Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: ijR958/u4H2mjMvGAkuUnb29gGr6SZ9QUgM8o29xsus=
Subject key identifier: 5B:F6:4D:51:76:2B:33:E3:F4:06:D2:A2:42:FE:0B:9B:80:5B:AB:DE
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 01976FD0D3991EFB44A7046046C7B2DE146E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 19:00:45 +0000
Manifest this update: Sat 14 Jun 2025 19:00:45 +0000
Manifest next update: Sun 15 Jun 2025 19:00:45 +0000
Files and hashes: 1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: /UjTC4fEG9ZwcHUYBmpvcqzw+7tVoAXbkIOs0SMAvdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:d3:99:1e:fb:44:a7:04:60:46:c7:b2:de:14:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Jun 14 19:00:45 2025 GMT
Not After : Jun 15 19:00:45 2025 GMT
Subject: CN=5bf64d51762b33e3f406d2a242fe0b9b805babde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:41:fc:c0:40:e3:d3:35:0d:36:f7:e8:d4:
9f:d5:93:bb:00:38:0e:f7:83:db:40:d3:84:fd:99:
30:b2:5d:30:05:16:da:7f:17:4f:41:43:6d:16:e0:
0f:55:be:fe:97:a6:3d:8c:d5:f2:5e:77:cb:7e:b3:
95:21:b4:aa:d3:ef:75:2b:19:e2:e0:8f:68:62:be:
56:f6:12:b1:79:c3:dd:5f:ff:c7:a7:69:d4:d6:c1:
ef:f8:de:34:07:bc:1a:ee:ed:bd:de:0e:9d:5d:fb:
1d:00:4d:b5:89:75:48:bc:3e:8e:04:5f:1c:1a:9d:
04:15:ad:1d:e0:bc:63:f5:b9:4a:bc:3c:4b:df:c2:
eb:91:ef:3b:37:bf:c1:e4:3b:89:0b:0f:dd:23:c1:
b5:9e:78:f7:c0:2b:3e:e0:e2:d8:6a:d8:19:7b:39:
22:1e:6b:3d:65:27:4f:1d:e1:b3:60:8e:aa:e2:61:
02:4c:ec:c6:3b:cf:0a:ce:8d:a5:5e:24:74:e3:4b:
6c:b0:4e:ad:d0:b6:56:4c:8b:6c:b3:cd:54:fe:a8:
c6:bf:7e:46:78:95:c9:58:b2:6e:b1:a1:b1:54:f4:
75:59:3d:0d:af:c0:be:c2:e5:3c:b9:85:b4:80:f9:
48:13:15:0e:81:ab:22:8c:28:1f:62:9d:41:5f:f8:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:4D:51:76:2B:33:E3:F4:06:D2:A2:42:FE:0B:9B:80:5B:AB:DE
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4e:3e:d7:fb:b8:01:16:51:8f:90:7b:b5:b6:f2:a9:aa:08:
23:9b:7c:27:30:33:cc:f1:1a:b1:8a:1d:8e:45:72:0b:e8:dc:
0c:1e:9c:6f:36:59:ed:7e:16:44:7b:fc:cb:14:51:90:a3:03:
bf:85:2b:6e:e9:5f:61:f1:34:d2:21:94:0b:82:66:71:ca:5e:
0d:3d:f0:f6:b7:b3:5c:e0:aa:23:61:1f:c4:7b:7c:f3:07:19:
a7:21:ce:ce:74:04:ff:a9:df:c6:c3:02:04:38:fa:73:4f:e6:
97:9b:47:6a:67:ad:ff:72:e4:e8:c5:fa:6d:1c:31:8d:ca:34:
99:28:36:12:74:b1:00:3d:e7:ae:1a:0b:b5:8a:ce:ed:a5:fc:
5a:b8:2c:88:09:96:e9:16:12:20:4f:56:61:c5:23:bc:f7:6d:
e7:d5:cd:77:3f:d2:65:fc:dd:e2:3c:d4:00:fd:73:4d:c5:0f:
9c:4c:da:95:92:8d:f2:7c:24:31:11:79:87:5d:73:c3:dd:45:
3a:41:54:69:d3:14:7f:56:c8:a7:f4:ce:39:e5:76:a2:32:b7:
fa:7f:28:f1:66:69:03:2c:77:21:7b:8a:51:c2:4a:16:d2:0e:
78:5d:6f:f3:98:af:ff:96:f3:b5:44:6c:ce:e8:7b:63:38:6f:
49:62:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:20:33 2025 by rpki-client