Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: CWZBTKFtwfOVusQTyMPn26DVwFlbM2J9DxuG9Yp/rXg=
Subject key identifier: 50:C5:E1:A2:61:BB:BE:BE:9D:10:6C:E3:9B:44:EB:4F:EA:AC:8B:C4
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 0199FB463568F1268F89C3E6ED3930C5D008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 07:01:46 +0000
Manifest this update: Sun 19 Oct 2025 07:01:46 +0000
Manifest next update: Mon 20 Oct 2025 07:01:46 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: Weqhw0RvUp8Fxs282dV2e/yR71hSGP6OG/V1FgDs6J8=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:35:68:f1:26:8f:89:c3:e6:ed:39:30:c5:d0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Oct 19 07:01:46 2025 GMT
Not After : Oct 20 07:01:46 2025 GMT
Subject: CN=50c5e1a261bbbebe9d106ce39b44eb4feaac8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:f5:d8:d5:b7:00:9d:3b:95:3e:20:68:af:
26:53:d5:ed:e3:91:6b:45:54:7a:8a:79:c2:5f:df:
bb:3b:69:b7:e0:15:be:5d:4d:2b:5c:89:6e:f7:0f:
2a:4a:2c:ce:ca:8d:f7:e2:f4:d1:34:ff:bd:0b:76:
0f:f3:83:ca:90:0f:49:4a:19:9b:1d:e9:d1:e3:58:
b4:2d:85:7f:2b:e3:98:5b:fd:25:02:29:b6:3b:28:
f9:a0:26:8e:9a:da:da:b5:9d:9e:49:8a:1e:1a:63:
24:4a:c1:dc:8c:60:1f:1f:8e:fd:f1:32:56:75:8e:
d9:f8:41:21:41:e4:17:6b:b2:d9:21:d2:91:c1:d7:
a0:f0:b3:f0:8b:02:93:a2:0b:05:22:e4:7f:52:a0:
bf:0a:2f:14:0f:a4:4c:6f:6f:92:c8:65:b5:1a:4d:
ee:a3:cf:33:09:ad:5f:5b:fc:59:17:67:80:50:23:
51:58:ba:ec:7e:b9:0b:59:9e:6b:49:93:3f:44:15:
59:8d:a6:77:ad:27:5b:a1:bd:a7:d1:4b:eb:d7:43:
1f:ba:7c:45:46:e8:59:b0:1e:ca:bf:58:b0:16:fe:
46:11:aa:84:55:2f:c8:b5:e0:5e:7b:4f:ea:25:fd:
9c:44:8b:7b:4f:05:c0:4e:4b:53:5c:6b:e4:8a:60:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:E1:A2:61:BB:BE:BE:9D:10:6C:E3:9B:44:EB:4F:EA:AC:8B:C4
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:f0:16:34:d8:93:ad:ca:aa:1d:b9:53:00:63:62:8c:64:
21:b4:65:3b:a1:4c:33:5b:30:2d:85:c9:cb:19:26:f1:98:17:
1a:54:3b:cd:51:08:9e:69:e3:a5:b1:21:ee:1e:fd:de:98:24:
d2:69:9f:a9:d5:4f:2a:45:91:06:f3:9a:66:28:95:66:f0:05:
00:5a:a6:87:c4:c1:a0:2c:e3:bd:f0:ae:05:fb:94:f9:6f:fb:
bb:f5:fe:dd:db:af:67:27:96:7d:fc:2a:30:26:f9:4b:56:81:
6e:d9:de:51:95:ba:62:24:fd:d9:66:92:82:7e:27:b4:a2:fb:
5b:32:74:87:51:34:3b:f4:3f:d9:ba:d9:8d:a8:e7:ae:74:6b:
76:8a:6d:eb:19:10:bf:81:b7:e5:a4:49:0c:a1:ce:b1:72:86:
ce:69:62:fa:63:c7:2d:bd:ed:08:ea:85:ea:46:a1:a3:51:de:
17:1d:b0:34:dd:7c:07:57:e0:e8:4a:8b:49:e2:d7:29:82:eb:
f1:70:c9:c9:1e:9a:d7:81:8d:2b:d8:59:9b:98:03:8f:f5:56:
4f:ea:ef:9d:f1:32:39:30:59:19:4a:f9:ff:b2:b0:da:03:7f:
88:98:a0:19:f6:b8:47:bd:76:27:2f:df:6b:bf:d5:34:39:59:
c1:13:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:51 2025 by rpki-client