Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json)
Hash identifier: b7kic0KS1lFYdaoLeVxmi0j7LpeUHwr1SS3I+acNRZs=
Subject key identifier: 6F:74:1B:54:76:6A:AD:83:5D:85:60:39:A7:DC:83:45:63:EF:5F:18
Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589
Certificate serial: 0199FD34613F30738E6E38158AD67B038284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
Manifest number: 0688
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=)
2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: HI6LxGp8HZSC5y6ZsRFfgPvnw23Ls8Pg9V1nmerPtT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:61:3f:30:73:8e:6e:38:15:8a:d6:7b:03:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=6f741b54766aad835d856039a7dc834563ef5f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:81:63:c9:98:38:4f:eb:3b:c3:e1:5b:3e:
59:54:ca:19:24:92:8b:40:35:e1:38:6e:4f:fa:d1:
ec:32:8e:df:bc:8f:cc:ba:12:96:a7:80:6b:37:6f:
cf:d8:8c:4d:24:0a:e7:61:f9:1c:bb:e1:f6:5d:38:
f1:c6:06:5b:63:69:5d:db:ff:68:2f:da:cb:e2:10:
b6:0d:26:61:93:33:24:38:b0:31:a6:44:32:ae:67:
11:66:17:e5:08:9b:b0:d8:38:55:29:d9:cc:09:85:
27:6e:75:e6:91:d0:fa:c8:c0:ba:64:b4:fc:80:f0:
63:d2:68:3d:0a:9e:ed:8b:fe:68:06:32:ae:4b:8e:
d4:f3:d2:10:61:ce:a8:99:a7:be:22:8c:d0:21:e9:
95:e3:71:09:24:e5:39:ea:7f:4d:e4:51:cd:eb:51:
41:c8:56:94:a7:cc:12:e9:16:56:91:d5:81:1c:0f:
cc:2c:83:ed:64:9a:31:e0:0c:ee:f9:cf:cc:71:1b:
91:ae:57:ad:bd:90:6a:a3:b6:d5:35:18:d1:d6:ad:
3b:ba:fa:c7:78:be:a7:7b:0d:ff:b9:41:80:a0:17:
0e:6f:b8:b1:13:06:26:39:f6:0f:2f:f2:ce:9f:12:
76:7e:61:1a:13:a1:fe:c8:dc:c5:b2:34:35:1f:7f:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:1B:54:76:6A:AD:83:5D:85:60:39:A7:DC:83:45:63:EF:5F:18
X509v3 Authority Key Identifier:
keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:23:f1:b1:78:1d:2d:e2:af:39:66:37:97:62:a2:b9:a6:23:
c6:bd:07:f2:08:f6:8e:f8:47:27:f2:be:fb:6a:8a:79:1e:b5:
68:b8:d8:6e:07:2c:d2:4e:ac:e9:fd:e7:6d:94:97:ab:a5:6b:
4b:e0:96:50:0c:d4:31:7a:73:90:7b:8d:01:bc:ad:f9:6c:07:
b1:bc:3f:af:ee:76:58:77:9d:0a:75:37:2e:37:a1:8d:24:28:
77:d6:79:f3:15:9e:26:eb:f5:2d:4e:f9:f4:80:7c:cc:0c:07:
ec:35:64:2d:1c:06:d5:ed:74:ee:39:b0:81:46:4e:7a:86:9b:
4c:77:2e:74:a4:97:a5:f4:37:82:88:a1:e8:46:1b:1e:65:38:
18:82:e4:51:ea:81:e6:03:94:74:19:33:7d:f0:fd:40:36:f4:
0a:2f:b7:f3:b0:5e:eb:c5:1d:0c:bc:55:a7:ce:53:68:4f:da:
60:49:e4:f9:c5:3d:f5:db:12:a8:44:f2:9b:56:17:96:a0:c7:
b2:71:e6:02:4e:28:8c:f8:4c:e3:68:fe:15:4e:c5:c5:7b:61:
ad:28:a1:11:b8:1d:aa:f2:5c:d7:98:e3:d8:fd:fd:ab:1a:e5:
82:dc:be:9f:aa:1a:ce:4c:ac:49:a4:36:60:c0:f1:56:5c:24:
37:ac:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:58 2025 by rpki-client