Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: pA0B671Lno4bjz+OHSqfnlhvC/ws8DDYrMebJoTVbkM=
Subject key identifier: 0C:22:78:4B:28:49:04:10:E4:31:21:F8:50:C6:4F:95:19:95:0D:61
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 0198D773300BC82754F8F3E0AF41FD4D3EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 121E
Signing time: Sat 23 Aug 2025 15:01:47 +0000
Manifest this update: Sat 23 Aug 2025 15:01:47 +0000
Manifest next update: Sun 24 Aug 2025 15:01:47 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: ioNh8cNToAawFzNGWMdTkBot0dL2t53PC7N0ijQi1cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:30:0b:c8:27:54:f8:f3:e0:af:41:fd:4d:3e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Aug 23 15:01:47 2025 GMT
Not After : Aug 24 15:01:47 2025 GMT
Subject: CN=0c22784b28490410e43121f850c64f9519950d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:14:27:a8:67:02:82:27:7f:74:a8:b7:d7:
3d:b8:73:da:6f:70:8e:22:fa:e7:0a:12:56:b0:d3:
a1:83:08:46:58:18:f6:80:96:dd:bb:4f:b4:f9:4f:
02:b5:83:9f:66:9c:90:e6:c5:08:ac:08:85:3b:08:
37:92:0a:90:38:e1:04:8e:eb:96:13:39:3f:ab:50:
e1:a8:7b:e2:5f:15:bf:6b:34:32:9b:86:2d:e3:6a:
22:29:30:0f:af:c5:d9:1d:66:b1:e3:ac:4d:69:22:
59:f1:88:ee:7e:1c:25:67:f5:23:5f:2a:bd:2d:36:
67:fe:da:bf:96:40:40:3a:1f:40:ad:94:ed:1b:ba:
d1:c2:6f:d1:b4:aa:37:6f:58:56:9f:f3:78:5e:14:
14:e5:ff:f2:86:65:67:ae:73:1d:85:e5:96:91:45:
fb:65:e5:64:a9:59:f3:ec:c1:13:e6:70:75:6e:16:
34:f2:93:57:0f:b3:66:6a:14:df:0e:c2:b1:59:7b:
07:55:4d:9f:63:80:d9:eb:7b:fc:8b:29:e9:f1:7c:
7e:de:3a:a0:6f:0a:22:63:3d:84:65:0c:4b:38:21:
27:88:32:9f:69:36:d7:3d:6c:6a:d7:b8:d8:3e:b8:
fa:c3:49:c0:a4:65:32:89:f0:36:8a:4e:e7:35:ea:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:78:4B:28:49:04:10:E4:31:21:F8:50:C6:4F:95:19:95:0D:61
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:a5:15:5e:ea:f5:52:4a:3d:d7:b8:ee:2c:80:19:c9:4a:
ad:2c:d6:de:94:bf:91:0c:57:38:ee:fd:a8:98:c8:00:43:be:
cf:49:d6:08:bd:2c:f2:b1:a1:02:27:09:3e:06:c5:87:c9:60:
00:a1:66:82:e4:98:50:1c:b8:ec:52:35:dc:dc:fc:8f:f9:7d:
0a:12:c8:97:08:be:23:97:df:98:4e:19:e5:2b:09:7d:71:9e:
1c:71:e8:20:ad:39:ca:82:6e:94:82:1f:df:50:9a:72:40:b1:
c1:25:7e:72:ca:45:c4:c9:f5:18:f2:0d:0f:c7:89:80:dd:57:
84:7b:a8:c0:60:ae:4e:54:ee:59:84:63:aa:71:78:62:0a:9f:
b0:c6:49:3c:e9:1f:e9:80:c1:48:fb:cf:dc:f9:74:52:85:34:
30:12:a2:b1:3f:a9:7d:24:45:7d:18:16:c3:81:17:09:b8:6a:
c5:1d:bd:7f:29:bd:d2:8f:a2:54:0f:68:4c:10:51:98:af:68:
15:5c:d4:bd:9b:2c:8f:cf:fa:01:80:80:dc:7c:64:c1:31:12:
3b:01:57:cd:24:b8:e6:09:1b:ac:bd:8f:4c:06:30:bb:f9:f4:
23:c2:82:5f:d0:bb:15:cc:7f:80:c1:18:df:d3:e5:48:a9:38:
31:48:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:03 2025 by rpki-client