Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: m7LPbHLZOJfm6MSOPwDBC1LwCzTvba+JDMPkQ0fkT9o=
Subject key identifier: 64:0C:59:AE:72:DC:1C:FE:F2:8E:DA:E7:E4:F4:42:60:6D:DE:27:9F
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 0197B7B312BA156985FB09D355E254FA2C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 010A
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: AJ71PlG04lfpMN4SYfccWrmcnEt9sgVRil4gvU6dTLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:12:ba:15:69:85:fb:09:d3:55:e2:54:fa:2c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=640c59ae72dc1cfef28edae7e4f442606dde279f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:98:27:28:f1:91:78:ff:27:19:9f:f5:43:
23:e6:72:11:d7:a0:cf:c2:4d:d4:27:8e:3a:13:0e:
27:18:89:fd:bd:d5:75:dd:e8:14:5d:5b:58:99:18:
85:97:8e:35:11:f1:d6:08:d0:7a:e6:7a:fe:8f:4f:
7c:c3:d1:89:ad:c4:55:17:36:36:38:18:28:8e:6c:
6c:4b:c0:02:6d:e4:ae:cb:c8:07:71:3a:fd:f8:0e:
25:98:18:8b:2f:d7:77:16:ea:cb:6d:ed:53:5a:b7:
f3:f0:a3:0e:f8:d0:a3:51:de:23:13:b4:52:93:09:
5a:36:0b:0d:cb:da:51:82:6d:cb:42:03:60:47:1a:
1d:b3:62:d1:1c:df:ea:f8:2d:14:8f:16:f5:26:37:
ff:8e:ea:c1:20:82:4d:71:67:88:a7:b2:f3:8f:e0:
07:28:a0:f3:e6:03:df:2b:07:c8:58:23:ee:dd:4f:
b8:f9:5e:9e:cf:9d:67:35:37:e0:fe:bb:c0:cc:69:
ca:dd:1d:ec:cf:84:5e:be:1d:d2:2e:4b:4f:50:d3:
69:41:0b:f0:b0:de:5a:b4:5c:37:13:eb:70:84:20:
8d:04:5a:9a:2f:f4:b5:ac:f3:c1:0c:b1:4c:0d:a7:
6f:79:d0:9f:d7:05:a6:d4:05:d7:79:6a:55:29:82:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:59:AE:72:DC:1C:FE:F2:8E:DA:E7:E4:F4:42:60:6D:DE:27:9F
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:d7:92:f3:15:22:15:e4:96:64:66:9a:00:87:e6:ec:e4:
9e:3d:46:78:37:af:ca:01:65:fd:eb:3d:8f:bf:e5:14:87:03:
60:21:d3:82:d5:5f:a1:99:2b:a3:5c:23:be:f0:69:77:16:70:
d6:19:42:a8:46:1a:79:4d:1d:fd:eb:cd:5a:8e:39:2e:d5:1d:
1e:1f:62:84:fd:6c:6d:23:4a:75:d9:67:a3:4d:9b:24:6a:3b:
de:14:80:71:0e:24:bd:11:31:fc:31:6d:c4:a5:3e:43:1a:12:
61:ae:56:55:27:be:fe:bf:17:78:cd:5f:25:e2:a2:4f:64:4e:
c8:03:db:c4:e8:ae:85:d0:b0:95:62:f4:27:3d:63:54:d0:5c:
86:e3:fd:da:be:03:2d:48:cb:a8:8c:17:f5:43:c0:cb:fc:17:
96:5f:5d:8d:e1:70:29:5c:4c:02:15:a1:7b:9c:97:da:59:63:
f4:8e:b5:0e:62:5c:0c:cb:ab:8f:85:ce:4a:98:af:b6:87:e9:
f7:32:31:1d:0a:c7:80:bb:1d:0b:ea:0e:05:fa:7d:88:bc:f0:
1a:58:ff:88:4d:a8:3f:32:a3:f7:9c:b8:f5:b5:65:1f:3f:4a:
ca:31:91:9d:87:91:0d:97:f8:8b:e9:79:0a:c3:b5:9d:1e:9d:
67:41:78:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:11 2025 by rpki-client