Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: 5BbvRqWpqY8yZvdg6fp8/8QBvqIgXATNrLhwWo9lidI=
Subject key identifier: 08:E8:81:4D:86:DA:BF:41:39:04:FF:5E:D0:4D:0C:0B:82:10:F8:A8
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 0198D6611A5FE1AF871D98A46B8402EB6C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 09B1
Signing time: Sat 23 Aug 2025 10:02:24 +0000
Manifest this update: Sat 23 Aug 2025 10:02:24 +0000
Manifest next update: Sun 24 Aug 2025 10:02:24 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: KnrFNM5o3jPprmZt9XWbzCBQ+rW0jKwqFPht0JuN/bU=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:1a:5f:e1:af:87:1d:98:a4:6b:84:02:eb:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Aug 23 10:02:24 2025 GMT
Not After : Aug 24 10:02:24 2025 GMT
Subject: CN=08e8814d86dabf413904ff5ed04d0c0b8210f8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:cf:71:b7:00:b7:50:70:05:7f:a7:1c:28:
0c:0f:c4:58:f4:a1:71:3e:d5:76:0c:e7:18:f9:21:
71:e7:ea:2e:9f:29:13:28:82:fa:7c:66:36:4b:27:
62:8f:aa:ac:89:fa:29:a5:86:14:fd:b8:13:95:be:
b9:b0:77:d3:c1:d9:63:7f:5e:a9:24:ac:37:7d:2d:
59:4b:6a:7f:2d:61:1f:b8:a0:c2:a8:2d:44:59:c8:
1c:a8:aa:8e:c4:20:1a:a0:96:ed:76:c9:07:0e:aa:
90:61:4c:35:e1:2d:d6:02:bd:b5:83:a1:59:c7:a2:
32:40:6b:fd:93:2f:06:42:c1:ff:0b:70:b2:62:1e:
4c:a7:08:8e:a2:da:5f:85:d0:87:bb:f8:54:2e:88:
22:30:08:4f:70:38:49:2f:26:b3:c2:8e:b1:c2:5e:
a7:76:70:26:54:9c:04:b0:d3:70:de:a7:f3:00:70:
54:36:81:e8:45:d3:25:0a:16:f4:ae:fa:68:45:72:
b8:39:70:3a:d7:c0:fa:d0:37:4d:a0:6a:07:eb:e4:
49:a9:bd:b2:f5:1a:43:f6:b8:8d:93:44:49:62:00:
75:e2:4c:a7:24:06:80:b6:4a:cf:6c:d2:e0:fa:0f:
d6:b1:40:41:93:4f:b8:e9:d9:37:84:f7:7e:09:bd:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:81:4D:86:DA:BF:41:39:04:FF:5E:D0:4D:0C:0B:82:10:F8:A8
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:03:75:8d:80:f3:d3:7c:18:44:32:65:bb:08:66:c6:21:a4:
22:da:30:27:a5:44:1d:cd:f1:f3:83:1d:e9:6d:63:17:18:04:
4a:4e:dc:ef:29:7f:ee:de:6c:17:91:0b:3c:ba:9b:2d:cd:ba:
22:31:bc:74:72:c0:42:a7:42:e4:9d:19:46:c8:bf:ab:c7:03:
04:e5:14:79:8f:2b:94:cb:3d:58:c8:e1:19:f1:2d:df:ec:21:
e9:62:48:51:72:84:45:83:91:e0:a8:6b:ee:e5:1d:9e:06:c6:
a7:5c:30:8c:90:5c:08:f9:56:23:80:60:cb:62:21:e8:89:3a:
09:0f:d9:fd:59:47:28:79:f7:c7:85:6e:66:d0:78:20:0a:39:
f4:9f:c8:79:58:bb:00:26:eb:6e:05:90:50:de:21:db:2b:5f:
11:9f:b1:58:d0:b7:37:f9:23:42:be:5f:2f:2e:40:85:7b:88:
fd:1f:83:8c:2a:0e:93:5d:ed:b7:67:79:7b:91:8e:8b:94:47:
1c:c5:26:f3:63:d0:c7:fe:2c:f0:e0:ed:43:5b:c6:be:dd:94:
f2:7d:bf:b3:90:dd:c7:10:d2:7a:78:45:31:24:d5:41:8e:b2:
97:ab:ea:df:e8:0e:2f:29:0a:70:12:4e:cf:44:26:6b:f6:40:
5a:b4:b4:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYRpf4a+HHZika4QC62wvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzI4N2UyM2JlZTY3Y2E2NjJmYmQ3NzlmY2JjMTgyZWM1
NTNiZTMwHhcNMjUwODIzMTAwMjI0WhcNMjUwODI0MTAwMjI0WjAzMTEwLwYDVQQD
EygwOGU4ODE0ZDg2ZGFiZjQxMzkwNGZmNWVkMDRkMGMwYjgyMTBmOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCnPcbcAt1BwBX+nHCgMD8RY9KFx
PtV2DOcY+SFx5+ounykTKIL6fGY2Sydij6qsifoppYYU/bgTlb65sHfTwdljf16p
JKw3fS1ZS2p/LWEfuKDCqC1EWcgcqKqOxCAaoJbtdskHDqqQYUw14S3WAr21g6FZ
x6IyQGv9ky8GQsH/C3CyYh5MpwiOotpfhdCHu/hULogiMAhPcDhJLyazwo6xwl6n
dnAmVJwEsNNw3qfzAHBUNoHoRdMlChb0rvpoRXK4OXA618D60DdNoGoH6+RJqb2y
9RpD9riNk0RJYgB14kynJAaAtkrPbNLg+g/WsUBBk0+46dk3hPd+Cb2dqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjogU2G2r9BOQT/XtBNDAuCEPioMB8GA1UdIwQY
MBaAFDMyh+I77mfKZi+9d5/LwYLsVTvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUt
NDljMDcyYTgyNTk1LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUtNDljMDcyYTgyNTk1
LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAN1jYDz
03wYRDJluwhmxiGkItowJ6VEHc3x84Md6W1jFxgESk7c7yl/7t5sF5ELPLqbLc26
IjG8dHLAQqdC5J0ZRsi/q8cDBOUUeY8rlMs9WMjhGfEt3+wh6WJIUXKERYOR4Khr
7uUdngbGp1wwjJBcCPlWI4Bgy2Ih6Ik6CQ/Z/VlHKHn3x4VuZtB4IAo59J/IeVi7
ACbrbgWQUN4h2ytfEZ+xWNC3N/kjQr5fLy5AhXuI/R+DjCoOk13tt2d5e5GOi5RH
HMUm82PQx/4s8ODtQ1vGvt2U8n2/s5DdxxDSenhFMSTVQY6yl6vq3+gOLykKcBJO
z0Qma/ZAWrS01w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:35 2025 by rpki-client