Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json)
Hash identifier: lKaaqHO7hvExgM+mrCNN2Txl3epnu0nD5wcwecwqyms=
Subject key identifier: 7A:8E:D0:7A:A9:71:93:A7:E2:30:3D:5A:45:BC:41:31:97:FD:AB:B1
Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589
Certificate serial: 0198D5BC0E1447B3380722175945831FB1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
Manifest number: 05EF
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=)
2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: R5Oxjg4FpTHJpKfGr7HyF10ClF8lBrz1PqkbqzOmNKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0e:14:47:b3:38:07:22:17:59:45:83:1f:b1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=7a8ed07aa97193a7e2303d5a45bc413197fdabb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:72:97:49:42:8c:90:58:67:e6:c1:11:2e:
d7:5a:f3:7c:b7:7d:8b:45:d8:f6:57:58:0e:d1:d7:
53:7c:b2:f8:82:af:ee:96:b4:aa:c9:16:4d:30:2f:
8c:0d:b2:d5:0f:37:e6:24:b1:c5:80:77:f6:38:49:
53:4d:1a:b8:4f:8c:4c:26:8f:c9:8d:d0:f2:ee:3f:
d6:fe:94:f4:f7:15:15:bd:5d:c9:59:8e:39:d5:7f:
4f:ad:ec:00:b4:6e:0a:9b:66:cc:f2:bb:7d:be:29:
ff:4e:98:bc:a7:20:47:84:58:51:1d:3b:d8:cb:32:
4a:6e:8f:33:6a:fd:c2:d5:7b:ff:71:05:67:57:3a:
b6:e8:15:8e:fb:bd:11:da:8b:9e:5e:c2:57:83:1a:
1c:76:63:9b:bc:e6:14:ea:82:1f:47:b1:f4:e9:7f:
53:e0:ed:03:8c:31:c0:c0:df:77:eb:ab:6a:88:7a:
c9:f8:8f:0e:7e:e3:38:b8:bb:7d:76:f5:c9:bc:ad:
0c:d3:c4:3a:c9:61:ee:6e:fa:7c:d2:66:eb:15:7e:
be:76:c6:e8:df:90:a5:90:6f:49:5a:6b:21:03:cf:
ee:91:cf:b5:3e:16:20:ea:71:b6:3c:3f:69:10:23:
aa:f9:74:1f:6d:0f:21:12:d0:c9:fd:6a:26:27:ff:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:D0:7A:A9:71:93:A7:E2:30:3D:5A:45:BC:41:31:97:FD:AB:B1
X509v3 Authority Key Identifier:
keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b0:e6:f9:91:71:e4:ea:25:c0:05:fa:3a:1e:30:0f:23:b9:
b0:0e:45:92:8e:e4:f3:59:70:96:c3:b5:af:20:36:5d:84:0f:
3e:bb:e2:8f:1a:b4:43:04:c6:42:28:6c:9a:54:d0:58:e4:3c:
90:45:b1:4a:81:f0:3f:e8:ad:c8:3a:dc:5c:87:46:aa:e4:c6:
b6:c0:ea:b8:66:20:f1:ea:05:08:ab:b2:11:50:26:8b:e0:ba:
05:e7:c6:e9:4f:e2:bc:be:c6:1b:73:d8:1d:25:e4:e7:12:ba:
8b:18:df:d7:f4:f8:ed:55:86:ab:95:ff:19:b4:c9:35:39:1e:
8a:fe:92:05:62:a5:68:e2:a4:d5:f5:ad:67:9c:2d:9f:28:10:
6b:aa:69:57:e2:3a:03:35:95:95:61:34:6b:23:40:76:bf:1a:
28:ea:c9:45:3c:95:db:1e:b1:d3:73:4f:e9:e6:72:0d:08:a2:
c9:54:d0:30:7c:79:4e:fa:21:ad:76:33:aa:c8:bb:08:67:1a:
cd:2d:e0:bc:28:52:df:38:5c:8d:40:b1:6a:76:e9:50:57:af:
d3:f6:d3:63:4c:26:db:46:e7:84:42:5e:12:f7:b5:8d:0f:b5:
b6:56:f5:82:45:45:1a:13:ef:69:43:ad:c7:ee:9e:0c:63:9b:
26:63:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:09 2025 by rpki-client