Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: zI3u/9TnOFjchuvhNng6L4lH+goCn4W9g6wlTg9plBs=
Subject key identifier: 89:37:E7:35:EB:2A:4D:50:54:79:60:8A:D6:E0:8C:D9:9D:A5:38:C2
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 0199FBEB8C8E84D0A07003A483721D6FEFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0A49
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: IG1zJDM0XPkChBqFsYlaiXxraIZeQVA7q0ZYWiV3VbQ=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8c:8e:84:d0:a0:70:03:a4:83:72:1d:6f:ef:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=8937e735eb2a4d505479608ad6e08cd99da538c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:f1:74:02:4d:eb:3c:63:28:86:9e:df:0e:
e9:7a:d6:c6:b7:1f:3b:5e:55:70:e2:ed:af:17:3a:
b5:a3:1f:1b:e8:60:a4:26:ee:64:2d:b6:23:72:cd:
91:d4:00:f6:3c:d0:4f:d4:db:0e:46:e8:c3:16:36:
1f:2d:80:82:e5:d2:6b:29:04:b5:e8:b3:ae:48:0b:
41:c0:e9:52:ac:d6:84:47:3d:ce:ce:a8:c9:2e:63:
2b:93:49:2e:ff:ae:9a:51:1a:da:a0:fa:a3:a3:bb:
d3:05:20:7f:e9:83:31:07:fd:a9:e5:31:56:fc:a1:
47:2b:7f:24:80:64:01:e3:77:3b:ce:19:8f:4a:78:
64:ff:27:3d:08:7b:7a:f1:e6:9f:12:8e:5c:bb:9c:
46:7a:dd:fd:c5:4d:51:7a:bf:33:1f:ea:8b:ed:97:
01:54:56:dd:7b:fa:ed:57:d8:cc:99:68:c7:a0:66:
2b:73:71:c3:b5:81:2a:1f:34:a4:1d:89:9c:06:0f:
4f:a2:e3:a6:5a:69:a5:0a:5f:12:86:43:01:c5:85:
63:38:06:9b:ff:8d:e7:4f:7b:f8:b3:37:8a:37:fe:
2e:4a:7e:cc:82:21:f6:df:f7:c7:5a:c6:b5:a4:3e:
34:da:f9:1d:88:c7:ff:96:fe:ee:ce:10:cd:c5:41:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:37:E7:35:EB:2A:4D:50:54:79:60:8A:D6:E0:8C:D9:9D:A5:38:C2
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:09:20:8d:42:30:28:cd:86:d7:f5:09:e4:e7:86:1a:2d:
8e:45:6d:50:63:72:72:2e:28:d4:83:40:13:51:c2:5f:c7:cb:
9f:f1:73:b9:f9:6c:05:7c:3e:f6:47:80:7b:de:80:e7:6f:55:
3f:de:ba:11:95:1c:f0:a6:c2:1a:0e:db:68:c4:7a:13:ce:47:
5d:6e:5f:5e:0e:e1:0f:0a:22:fe:07:56:ca:da:9e:04:58:11:
a3:d7:d9:ca:a6:31:5d:3f:d5:39:98:a1:6f:f2:b2:17:9e:d5:
b4:25:b2:d1:82:0d:3d:3e:ac:63:d9:8a:dc:aa:73:2d:b9:b1:
94:36:77:a7:19:8b:0e:40:17:31:3b:00:bd:c2:5e:5b:6e:40:
92:e6:04:19:92:03:9a:bd:1e:45:7b:d9:c4:af:e4:40:46:11:
e9:02:55:4c:66:91:22:07:30:6c:80:16:78:93:19:6b:07:64:
bc:54:ad:46:7e:55:a1:bc:d9:da:7d:af:72:6f:99:a6:eb:d8:
0d:16:c4:c7:22:4a:9f:76:71:88:14:21:9b:f7:cc:e3:53:46:
5f:c2:54:c7:31:fc:15:87:4f:ea:2f:c4:cb:2d:61:30:a3:6e:
91:df:7a:a8:b8:3d:73:82:8f:7e:89:c6:ff:92:e1:c3:6e:01:
a1:73:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:46 2025 by rpki-client