Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: X6eyfIvhM1JY5WMGvFE6u9Nc6cO4nV0SUqS89X3Izwo=
Subject key identifier: BB:EA:D2:AD:72:C1:61:3A:B7:07:B0:39:74:56:E8:A2:D5:FB:C5:11
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 01977A549BADAEF200C61E560FE3ABD60DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 14EB
Signing time: Mon 16 Jun 2025 20:00:54 +0000
Manifest this update: Mon 16 Jun 2025 20:00:54 +0000
Manifest next update: Tue 17 Jun 2025 20:00:54 +0000
Files and hashes: 1: LgelsY-16hZE8VmZ4UWScnrAkQA.roa (hash: 5MPF2K6ZagDsXMwY0mVJRSAJCcCewM4ZcbU+TqCGJzs=)
2: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: zwAsNHfTx8zuTl40JY/cxtTg48/MdFmVhfhvWN/7pVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:9b:ad:ae:f2:00:c6:1e:56:0f:e3:ab:d6:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: Jun 16 20:00:54 2025 GMT
Not After : Jun 17 20:00:54 2025 GMT
Subject: CN=bbead2ad72c1613ab707b0397456e8a2d5fbc511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:80:a2:02:39:70:6e:21:c0:63:13:5a:6f:
66:5f:ce:1e:af:40:ab:7e:36:30:c2:ba:49:20:3f:
da:7d:de:13:5d:a4:2f:30:0e:dd:06:bf:e7:cb:6a:
20:29:5d:6f:19:45:a5:35:b2:c9:ea:e2:e2:90:4d:
30:bf:71:0c:73:27:f0:5b:be:57:06:4c:e8:95:69:
e9:2b:4d:88:a2:45:39:83:6c:27:1c:21:4a:85:80:
c7:f6:9e:3f:45:14:fd:77:ec:1f:20:c2:8d:5f:61:
de:80:64:d3:5b:68:3e:4f:75:ff:18:8b:0e:f6:65:
c9:a6:02:81:50:8a:11:62:3a:ee:22:70:8d:9c:2d:
4c:1b:71:e0:fa:c4:dc:bf:a2:07:44:a6:3a:63:ff:
32:43:ae:5f:a2:1e:0d:32:30:9a:46:33:d3:b9:2e:
1a:f8:82:c0:fc:04:3a:db:7c:6d:49:c0:4c:da:5e:
f9:e5:6c:32:ae:90:12:15:7b:85:88:a5:9a:90:0b:
11:03:e2:5a:0c:30:7c:3e:d1:be:83:ac:e1:3e:b2:
d7:21:ff:1d:04:55:94:5c:00:5d:06:08:4b:d3:c3:
10:26:de:60:b0:b7:fd:f4:e8:68:80:d0:b3:33:23:
72:58:88:ce:1e:46:49:f6:b0:27:0a:17:c3:03:79:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EA:D2:AD:72:C1:61:3A:B7:07:B0:39:74:56:E8:A2:D5:FB:C5:11
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:ab:ca:4c:c6:9c:c5:0f:89:ca:4b:e2:0c:c0:1e:d8:b3:
ee:0a:fb:af:d6:48:65:9a:32:89:0d:5f:ec:a1:e6:b1:80:2a:
a3:ae:99:fd:90:eb:70:dd:16:d9:fa:4e:91:31:b5:0c:47:b8:
23:65:50:e0:53:49:af:a3:4e:d2:c3:d7:c1:fd:d5:22:9a:1c:
56:4d:83:af:fb:c7:67:8a:39:6b:20:b5:6c:21:a9:88:94:a8:
2b:7f:58:1e:c5:96:04:23:dd:cc:bd:1a:eb:a8:d6:09:c0:56:
41:0e:e3:f7:0b:45:b8:dc:83:a6:6a:36:4e:5b:4f:35:c7:70:
31:60:47:54:34:d8:1c:87:f2:ed:de:ee:77:df:e1:2c:c6:73:
52:5f:e9:e9:3f:b8:83:35:51:18:9a:ea:8f:13:59:ed:b4:eb:
d3:6a:2a:e6:42:25:5d:ff:56:81:5e:a4:a1:79:f9:34:8d:ed:
e4:d5:0b:5e:6b:f4:2a:2f:45:80:53:88:d3:57:28:b9:04:10:
ef:bf:df:92:f9:c4:a5:71:b1:8b:7a:03:46:ac:f6:a7:d7:8d:
69:00:ae:3b:36:23:83:11:cf:6f:19:96:e0:89:7b:3d:39:54:
7d:61:e1:f7:5a:0e:fe:a9:7c:7e:09:11:91:bf:98:d7:83:c3:
27:8e:57:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:00:09 2025 by rpki-client