Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: +dHyStUYUXCXjpUNxqVsJ8jeDj+8TbB7/TXSW3YO+jA=
Subject key identifier: 30:8E:18:43:7D:FB:5B:89:80:72:E1:13:13:EB:09:8D:71:D7:D3:3C
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019A006C3AC412B3A0282412992F82DFE79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:24 +0000
Manifest this update: Mon 20 Oct 2025 07:01:24 +0000
Manifest next update: Tue 21 Oct 2025 07:01:24 +0000
Files and hashes: 1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: 8nSitvzcgP5oSnfCU4+oGfe9i4eK6IUMxESz+fcm730=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:3a:c4:12:b3:a0:28:24:12:99:2f:82:df:e7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Oct 20 07:01:24 2025 GMT
Not After : Oct 21 07:01:24 2025 GMT
Subject: CN=308e18437dfb5b898072e11313eb098d71d7d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:08:f5:ff:e8:ff:5e:61:bd:02:66:83:88:
8d:30:ca:a9:17:18:ff:ce:c2:9a:d4:52:c9:07:96:
0f:60:ff:6f:c4:69:3c:d5:ca:cc:d2:f2:bb:d1:42:
a3:4e:f1:a8:41:93:d7:c2:56:1d:1d:f5:02:7c:67:
9f:be:00:2a:9d:6d:47:ab:cb:ff:98:84:dd:12:1a:
f5:0e:6c:90:12:50:91:6f:de:c1:1c:0e:74:ae:33:
74:05:06:b9:8a:91:43:63:bb:fb:40:b6:8a:c5:34:
c3:1f:15:95:1c:22:e7:3c:1e:74:13:ef:27:7a:04:
f8:37:be:ae:17:7d:ff:4d:cb:1a:ae:8f:43:17:92:
bb:e8:3d:74:5c:b3:82:84:21:15:da:0c:41:1a:cf:
ce:3e:99:21:ce:ae:48:82:fd:64:f1:2c:47:cb:09:
93:9f:0e:47:fc:fc:38:81:f4:99:7c:c9:77:be:95:
fd:88:48:2b:f5:24:3c:46:1f:11:5b:8d:7c:d3:0e:
5e:b2:15:15:64:e6:bc:f2:77:b6:d6:60:a6:6a:df:
d5:20:58:29:ef:e5:7d:e4:36:ca:14:ff:0b:ea:e9:
83:1e:77:f2:dd:93:dc:56:2a:be:67:49:76:e3:12:
9b:d9:39:bb:8c:3b:1b:9a:e5:bd:21:f4:4a:64:f6:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:18:43:7D:FB:5B:89:80:72:E1:13:13:EB:09:8D:71:D7:D3:3C
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:12:91:97:16:76:22:fc:ee:9f:8e:ba:d1:6e:f3:3b:03:
22:77:15:2c:8b:14:05:e6:be:e6:08:42:b9:ca:f9:cb:63:e4:
bb:05:75:1a:ee:27:06:9e:d3:31:e3:ed:9f:79:6a:b0:09:cd:
5d:dc:b3:af:4b:de:a5:d8:d1:9a:bc:64:8e:69:04:54:8d:9a:
df:e1:ab:08:b1:7c:e6:71:d6:30:d6:b8:0e:75:e3:ea:06:ec:
88:1a:52:8d:7f:a2:23:d5:59:bf:59:9b:f8:83:5a:76:2a:0a:
58:21:e4:1b:4f:42:76:85:4f:42:c7:50:06:eb:29:10:3c:a1:
42:98:f3:00:b1:d4:b9:31:39:fb:db:d3:15:a6:fa:c6:aa:29:
ee:bc:d3:23:51:43:24:7b:bf:f0:2a:9a:c2:51:b4:b3:4f:61:
32:9c:4e:c9:a1:3e:cc:f6:a1:b5:40:e1:c9:3a:06:54:5d:30:
19:0e:a8:55:63:81:18:ed:1b:2d:a1:8f:56:9d:9e:97:e1:f7:
60:67:4b:27:84:ea:17:88:09:f3:5b:bc:f1:a1:9f:03:8a:b5:
ce:b4:98:b8:bd:4f:19:e7:1c:0b:6a:2e:fc:bb:63:5e:f0:89:
1a:0d:f3:87:9c:91:91:ea:d1:26:21:e4:04:69:b4:39:6e:e3:
58:04:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:39 2025 by rpki-client