Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: 4nAvWcvXDgnhSbQA+VdBQ1G4X3okKsOS43gbFf7NFCA=
Subject key identifier: 32:15:FD:E2:53:15:21:69:09:27:D3:9F:B9:C8:04:C5:38:8D:74:7A
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 0198D4E0EB01974EDF9A8F52CA159C04B5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: ghJVdKUufI7PG1GUXWRDwmeXMDvLf5KsEzk2r7Bwznc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:eb:01:97:4e:df:9a:8f:52:ca:15:9c:04:b5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=3215fde2531521690927d39fb9c804c5388d747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:28:81:71:5a:e0:e3:c6:d5:f8:74:44:98:0e:
5f:f0:d4:38:d6:89:b5:62:36:2b:b9:b7:58:5e:37:
20:4f:1f:7e:90:8f:2d:26:31:d2:12:fb:0c:f6:11:
88:35:32:fe:02:44:11:9d:57:e3:5b:6b:7d:0c:55:
ff:81:56:ea:4c:e1:3a:b2:15:e0:8a:66:85:b0:4e:
29:43:52:ac:36:54:dc:fa:83:09:a8:02:e3:3e:93:
2b:56:98:ac:a6:5a:64:7c:f2:21:9e:d9:8f:6e:ea:
52:60:ac:8b:1f:83:9e:6d:9f:32:bb:bc:58:1e:f4:
28:c1:76:9b:60:13:7e:ea:75:89:bb:e1:8e:32:53:
94:46:5e:d9:81:dd:0e:45:50:d0:c8:e9:91:21:40:
35:d9:43:76:55:6a:b0:0d:fd:75:51:2d:75:7e:d2:
a7:c4:3c:b5:b6:99:0a:53:56:95:90:28:30:8d:a2:
e5:b3:64:16:36:11:4e:32:c8:62:20:c1:47:73:11:
81:18:15:d9:42:55:46:97:af:0c:1f:57:da:6c:d9:
42:f4:d0:d3:ca:73:d1:bf:08:fe:cb:2f:47:2f:73:
1c:b9:b7:08:d6:a8:39:0d:d5:30:95:01:88:c2:5c:
d6:91:36:ac:5a:bb:7f:0b:63:a2:35:46:25:ad:99:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:FD:E2:53:15:21:69:09:27:D3:9F:B9:C8:04:C5:38:8D:74:7A
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:d3:53:53:5a:b9:7b:d0:16:5a:4c:6a:d0:d1:b5:d0:67:
aa:54:a9:88:be:93:05:91:0a:c7:99:cc:1d:60:7f:e1:33:3e:
b4:7c:ac:6f:f7:25:58:87:a4:5a:fc:0f:45:84:1c:02:91:9b:
73:70:ea:3f:19:45:15:c0:45:cd:c5:ba:34:7d:5a:3b:46:7c:
4f:84:01:2b:1f:10:8b:c2:cd:4a:a7:ef:c2:66:a3:52:5e:4c:
6f:0b:f7:c2:75:24:eb:02:67:e9:83:ad:43:48:ad:df:d9:fc:
36:56:85:a5:5b:3a:6b:3f:b6:1f:e3:a0:c9:ed:42:8c:92:80:
0c:9e:d6:46:d3:54:79:eb:30:09:ec:3a:50:c9:20:6f:9f:a9:
d4:f5:d1:64:1f:a1:83:80:a8:4e:c4:cb:a2:c2:88:3c:d4:19:
22:68:38:9f:70:d5:59:76:b8:dd:51:64:f8:d1:3a:99:a9:0e:
7f:b9:66:15:73:42:be:66:cb:40:a1:48:0b:cd:82:09:5f:09:
99:f7:4b:9b:e3:7f:18:0f:97:8e:e5:c7:57:42:a5:b9:c3:47:
5f:80:9d:21:15:44:e7:eb:26:b8:c8:25:1b:6f:05:1f:24:ee:
c1:82:7a:36:3e:86:9c:1e:c9:67:e8:90:12:f6:6b:5c:d8:cc:
b5:a6:65:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:06 2025 by rpki-client