Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: 3hRJI78jGLibhh8GEPyl4FSkTeLmgwMS73xHVdMwGQc=
Subject key identifier: 49:64:A5:EA:3D:0A:0B:3B:36:9B:59:61:EF:CD:0E:2A:D5:F7:5E:3F
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 019768BC16D8FBD02055FCAC10E620C9127E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 0F87
Signing time: Fri 13 Jun 2025 10:00:46 +0000
Manifest this update: Fri 13 Jun 2025 10:00:46 +0000
Manifest next update: Sat 14 Jun 2025 10:00:46 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: kigJYu0Avc18zrtXWhBvv8cJPJjcbXHbRRQepD7/nC0=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:16:d8:fb:d0:20:55:fc:ac:10:e6:20:c9:12:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Jun 13 10:00:46 2025 GMT
Not After : Jun 14 10:00:46 2025 GMT
Subject: CN=4964a5ea3d0a0b3b369b5961efcd0e2ad5f75e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:6b:30:3c:59:9e:41:d7:1b:b6:01:92:7e:
db:b4:58:bc:5e:88:c2:d8:a4:00:07:c9:6a:8d:07:
c7:80:75:57:88:04:0e:a4:6f:8d:07:2d:a4:3f:54:
6f:ff:fd:f7:bd:fa:98:b7:9d:c9:d4:b5:bf:c5:98:
1f:cc:6e:cd:51:f0:ca:5f:1f:b3:0f:d0:b2:ea:16:
41:47:0b:b2:3d:ae:37:ca:4d:65:16:ca:91:18:21:
74:f0:dc:78:8c:4e:12:dc:1b:dc:b4:f5:d0:55:80:
65:62:a8:29:6e:49:59:4e:04:90:49:59:98:c1:d3:
a5:b3:c3:99:32:b4:72:a3:e7:74:b3:be:d3:93:6c:
4b:9c:33:b7:1b:a2:e3:9a:a3:f2:81:93:74:05:99:
30:05:2f:0c:cc:2f:da:8f:2c:bb:bf:08:62:cc:e5:
ea:13:76:69:d5:a3:14:09:df:6d:6a:81:a7:c8:e6:
87:a0:98:68:21:c6:f8:86:15:e0:f6:d7:b0:e6:7c:
70:6a:71:67:0e:04:4d:ca:1a:15:81:ae:e0:5f:f2:
02:8f:f8:bc:ec:60:c6:52:0f:7e:03:a9:28:d1:3a:
80:01:11:27:ad:4e:ae:b8:d3:37:0e:34:77:68:51:
17:70:e9:87:ce:19:b3:30:50:a7:e3:56:0e:ad:2d:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:A5:EA:3D:0A:0B:3B:36:9B:59:61:EF:CD:0E:2A:D5:F7:5E:3F
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:87:a7:69:3d:6d:5e:99:2f:cd:65:4b:b3:ee:f5:f1:e3:
13:6e:7f:22:d3:83:21:61:a1:70:e3:f1:cb:e6:a9:a5:78:3b:
60:9a:70:9e:2d:73:e6:79:c7:0e:4f:95:91:48:45:f1:ae:b4:
44:d1:3f:48:dc:ff:c9:f7:5c:11:ac:d6:4e:2a:19:e3:07:46:
42:a1:58:a1:c7:c8:33:af:4e:7e:90:55:e5:c5:43:31:d0:d2:
87:fe:6c:94:5c:32:c3:72:af:30:c7:a8:6e:e3:c6:e3:ea:8d:
27:61:7a:09:53:10:36:21:f5:f8:09:c2:95:4f:0f:28:7c:21:
2e:1a:41:eb:84:96:1d:67:3e:4f:e8:bf:01:db:1c:22:40:d7:
44:68:6d:4e:9c:f2:94:27:8b:66:d9:09:77:34:b7:ec:85:d5:
ce:db:f4:06:14:d6:54:0f:ef:34:cd:1a:15:6e:09:bc:88:d6:
c6:f0:1d:ea:28:20:0b:5a:79:8b:06:16:99:38:a0:a3:ec:46:
75:f5:33:59:63:ef:4a:60:0d:31:11:72:52:0d:01:c2:a3:94:
7e:b6:af:86:bc:14:df:c7:5f:a1:de:3c:9f:c4:6b:2b:2e:cc:
0f:f5:ae:8e:57:54:6e:96:88:74:af:73:1c:cd:d9:ff:38:b3:
69:1a:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:21 2025 by rpki-client