84:b2:5a:1c:c4:75:fd:f8:d8:07:29:aa:
fc:e3:05:94:ed:f6:af:91:ed:bd:72:25:ed:e5:d4:
fb:48:30:ac:48:3f:52:af:b5:9a:21:16:9c:7d:b2:
02:84:3d:46:02:2f:45:24:79:40:f6:49:db:86:0f:
1c:17:5a:ec:2b:ad:19:67:b4:3f:b1:84:96:fa:58:
86:a5:c5:38:86:51:87:eb:54:c2:3f:6e:fa:a7:b1:
31:36:12:c2:d4:fa:18:50:2e:5d:b0:59:00:ef:4b:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:66:3F:65:30:5C:BA:D5:38:81:6F:88:B0:97:0A:51:11:AB:06:8B
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3b:cf:76:0e:3a:3d:a5:d1:ca:79:1b:d4:3d:bb:a2:70:ed:
65:4f:d6:55:93:02:98:b2:34:9f:68:17:db:e8:89:a5:78:61:
0f:08:f7:bb:25:7a:00:26:c0:82:fc:ba:7c:b4:37:56:95:ed:
e3:e6:c2:ba:a4:cb:a2:e0:a6:4e:87:33:ea:eb:58:27:30:72:
7b:30:5d:99:07:f2:e6:da:11:62:6b:34:ab:4d:13:99:8b:19:
fc:d3:00:a6:11:5d:d1:a7:ed:a4:7b:be:fd:65:a1:26:a1:4a:
bf:64:5a:8a:64:ae:95:df:34:89:a7:d6:b5:7e:d5:38:bf:6c:
4e:25:db:3b:bc:47:ab:46:86:b8:f0:ee:bd:e9:4d:f0:62:41:
cc:e9:80:c0:03:da:a9:15:57:0d:e7:76:0d:3f:40:a4:7c:00:
ab:5f:84:57:cd:22:eb:54:c1:2c:55:8c:1c:eb:e7:6a:a6:af:
4d:09:c7:2d:d6:ba:86:9e:eb:82:af:63:22:68:39:1d:c4:c6:
02:9c:23:cc:1a:c6:57:00:f7:6a:dd:fc:6f:02:ff:4c:be:1f:
0f:f0:60:27:5e:37:4d:60:46:b3:c8:ac:36:a1:e0:d2:03:00:
20:2b:f4:27:95:96:c8:ab:18:af:ef:b3:c9:c1:7d:89:8c:47:
b3:59:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:05 2025 by rpki-client