Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: mTQZs8ikSQC5FLcyfRDDxTizVZAdQpE+MDJTn63Nn7c=
Subject key identifier: 0B:71:5C:6B:0A:61:4B:64:19:97:4D:CE:51:9F:23:5D:3B:A3:79:59
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 0199FD6AFB891DEF4401C312D3FEA9EEE24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: AYC3HZIKyeotxMGhPlJI6hiYNE4IWRjAXXVuc8DvAZE=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fb:89:1d:ef:44:01:c3:12:d3:fe:a9:ee:e2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=0b715c6b0a614b6419974dce519f235d3ba37959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:fb:e6:d4:4c:0b:10:f6:92:84:54:c6:97:
fc:0b:3f:82:fd:ed:70:16:a7:54:67:07:a5:b8:be:
dc:68:20:ff:dd:02:44:dd:03:19:1e:6b:4c:eb:d7:
d4:e7:b9:fa:bd:e4:85:50:69:17:4e:eb:f0:3b:e3:
73:a1:25:e5:80:40:60:1e:10:a8:3f:88:41:9c:a7:
7c:f6:99:eb:f2:95:b3:cc:3b:bb:37:24:18:0e:ff:
9f:65:f9:d3:5d:63:9a:a1:16:c7:99:8d:22:1c:a1:
aa:01:61:77:e4:71:72:73:4c:06:70:c2:f6:29:02:
c6:e3:f0:5f:13:a3:4d:06:c4:4b:fa:1e:ed:6f:09:
89:8c:53:a9:78:93:72:57:81:cc:e4:dc:ff:48:e0:
17:3d:40:d3:55:76:bf:9a:90:71:3a:ad:29:96:a7:
17:90:c5:73:2f:ee:1d:9f:08:2c:e5:b7:fb:f8:cc:
82:34:e2:6c:ce:d1:fb:ef:15:f9:db:2f:cf:c9:d1:
0a:60:7d:1a:47:54:95:b9:b2:8d:b5:56:e8:b3:be:
e3:8d:96:4a:37:9b:4f:7e:c4:23:d1:35:80:71:35:
9b:04:9b:00:30:a1:9e:71:50:a3:e4:92:d1:75:f0:
fb:db:7d:c3:4f:c9:fc:a7:db:a4:33:ce:b7:5f:e8:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:5C:6B:0A:61:4B:64:19:97:4D:CE:51:9F:23:5D:3B:A3:79:59
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c6:5a:06:15:8d:74:de:c7:87:2e:b9:cd:98:c7:76:82:66:
38:2e:98:2c:54:27:4c:ec:2d:1f:20:0f:f6:93:30:4f:f5:96:
70:92:da:58:d2:14:42:54:4e:0d:5f:d4:d8:90:ef:ae:c9:8d:
df:aa:1e:44:a9:3f:0a:68:22:b2:11:e4:69:af:e0:aa:93:ab:
c0:4c:1d:80:a0:2f:cd:06:31:39:72:57:a3:9b:c4:43:16:1e:
c2:30:00:31:c3:57:93:bd:7d:e0:4c:84:4c:e3:db:b9:65:4b:
18:dc:db:f0:70:99:de:06:aa:b7:06:ae:67:67:04:2c:a8:43:
0a:31:92:d8:3b:7f:ea:0a:40:0e:f0:34:88:6d:30:19:9b:5b:
33:28:da:7d:e0:e9:c9:29:bf:a5:86:0b:d4:b3:fc:57:1f:5d:
69:dd:84:d3:20:e5:7e:04:d3:4d:40:06:f8:69:fe:46:08:3f:
28:97:5b:03:16:9b:6c:e5:8f:34:56:96:0f:bd:b0:bf:d7:1e:
cb:a8:83:69:47:23:40:cb:16:b4:65:55:80:ce:7e:82:c6:96:
ed:2d:3c:dc:5b:4a:72:8f:75:8d:a1:e2:0e:e5:57:66:a9:bf:
43:e2:af:78:07:3c:23:e0:08:da:a4:d1:24:4a:fe:73:b8:ac:
f0:8a:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:14 2025 by rpki-client