Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json)
Hash identifier: xaX7j+EobMDe4lh2/XAHbbxyMLUHoEdfq/cYgJ4jozI=
Subject key identifier: 72:20:91:29:62:5F:8A:71:CF:00:A8:21:FE:CC:DF:F6:DB:7E:ED:E3
Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Certificate serial: 01967DC5ED943F5D82791DE627395398AB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
Manifest number: 095D
Signing time: Mon 28 Apr 2025 19:00:45 +0000
Manifest this update: Mon 28 Apr 2025 19:00:45 +0000
Manifest next update: Tue 29 Apr 2025 19:00:45 +0000
Files and hashes: 1: 0SGERXpsIldifCTWUfwaAPLWZj8.roa (hash: Wl6639BT2YEzAcDZ1BBEKA7sfTmRzgLCKdjibP72VaE=)
2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: YNtMW7/vjmAc70FnCML6Cu6Xw8IZ9nD3NHGrRJnOQHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ed:94:3f:5d:82:79:1d:e6:27:39:53:98:ab:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df
Validity
Not Before: Apr 28 19:00:45 2025 GMT
Not After : Apr 29 19:00:45 2025 GMT
Subject: CN=72209129625f8a71cf00a821feccdff6db7eede3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:b2:07:cd:23:b3:97:be:c8:f9:e5:c1:fd:
24:fe:03:25:6d:d4:a6:48:e6:33:fe:5e:c4:b6:ed:
97:30:cc:3c:b8:37:07:83:67:1e:2b:dc:38:af:e1:
cc:53:5f:87:f8:88:a5:4b:61:99:25:3a:57:f2:76:
17:93:b9:dc:7b:cb:13:d1:84:19:20:2e:db:3c:a7:
ae:4a:c8:52:a1:0b:5b:59:2d:06:20:d2:25:37:ce:
e6:62:ad:fb:4c:78:ca:9f:2c:45:f7:63:26:ef:73:
08:2f:75:83:e5:5f:90:12:15:39:6c:3f:57:7f:f3:
3d:ba:84:5e:4a:eb:cc:ee:c1:d0:15:b5:fd:d3:0a:
86:a3:62:d3:38:b8:39:e5:ee:ea:bf:d3:a0:37:18:
1a:f3:4b:a2:37:e1:ab:40:61:ab:78:1d:6f:6c:ac:
25:aa:36:72:30:a7:27:1e:e2:97:e7:43:07:bb:50:
a6:48:32:8f:93:bb:21:06:cd:49:7b:69:e1:f5:71:
b5:fe:4f:32:f6:c8:21:e6:f1:cd:34:83:93:ca:8f:
4b:7c:37:9f:ce:06:b4:b1:33:77:e3:08:56:ff:c5:
2d:dd:20:a0:93:b9:2c:77:49:e4:00:d0:c3:f9:bb:
1a:30:b2:d8:cc:de:53:57:ba:1b:e1:ef:91:b0:ed:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:20:91:29:62:5F:8A:71:CF:00:A8:21:FE:CC:DF:F6:DB:7E:ED:E3
X509v3 Authority Key Identifier:
keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:78:6d:a0:d4:ff:1a:8a:27:99:81:e9:bd:f7:d3:0f:35:f7:
dc:5e:85:ed:0f:e8:c0:70:34:79:07:51:64:f8:4a:0b:e5:b1:
92:fa:cf:21:cf:7a:f2:98:8d:eb:a9:d2:32:c0:12:d3:93:c1:
a7:96:63:a9:1c:35:5f:fc:16:d8:e9:3c:b6:02:e6:8f:0d:61:
f6:ba:f1:a2:ac:dd:30:f8:27:17:63:9f:e9:fd:8e:9d:50:7e:
4a:04:41:03:a2:7c:a3:76:f1:58:c8:a7:04:8b:5b:52:28:18:
c6:7e:f6:80:e6:56:29:b3:b2:75:a2:be:5e:54:9b:41:01:eb:
30:0f:40:af:aa:d6:dc:35:9d:e3:91:c0:30:f9:e6:3d:eb:5c:
64:c8:5b:42:38:ae:67:9d:ca:c9:5d:88:f6:1e:c5:a2:8a:4e:
e7:ff:0b:81:43:66:42:9b:36:47:f1:d2:a1:3f:80:08:8a:5b:
a8:10:cc:3a:1b:45:01:e2:90:0f:a2:1c:21:69:b7:56:9f:90:
6c:34:51:80:41:86:23:8b:bc:1d:be:68:53:32:cc:84:e5:5c:
02:e1:0d:82:89:16:29:db:b2:7d:88:9c:2d:37:3f:71:2f:93:
84:97:92:3b:50:44:be:b4:54:fe:71:32:ae:01:10:66:48:14:
63:af:d9:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xe2UP12CeR3mJzlTmKsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzM5ZTY0YTU4NTE0YzliMDkxZTliMmU2OGUyOTM3MWU0
M2UzZGYwHhcNMjUwNDI4MTkwMDQ1WhcNMjUwNDI5MTkwMDQ1WjAzMTEwLwYDVQQD
Eyg3MjIwOTEyOTYyNWY4YTcxY2YwMGE4MjFmZWNjZGZmNmRiN2VlZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ6yB80js5e+yPnlwf0k/gMlbdSm
SOYz/l7Etu2XMMw8uDcHg2ceK9w4r+HMU1+H+IilS2GZJTpX8nYXk7nce8sT0YQZ
IC7bPKeuSshSoQtbWS0GINIlN87mYq37THjKnyxF92Mm73MIL3WD5V+QEhU5bD9X
f/M9uoReSuvM7sHQFbX90wqGo2LTOLg55e7qv9OgNxga80uiN+GrQGGreB1vbKwl
qjZyMKcnHuKX50MHu1CmSDKPk7shBs1Je2nh9XG1/k8y9sgh5vHNNIOTyo9LfDef
zga0sTN34whW/8Ut3SCgk7ksd0nkANDD+bsaMLLYzN5TV7ob4e+RsO3KQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIgkSliX4pxzwCoIf7M3/bbfu3jMB8GA1UdIwQY
MBaAFDMznmSlhRTJsJHpsuaOKTceQ+PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDUwNGEtMDE4OS00NTU0LWI1MDEt
NjM5ZGM0ZDVmMzcwLzEvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jZDUwNGEtMDE4OS00NTU0LWI1MDEtNjM5ZGM0ZDVmMzcw
LzEvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXhtoNT/
GoonmYHpvffTDzX33F6F7Q/owHA0eQdRZPhKC+WxkvrPIc968piN66nSMsAS05PB
p5ZjqRw1X/wW2Ok8tgLmjw1h9rrxoqzdMPgnF2Of6f2OnVB+SgRBA6J8o3bxWMin
BItbUigYxn72gOZWKbOydaK+XlSbQQHrMA9Ar6rW3DWd45HAMPnmPetcZMhbQjiu
Z53KyV2I9h7FoopO5/8LgUNmQps2R/HSoT+ACIpbqBDMOhtFAeKQD6IcIWm3Vp+Q
bDRRgEGGI4u8Hb5oUzLMhOVcAuENgokWKduyfYicLTc/cS+ThJeSO1BEvrRU/nEy
rgEQZkgUY6/Z4A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:27 2025 by rpki-client