Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: JmfQMoDtlSF5efNDrFQZZq9AvZl+aNqpqZzjw8+cWTY=
Subject key identifier: 2F:E4:51:F2:F8:C1:9C:C2:A6:EB:91:23:BF:93:BE:61:BC:FA:60:56
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 01976CCF71DD961DCACAB59861C93775AE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:23 +0000
Manifest this update: Sat 14 Jun 2025 05:00:23 +0000
Manifest next update: Sun 15 Jun 2025 05:00:23 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: wlBR8ZAys8N5Z51bDGiDvtzUVi4iSVHUKOyjuvDsvvM=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:71:dd:96:1d:ca:ca:b5:98:61:c9:37:75:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jun 14 05:00:23 2025 GMT
Not After : Jun 15 05:00:23 2025 GMT
Subject: CN=2fe451f2f8c19cc2a6eb9123bf93be61bcfa6056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:10:7b:e6:16:6d:f3:fd:a6:74:28:dc:2b:
f0:ec:b4:8b:c4:1f:00:23:78:1c:7c:29:36:2e:d8:
2a:42:16:88:29:be:b8:b1:ea:23:a9:03:e7:7d:08:
53:34:6a:56:77:7c:63:9d:fe:38:b5:cc:0d:17:bd:
d8:04:a2:0a:52:61:0a:ab:b5:2d:ae:77:07:c1:2f:
22:cb:2d:a9:35:55:c3:a2:ff:02:cd:f3:ca:fa:84:
90:75:1a:1e:14:dd:94:5a:02:90:5c:75:4f:ab:5f:
3c:e6:4d:45:fa:c0:e9:41:80:dc:40:81:ef:f2:fe:
46:2d:bd:0b:ca:d7:80:d4:58:d6:8c:79:5b:1b:c1:
33:24:76:18:f0:8f:bc:d9:02:66:2f:82:d5:62:dd:
41:b3:2a:0b:31:ed:ff:29:ae:59:8e:74:e8:8b:64:
f5:56:2c:b1:c4:8c:18:3d:4f:a5:32:75:8c:b6:bc:
82:57:b0:d6:33:b7:3e:81:e5:0d:df:10:e0:88:d7:
b1:03:dc:5d:c1:b5:1e:cf:72:8e:1d:25:a5:7e:41:
7d:f5:b9:d3:f4:ba:7e:d9:ea:6d:d8:92:5c:d6:cf:
a9:11:0c:f0:40:e2:9d:27:3f:29:ca:b8:db:55:8a:
50:7e:59:f9:0e:17:2e:6f:e9:40:29:a6:28:ef:bb:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E4:51:F2:F8:C1:9C:C2:A6:EB:91:23:BF:93:BE:61:BC:FA:60:56
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:41:67:ba:16:8e:bd:56:fa:6c:6e:88:fe:f9:8c:15:f3:ff:
55:b3:5a:07:ae:57:0a:b4:cd:0c:d2:fa:d6:bf:cd:ec:3a:c5:
ff:97:5e:a6:68:5f:ec:58:e1:5a:7e:1f:04:55:4c:d0:f2:ba:
97:11:b1:2f:7a:21:61:0b:76:05:9e:78:c6:c4:31:10:55:1b:
91:65:ea:60:78:b3:09:02:0d:b9:d0:c6:71:5e:dd:cf:80:3a:
8c:87:a6:70:33:10:06:8b:1b:08:43:69:c7:25:1c:53:6b:88:
35:e1:53:b0:9e:02:6f:da:5d:ff:dc:00:a6:b2:de:e8:7d:1c:
8b:be:34:3a:fe:af:db:6a:af:5e:08:4b:c1:c0:5a:26:1a:22:
40:e5:c5:a6:02:b8:c3:73:fd:6d:82:ae:30:b6:a2:89:c0:cf:
54:02:42:3a:00:b1:a8:d0:2c:7c:ac:40:ed:4c:b4:ee:05:fc:
5d:d5:46:fb:6f:ce:07:7d:d7:c1:4e:f5:05:a1:62:a7:1d:68:
b2:a3:99:09:31:a0:4d:d7:a0:18:3b:0f:5f:fe:d2:5e:e3:6a:
e2:a4:08:ef:77:ec:f9:c8:b7:6f:50:40:bc:8e:38:4a:44:e0:
56:4e:73:fc:8f:ab:65:c4:c8:8e:6f:bd:94:d3:24:cc:14:c3:
3e:b3:6b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz3Hdlh3KyrWYYck3da5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0
ZjRlZWQwHhcNMjUwNjE0MDUwMDIzWhcNMjUwNjE1MDUwMDIzWjAzMTEwLwYDVQQD
EygyZmU0NTFmMmY4YzE5Y2MyYTZlYjkxMjNiZjkzYmU2MWJjZmE2MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxEQe+YWbfP9pnQo3Cvw7LSLxB8A
I3gcfCk2LtgqQhaIKb64seojqQPnfQhTNGpWd3xjnf44tcwNF73YBKIKUmEKq7Ut
rncHwS8iyy2pNVXDov8CzfPK+oSQdRoeFN2UWgKQXHVPq1885k1F+sDpQYDcQIHv
8v5GLb0LyteA1FjWjHlbG8EzJHYY8I+82QJmL4LVYt1BsyoLMe3/Ka5ZjnToi2T1
ViyxxIwYPU+lMnWMtryCV7DWM7c+geUN3xDgiNexA9xdwbUez3KOHSWlfkF99bnT
9Lp+2ept2JJc1s+pEQzwQOKdJz8pyrjbVYpQfln5Dhcub+lAKaYo77s/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/kUfL4wZzCpuuRI7+TvmG8+mBWMB8GA1UdIwQY
MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt
ZTE1NDRjNTdlMzhiLzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi
LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0FnuhaO
vVb6bG6I/vmMFfP/VbNaB65XCrTNDNL61r/N7DrF/5depmhf7FjhWn4fBFVM0PK6
lxGxL3ohYQt2BZ54xsQxEFUbkWXqYHizCQINudDGcV7dz4A6jIemcDMQBosbCENp
xyUcU2uINeFTsJ4Cb9pd/9wAprLe6H0ci740Ov6v22qvXghLwcBaJhoiQOXFpgK4
w3P9bYKuMLaiicDPVAJCOgCxqNAsfKxA7Uy07gX8XdVG+2/OB33XwU71BaFipx1o
sqOZCTGgTdegGDsPX/7SXuNq4qQI73fs+ci3b1BAvI44SkTgVk5z/I+rZcTIjm+9
lNMkzBTDPrNrIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:44 2025 by rpki-client