Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: Wondj6dRtJ+gJLZAhheJxBpUFqVdnS7i54DpNVHFodA=
Subject key identifier: 40:CC:6B:50:AF:0A:7C:B0:D2:55:64:72:0E:88:38:6D:2F:85:30:9F
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 0199FC58A353D67F4AED9A9669B71FE8FFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: Jibpu1SoRMMczpP08OOfeX8Dg+OqJITZjC8oUiwqqqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a3:53:d6:7f:4a:ed:9a:96:69:b7:1f:e8:ff:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=40cc6b50af0a7cb0d25564720e88386d2f85309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:64:a7:5a:59:b9:6d:51:4e:82:65:8b:9a:
67:8b:7d:1f:2a:06:d6:6e:b6:3f:38:f9:26:48:c8:
5a:28:76:cb:83:5c:23:95:ae:96:80:7a:c2:9c:01:
55:9c:95:e8:27:ec:3e:72:37:8b:27:45:9b:23:11:
14:94:35:07:9e:78:40:90:fc:a7:ac:1c:f8:d2:b6:
fd:81:5a:dd:32:74:1f:d5:df:47:7f:1a:29:a7:f9:
03:dc:4b:9e:08:95:ae:80:e8:34:af:c7:45:c3:35:
9a:9f:40:e4:e3:73:87:d6:f4:ca:18:80:2e:b9:79:
0c:4f:04:5b:03:ad:d4:31:b0:80:72:2c:43:6e:49:
c2:2f:93:cd:a5:b4:67:1a:ee:82:cb:89:3f:23:7c:
e7:99:b2:e4:d9:c1:fe:8c:26:80:0c:44:3a:12:a5:
55:4b:73:1a:70:ba:43:6e:3b:a4:d0:a7:76:98:2a:
87:49:bd:f3:e0:99:aa:8e:36:a4:09:67:1b:e1:2b:
64:d0:58:23:d2:c3:96:19:50:d9:d6:14:23:57:8e:
f8:88:a1:2e:9c:09:62:13:9b:41:7f:97:6d:74:a7:
fa:30:27:cc:39:2f:f6:28:aa:8e:e3:d8:31:7a:12:
b4:24:09:ca:b5:6e:1c:55:40:74:09:b1:b2:d4:84:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:6B:50:AF:0A:7C:B0:D2:55:64:72:0E:88:38:6D:2F:85:30:9F
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c7:34:f5:74:17:34:2e:36:00:7c:2e:b9:39:0a:5e:97:97:
06:d8:b2:f9:d0:f3:0d:bc:39:b7:d7:ea:60:f8:0f:ad:66:de:
7a:53:e9:97:3a:3e:cd:bd:ef:df:49:aa:f5:fb:60:34:94:fd:
cd:c7:2a:3c:a7:ef:e2:db:aa:ff:97:94:16:6b:39:92:9d:58:
fa:6b:53:d0:58:91:22:01:46:b8:06:81:af:54:cf:86:60:ed:
af:a0:11:39:30:fa:95:b8:72:ae:af:ee:34:c5:58:8c:cc:f3:
e5:c8:21:97:ff:e9:f6:cb:13:8d:41:fc:cc:dc:aa:89:39:e2:
af:8a:86:b6:9f:a9:57:46:47:b8:2c:65:e0:e5:8d:3c:2f:81:
a2:df:e9:fb:4e:76:73:83:f5:7c:4c:dd:d5:a7:cc:4c:76:ba:
cd:6c:f9:b8:b0:ee:ee:80:4c:5b:28:12:e7:c6:c1:14:09:5f:
41:29:c1:0a:fa:b1:15:6e:b8:2e:56:f0:19:1b:a1:89:ec:3c:
cc:9e:e3:c6:ee:7f:33:02:2c:f1:e7:82:39:b1:21:cc:e8:af:
e6:f8:9f:ac:6d:e9:f9:cc:e0:c7:bf:b0:a4:44:ad:b9:47:d5:
27:ce:13:17:31:f9:19:47:1a:bb:35:ed:8a:7e:bf:f7:47:60:
80:b6:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:09 2025 by rpki-client