Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: 0+s60s/gJtuRSm82cjQQ29hGk027I4Oa8l3XoBWOahY=
Subject key identifier: CD:50:E1:0F:68:D2:73:12:5E:1C:C7:11:4E:0A:22:A0:7E:4C:9D:6F
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01977564CFE2E2A8A28AE22AA0824F079676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1597
Signing time: Sun 15 Jun 2025 21:00:30 +0000
Manifest this update: Sun 15 Jun 2025 21:00:30 +0000
Manifest next update: Mon 16 Jun 2025 21:00:30 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: zUHkLBHlxZfHfE4tVnFnjiTMqAHbMb+oMPqTDIAFimA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:64:cf:e2:e2:a8:a2:8a:e2:2a:a0:82:4f:07:96:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jun 15 21:00:30 2025 GMT
Not After : Jun 16 21:00:30 2025 GMT
Subject: CN=cd50e10f68d273125e1cc7114e0a22a07e4c9d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:33:36:b3:37:bf:aa:ad:62:54:16:7f:dc:
56:ba:b5:60:a7:78:72:cb:0d:1a:6f:e8:59:1a:95:
53:cf:ee:e2:f3:e9:37:72:ed:f5:e3:5d:41:a1:e4:
92:6b:d6:b0:31:bb:36:6a:19:38:57:12:b0:0c:2c:
08:02:ad:50:34:d0:97:0a:63:d2:6b:b4:f9:37:5d:
eb:32:a4:31:aa:39:1b:af:2a:87:65:2d:4e:d7:da:
fb:57:d3:2d:a0:4c:fa:fe:27:c9:ad:0b:5a:5c:76:
35:49:3d:7c:39:43:9f:d0:0f:6c:dc:ea:2c:b4:6d:
5c:0c:be:9b:9d:1e:70:c2:1f:85:59:13:4d:81:d1:
a5:4e:e5:17:e4:03:f3:46:54:1d:e9:3f:f0:f0:01:
91:dc:77:c5:7c:db:9b:00:93:70:06:a7:e6:e5:db:
83:02:38:33:ae:52:75:09:0b:5a:fa:fc:e0:96:87:
74:74:93:28:6e:9b:b4:21:c0:db:91:39:32:be:f3:
24:3f:da:ce:2d:1b:91:ae:3e:45:5f:ad:68:1d:ea:
7d:8a:7f:3c:b3:b3:7b:d1:34:03:93:74:80:02:ce:
bd:c8:02:7e:a2:f0:29:18:5c:9b:71:37:15:a0:ff:
a0:15:b4:40:75:47:60:84:be:1b:45:55:14:19:0d:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:E1:0F:68:D2:73:12:5E:1C:C7:11:4E:0A:22:A0:7E:4C:9D:6F
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a2:b2:54:e9:68:62:de:77:a7:cc:b2:30:1b:3c:6d:18:3f:
9e:eb:42:33:34:3e:f6:af:04:8a:e0:6d:35:59:a0:f2:8c:28:
f2:ff:e6:8d:8c:91:c8:d0:a0:cc:9b:cd:e2:9d:48:f1:3f:f2:
a3:93:e0:2f:85:d2:b7:e8:e7:dc:69:fc:79:66:24:43:b7:07:
ee:7c:fe:12:30:fb:1b:c9:69:8f:4f:92:cf:fb:aa:58:3a:47:
cc:63:5a:07:86:95:0c:e2:af:d4:38:d9:6b:46:60:8d:28:ea:
e3:eb:47:d8:96:52:72:00:68:09:c4:63:d1:2c:81:6e:e3:8f:
35:11:a6:5f:a0:e7:74:79:b6:dc:97:3b:7e:e0:15:92:00:14:
43:19:44:0f:5a:91:d5:43:95:d2:58:0b:3d:2f:65:a7:5c:ea:
bf:af:c6:01:e1:1c:c2:01:a3:19:48:6b:8b:0f:5c:cf:a5:aa:
80:e2:f4:89:ca:e0:f2:73:7a:10:1f:ba:9d:6a:98:bd:76:10:
82:e8:c2:5c:47:74:ac:f4:61:ee:24:a7:58:bf:0a:87:78:f3:
37:aa:9a:7b:bb:73:c1:58:0b:2b:cc:56:dd:51:5e:d6:0e:2d:
4c:46:09:44:0f:1e:0b:fe:a0:fc:dd:7b:44:ca:7e:6a:79:b3:
e0:9c:8d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:10:11 2025 by rpki-client