Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File: mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier: Tsdlk+oK2v88bLbMj7Www7eoYRcTY60slgz7XnhPXTI=
Subject key identifier: A2:72:68:DA:0D:C7:96:77:AB:C3:D5:E0:27:AC:02:8E:DD:EB:54:EC
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer: /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial: 0199FDDA13C38A9F054A0EF242A0AC2B50C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number: 14FF
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=)
2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: mY5jH9ExFW140DQ4+keJGNQQngGjCQlMAzsp+OL7Df0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:13:c3:8a:9f:05:4a:0e:f2:42:a0:ac:2b:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=a27268da0dc79677abc3d5e027ac028eddeb54ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:c4:1d:97:9b:26:cb:05:82:b7:67:fb:46:
78:dd:2b:e7:b0:bd:ec:b8:a5:5d:74:1c:d8:b3:01:
95:1c:9c:a2:66:41:1a:13:55:c2:72:8a:63:5a:a4:
32:34:f4:c5:c3:53:93:85:d8:7b:ad:f2:9a:9b:7a:
d0:3b:4d:c6:40:84:df:9f:14:ec:32:40:9d:1d:52:
f2:6f:f2:a9:c7:7f:eb:8f:ef:9e:e7:08:ff:c4:25:
ac:3a:7e:d1:fd:ac:fc:e1:95:e3:01:b1:53:a6:60:
b7:57:f1:c7:bb:e7:01:99:13:d4:0a:29:a2:43:4d:
c8:7f:57:01:98:ba:cc:08:7c:61:8f:8f:bc:19:3a:
32:c4:79:e2:74:ad:1e:9d:97:cd:37:8e:1f:e7:c3:
e7:55:ce:df:3d:a3:fd:cb:d9:19:16:79:3d:e0:69:
23:c6:d0:b7:f9:ac:fd:84:e7:92:9b:2b:f7:31:cb:
f6:35:d2:e2:e2:77:45:3f:13:fa:5d:92:5d:28:29:
c0:d2:4e:d3:35:ac:ab:d9:43:02:06:74:6d:c4:3c:
6f:62:e7:1c:66:10:7f:c8:35:63:f0:ad:4e:a8:8b:
67:9e:91:d2:ae:73:a3:f3:b9:4c:32:50:0f:ae:e9:
d7:2b:45:e7:f7:53:3e:fa:72:b7:d9:27:6b:37:e2:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:68:DA:0D:C7:96:77:AB:C3:D5:E0:27:AC:02:8E:DD:EB:54:EC
X509v3 Authority Key Identifier:
keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:20:d1:83:8d:df:05:35:c8:d7:d0:b0:55:9a:a7:4c:16:dc:
14:55:f0:97:a5:ac:42:c6:7f:1a:2a:d8:fb:fb:2c:f8:c6:63:
16:64:08:e6:d8:1a:8e:d5:f9:8a:d7:e4:5e:f8:44:1d:af:19:
b9:40:ab:ea:28:8c:84:66:6a:5b:4c:ee:12:1f:da:63:48:07:
ed:02:d6:83:e7:3e:43:68:88:31:4c:18:b4:54:54:68:12:4e:
ad:79:aa:18:d1:b6:9a:c9:9f:a8:cc:2e:f2:15:13:f6:89:2a:
12:a4:d3:7d:fc:c5:be:b8:8d:c7:7a:f9:93:32:46:f9:09:81:
5c:aa:4e:c5:f4:95:20:07:92:d3:35:90:fb:0a:a2:1a:5a:c5:
5e:87:52:e8:46:10:b9:d6:75:69:a4:05:42:54:ab:d7:67:6a:
db:64:88:6d:05:56:35:04:27:4e:25:33:7f:54:06:c6:6b:e7:
fe:76:ca:5a:a2:41:49:91:03:b0:6f:8b:05:d6:ad:b4:b6:1c:
4a:97:0c:ab:f3:c1:d6:38:81:54:73:a3:4a:2f:5d:11:ab:9e:
c7:ff:e2:fb:58:f2:de:19:34:9d:7d:ba:45:b4:6e:fc:b8:dd:
85:04:46:e5:5f:1d:0e:33:84:1a:6e:a4:3b:35:37:e1:59:2a:
f0:54:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:16 2025 by rpki-client