Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: 4nyeNJ/Xj9wvrX5yl1gsqhuqA/SjquLHCM2sxD79X2s=
Subject key identifier: 4B:7F:0E:B6:16:48:B1:83:DF:A9:20:53:CB:F9:56:6B:DA:35:F5:09
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 0199FEEBC26CDB64E3CF72C1E4CA87596B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 12B7
Signing time: Mon 20 Oct 2025 00:01:27 +0000
Manifest this update: Mon 20 Oct 2025 00:01:27 +0000
Manifest next update: Tue 21 Oct 2025 00:01:27 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: FTuO/YqCdwLvNjO08D6krMrLhUs/5lwzFwWn6okNyA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c2:6c:db:64:e3:cf:72:c1:e4:ca:87:59:6b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Oct 20 00:01:27 2025 GMT
Not After : Oct 21 00:01:27 2025 GMT
Subject: CN=4b7f0eb61648b183dfa92053cbf9566bda35f509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:42:9d:fd:d8:28:2d:42:91:c7:29:fe:67:
25:a6:bd:92:d6:a4:08:d8:19:99:f5:f1:10:78:31:
59:ae:0b:34:f7:33:41:1e:c2:cb:42:58:eb:0d:4e:
b5:8c:84:73:8f:2c:0c:6b:a7:4d:a5:9d:25:3b:58:
a9:2d:fc:ba:58:b8:c3:f9:d6:6e:e4:a7:22:37:2d:
09:0d:06:e3:90:d0:e6:17:8d:87:9c:7f:18:00:fa:
2d:73:74:6d:ff:53:ff:f8:e4:78:26:b0:d7:90:78:
20:28:29:b5:01:ed:3e:d9:0f:2a:a3:37:2f:05:f4:
a1:d2:82:fe:93:68:8b:85:9d:b7:21:e2:6c:a6:df:
32:eb:8f:87:c4:2c:1f:4c:81:8e:76:c1:26:56:67:
cb:20:f5:30:ee:88:c0:3e:cc:2b:75:6a:06:00:97:
a5:2d:3a:e9:6c:a5:7f:f5:b9:4c:7b:42:e6:01:cb:
93:a6:34:ef:82:7e:a1:40:d0:76:4b:20:5b:9b:bd:
d8:d8:1c:b0:c5:0c:80:d4:03:c9:d2:b8:94:a5:1c:
d9:4e:40:6b:75:2b:9e:c7:fe:78:38:35:94:2a:1d:
59:42:3b:ba:9e:c5:ee:1d:18:e0:4d:f9:57:ef:4c:
41:98:42:da:8a:a1:1e:52:5d:95:6f:d9:75:3e:b8:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:0E:B6:16:48:B1:83:DF:A9:20:53:CB:F9:56:6B:DA:35:F5:09
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cc:72:33:a4:2e:19:2d:c1:83:54:a2:83:1a:5a:0e:bd:aa:
08:ce:c8:92:64:52:d9:36:e7:cf:35:fd:ff:6a:1c:47:62:d2:
4e:f2:84:4b:ab:cc:58:79:47:97:40:1c:5c:a8:ec:f6:da:8a:
53:64:40:43:a8:d5:e0:6b:1b:d7:8e:1c:23:69:f6:72:72:b9:
54:18:b0:30:86:1f:9c:d1:4e:41:7b:23:6a:dd:a0:72:ba:86:
90:ae:9c:01:26:a3:90:1d:6d:d0:5a:0f:97:09:ff:af:90:aa:
aa:b5:0b:c2:d2:60:8d:34:d9:65:14:d7:14:39:3e:ec:08:45:
2b:d8:b8:07:1c:3e:76:fc:a1:ae:6e:e7:84:e6:08:bb:c8:eb:
f0:4f:79:99:c9:5b:c6:f4:3b:0d:0c:b9:96:46:c4:b9:52:61:
7c:7d:33:b6:23:cd:91:3a:94:01:ae:cf:c9:ff:db:f3:4c:0f:
6e:61:8f:bf:fd:29:a4:2e:f7:a8:36:ff:a6:7f:b7:44:f6:35:
60:84:57:f5:d7:ff:8e:c2:1b:82:5b:3c:bf:54:35:ed:ec:9e:
f7:e5:11:2e:03:75:e0:48:05:7a:02:a7:f1:4d:cc:08:cd:12:
63:c4:f2:c5:ef:c3:0c:29:5d:da:f1:ef:db:8c:ff:35:5b:50:
ae:4c:f8:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+68Js22Tjz3LB5MqHWWuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTJiNTM0MjZmYjYxNGQ5YTVhNmQ4M2Y0MDA1NjZhNjYw
YzlkZDIwHhcNMjUxMDIwMDAwMTI3WhcNMjUxMDIxMDAwMTI3WjAzMTEwLwYDVQQD
Eyg0YjdmMGViNjE2NDhiMTgzZGZhOTIwNTNjYmY5NTY2YmRhMzVmNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLpCnf3YKC1Ckccp/mclpr2S1qQI
2BmZ9fEQeDFZrgs09zNBHsLLQljrDU61jIRzjywMa6dNpZ0lO1ipLfy6WLjD+dZu
5KciNy0JDQbjkNDmF42HnH8YAPotc3Rt/1P/+OR4JrDXkHggKCm1Ae0+2Q8qozcv
BfSh0oL+k2iLhZ23IeJspt8y64+HxCwfTIGOdsEmVmfLIPUw7ojAPswrdWoGAJel
LTrpbKV/9blMe0LmAcuTpjTvgn6hQNB2SyBbm73Y2BywxQyA1APJ0riUpRzZTkBr
dSuex/54ODWUKh1ZQju6nsXuHRjgTflX70xBmELaiqEeUl2Vb9l1PrjP7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt/DrYWSLGD36kgU8v5VmvaNfUJMB8GA1UdIwQY
MBaAFJmStTQm+2FNmlptg/QAVmpmDJ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgt
NzkxYTYyZDJkOGFiLzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgtNzkxYTYyZDJkOGFi
LzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMxyM6Qu
GS3Bg1SigxpaDr2qCM7IkmRS2TbnzzX9/2ocR2LSTvKES6vMWHlHl0AcXKjs9tqK
U2RAQ6jV4Gsb144cI2n2cnK5VBiwMIYfnNFOQXsjat2gcrqGkK6cASajkB1t0FoP
lwn/r5CqqrULwtJgjTTZZRTXFDk+7AhFK9i4Bxw+dvyhrm7nhOYIu8jr8E95mclb
xvQ7DQy5lkbEuVJhfH0ztiPNkTqUAa7Pyf/b80wPbmGPv/0ppC73qDb/pn+3RPY1
YIRX9df/jsIbgls8v1Q17eye9+URLgN14EgFegKn8U3MCM0SY8Tyxe/DDCld2vHv
24z/NVtQrkz4fA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:07 2025 by rpki-client