Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: ZFN5lBZM5EK8jFYKLK0x0gRL/D/mXaQF39+TUN1/uPo=
Subject key identifier: 1D:7B:DD:E2:AF:B5:7E:B2:83:96:A3:6B:EA:2C:FA:38:FF:39:64:8A
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 0198D705AC371FF0832AAA8179220BFF3055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:09 +0000
Manifest this update: Sat 23 Aug 2025 13:02:09 +0000
Manifest next update: Sun 24 Aug 2025 13:02:09 +0000
Files and hashes: 1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: UNvYjBNXp/TSkc0UADyRQ4um2+u7scOc286zx7eGcZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ac:37:1f:f0:83:2a:aa:81:79:22:0b:ff:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Aug 23 13:02:09 2025 GMT
Not After : Aug 24 13:02:09 2025 GMT
Subject: CN=1d7bdde2afb57eb28396a36bea2cfa38ff39648a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:b0:ff:30:3e:6f:a4:69:2d:32:d4:b9:82:
b2:82:2f:0d:71:25:df:6e:0b:73:2e:9f:8e:ac:e4:
34:4b:7e:af:47:95:5e:92:f1:2c:78:ab:18:4a:6f:
8b:66:7b:3f:78:33:22:ec:16:ce:cb:a1:7a:e6:24:
5b:3b:46:1e:67:19:1f:b2:cc:16:4c:23:4b:e7:9f:
3e:1b:73:65:cb:66:cd:e8:a1:da:ae:30:bd:bd:7c:
de:e1:81:13:88:31:09:d9:2a:62:2a:39:5a:45:8e:
48:56:a4:57:ce:e2:38:f9:ca:00:52:cb:42:01:35:
95:56:ad:73:1f:7d:26:c7:c0:13:13:39:31:7c:3e:
ef:85:19:75:02:35:00:79:bc:29:d6:4e:35:f4:f6:
7a:3f:79:3e:86:89:f3:89:b0:bc:7b:f5:33:c4:c8:
71:0e:1b:00:03:90:6f:47:a6:13:42:25:36:e4:ba:
fa:20:52:bc:38:cf:18:d4:50:56:88:1b:f6:b1:b3:
d7:83:5b:db:2a:59:23:59:4e:46:aa:0e:ac:0a:75:
67:b4:af:85:9f:ea:bf:e9:8f:53:17:df:42:51:42:
ee:0b:63:a6:ea:30:e2:4c:89:63:96:f6:ca:c9:68:
1f:22:40:c5:2c:20:7c:ab:21:75:df:48:ea:7a:ca:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:DD:E2:AF:B5:7E:B2:83:96:A3:6B:EA:2C:FA:38:FF:39:64:8A
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cb:d2:7d:09:e4:6e:bc:5e:27:35:f2:31:64:0f:ac:d8:fd:
7b:69:f8:5b:d9:2c:18:eb:e6:8a:fb:a6:c5:d6:f1:86:2b:bf:
e7:9f:8b:c1:85:d6:4e:9d:d8:57:11:30:55:4f:75:76:86:a2:
cd:42:51:93:e3:78:34:05:07:81:96:d1:5a:19:24:f3:fa:7e:
0d:8e:b2:f6:c7:28:b6:08:1f:58:b6:25:e5:69:f8:56:03:c6:
e3:a5:29:4d:d1:ef:8c:e7:69:4f:cd:bd:6f:7e:14:37:04:dd:
25:85:91:b8:f7:a0:0c:77:a1:4f:1f:4b:af:04:e4:b6:67:b3:
ca:8f:68:76:d6:ba:a7:02:45:34:88:41:a6:c0:b3:16:ca:32:
a0:6b:6f:60:cf:21:35:91:fe:54:25:70:9e:4c:b0:65:86:d8:
70:2f:61:79:99:3f:93:d7:45:60:5f:eb:15:2d:93:bc:09:c0:
b7:aa:0f:27:3b:c4:02:d4:5d:38:9e:59:6e:6c:de:3b:52:01:
f4:c6:8b:13:9b:1e:9a:9d:c9:7e:3e:7a:98:5a:5b:7a:61:2d:
66:b8:94:b9:0e:f5:f3:d3:85:81:83:13:e9:06:7c:a3:46:f2:
c4:1c:72:fa:c8:e5:93:67:0a:e2:d1:c6:4d:42:31:7f:41:83:
b9:f3:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:16 2025 by rpki-client