Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: 8z6i7FPe5zuXM8SRNu2zPmO6e7jS62A9fowODVV/y8s=
Subject key identifier: BF:16:51:FC:1B:40:CD:28:10:E8:BF:70:AB:E8:2A:25:3A:81:B1:D1
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 0198D4E0656B698AA9BCEC2D3651B14A1592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: Y9WJcnX1riC4o6oYJE0zZ15sF5CYX5fiU/OLCROMHB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:65:6b:69:8a:a9:bc:ec:2d:36:51:b1:4a:15:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=bf1651fc1b40cd2810e8bf70abe82a253a81b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:ad:62:24:ba:7a:86:5c:ee:40:09:44:e5:
58:28:d7:70:84:15:fe:26:34:1a:51:b2:a2:e8:7f:
4e:88:dc:86:5f:3f:4f:c7:72:d4:42:37:58:f7:95:
18:98:a6:e5:7b:cc:55:b4:c7:f8:97:a7:e7:e8:be:
67:0f:04:a7:cc:db:41:c0:91:93:e3:0b:e7:a0:87:
6e:06:8e:aa:36:7f:0b:43:cb:68:f2:4a:4e:55:b4:
b7:e5:5b:9c:a4:c1:02:2b:82:01:f4:4f:95:29:f4:
eb:3b:b6:eb:a0:c4:58:af:ff:79:4f:26:df:d4:13:
ab:bb:78:dc:ab:ee:fa:68:ee:60:49:04:33:30:5c:
f4:e0:5c:e7:df:e0:28:a5:8f:e7:eb:f5:aa:d8:2e:
d7:ad:77:ae:77:8e:22:8d:02:71:72:cf:34:af:18:
c9:0a:4b:06:35:c5:8a:29:48:86:ae:87:47:61:9d:
64:2b:b3:aa:97:ff:19:c6:b2:81:57:a7:39:bb:72:
93:c6:4e:45:38:df:da:3e:51:a9:62:a9:32:e4:b3:
38:c8:33:d7:f8:1c:ff:46:4a:4a:d3:d4:fe:b1:a7:
9d:b0:6f:ad:7f:b4:af:d6:08:af:bd:fc:47:84:05:
d8:79:97:0a:13:0e:d3:5c:32:76:03:12:fd:09:af:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:16:51:FC:1B:40:CD:28:10:E8:BF:70:AB:E8:2A:25:3A:81:B1:D1
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:44:ac:ee:60:40:79:56:00:1d:b5:05:d5:cb:83:12:a0:96:
65:b3:0f:58:a4:69:8f:9e:74:c1:e6:bb:c7:92:43:46:06:2b:
7d:da:50:ca:28:87:bd:28:c8:35:a7:10:04:83:d8:14:a2:84:
be:90:84:3f:90:e7:4e:8c:88:e5:5b:fc:79:54:4f:39:b5:78:
3a:60:b3:89:9e:97:c3:b7:25:f7:32:2c:0f:62:6e:c5:33:80:
0a:95:8c:0d:c8:63:ee:99:0f:17:08:24:ac:6c:04:17:a4:5c:
09:89:3c:05:cd:f0:58:21:e7:56:3d:99:5c:1d:66:57:2e:b5:
4b:14:e5:f4:a3:f5:aa:dc:35:77:92:d0:a9:df:10:cf:15:2b:
4e:d5:3b:d5:3c:f4:51:ec:d1:1c:53:d1:87:a2:42:d2:cd:f0:
af:7e:a7:67:21:e5:e4:75:eb:7a:14:77:ab:5d:fc:8f:57:86:
07:45:15:e3:55:81:ad:44:bd:f2:7a:cf:ac:64:17:48:5a:c6:
d9:97:ad:84:35:8c:53:08:d4:be:ba:e9:1a:08:f2:9f:48:93:
bc:dd:9d:c0:37:65:ab:20:fc:13:f0:aa:f8:13:a3:36:75:89:
05:4d:ec:66:49:9b:ab:77:23:e9:a2:ef:06:95:d6:d6:8f:c9:
eb:90:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:12 2025 by rpki-client