Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: 2nAJmpS5iO25HyP6oQtixLEw0WEMFwTt2BcGoLAwk0c=
Subject key identifier: 32:7D:F2:8F:59:91:E2:6E:C7:80:C3:2F:4E:C7:C0:57:2C:A6:0C:12
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 01977FB1ABE97237AE94124632BBE7A13692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 21:00:39 +0000
Manifest this update: Tue 17 Jun 2025 21:00:39 +0000
Manifest next update: Wed 18 Jun 2025 21:00:39 +0000
Files and hashes: 1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: yyac1SoKQyX453GZyVCq8iRLr710qBDOVikXsmaWw2A=)
2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=)
3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:b1:ab:e9:72:37:ae:94:12:46:32:bb:e7:a1:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Jun 17 21:00:39 2025 GMT
Not After : Jun 18 21:00:39 2025 GMT
Subject: CN=327df28f5991e26ec780c32f4ec7c0572ca60c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:c7:d4:22:6f:33:eb:60:b8:a1:3d:66:30:
a0:07:ba:44:18:a8:e4:c6:8f:bb:1d:21:44:ae:a9:
dd:f5:b3:9f:0c:50:8c:df:ee:32:d8:1d:1e:e6:e4:
13:6a:8f:82:29:69:16:03:1c:a5:70:ea:4f:04:0d:
fb:ac:92:74:79:e3:74:ff:de:b4:3a:76:4e:6a:66:
15:2a:33:03:86:08:9f:15:1b:0b:26:ec:5b:48:bd:
6f:d3:0c:3a:71:0c:6f:82:72:40:a2:fb:d7:fd:78:
30:6c:95:4f:2a:95:dc:f0:ce:71:7d:8e:0e:8e:67:
ed:d3:c9:1b:38:ae:1d:e6:4d:40:b9:d8:ff:2e:88:
84:fc:6e:36:e1:9a:1a:8c:9a:e7:db:93:85:ca:8c:
a2:ff:92:55:80:8b:51:7f:5e:d0:1e:ad:f9:05:0e:
57:02:43:f9:6a:b4:18:22:53:04:25:08:04:d3:2c:
fb:0e:c0:50:87:47:0e:51:d5:79:a7:b4:ad:f4:1c:
20:0f:f4:8c:3d:db:fd:11:47:b0:5d:7d:45:dd:a8:
ce:a5:e1:52:c2:ef:7e:e5:19:f9:e8:e9:cb:17:40:
e3:81:b9:40:bd:f7:88:ee:8d:6c:8b:62:3b:f0:aa:
06:43:50:fe:fc:7d:de:e6:a7:e4:44:40:2a:25:c2:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:F2:8F:59:91:E2:6E:C7:80:C3:2F:4E:C7:C0:57:2C:A6:0C:12
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8a:f5:1c:70:63:12:95:21:4e:ad:ed:65:5f:44:4c:95:44:
b6:16:52:0d:85:ef:56:aa:31:f6:8e:48:06:56:e4:dc:54:56:
64:18:cb:b1:8d:99:01:7f:03:b7:3b:8f:84:6d:43:26:b1:1e:
6a:69:15:b1:15:f8:61:39:04:7b:93:e6:29:41:71:16:bb:68:
22:9c:6d:b6:f2:2d:0a:35:68:ba:20:e1:a3:5a:6d:7d:d8:23:
1b:85:d0:ce:65:08:5f:55:2e:74:0a:13:7b:2a:6b:0a:93:36:
ec:38:43:4f:34:89:1a:d4:9c:57:9f:93:8d:db:1f:43:50:8d:
48:51:e3:9a:57:e8:ae:b2:f4:0f:43:60:b6:c3:d4:76:00:f0:
df:79:79:7b:64:62:a3:09:2e:67:99:26:77:c8:e6:06:ae:1e:
5b:d7:4b:b4:40:98:98:8e:df:a9:6b:ba:6d:a5:be:5a:84:65:
96:45:f3:11:d1:db:f9:24:01:27:43:f7:e4:7a:ff:8a:89:ac:
23:a9:26:cc:6b:a7:5b:de:f5:1b:60:21:67:ad:03:b6:76:5b:
a3:cd:24:39:1c:a9:0c:fe:fe:11:90:7b:0d:6e:ac:82:fe:c2:
07:fb:89:09:67:c8:a4:cb:2c:53:a9:5a:80:29:65:24:b2:f6:
00:5a:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:13:11 2025 by rpki-client