Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: s6IoBnNjL43H/QzdwsopESqwA3SnViGFGSGbzKdmdIk=
Subject key identifier: CD:7F:8B:F8:CB:9A:4A:EA:A3:81:4C:49:F8:40:D8:D5:C4:2C:D8:9D
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 0198D66081FEE757CAEE030AF83B42FD2E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 0253
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=)
2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: x03oIeMEjanBVscxltlDGWSJl80bqh7NRZwwYajX4/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:81:fe:e7:57:ca:ee:03:0a:f8:3b:42:fd:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=cd7f8bf8cb9a4aeaa3814c49f840d8d5c42cd89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:e9:8f:70:e6:73:fc:87:f0:4d:d1:d5:fe:
5c:86:a8:83:bb:54:f5:3c:c9:0d:ab:39:04:e3:45:
e1:a4:4b:25:e2:51:4f:ad:38:04:69:4f:ff:9e:a6:
77:40:75:65:fe:a0:86:16:1a:31:a7:0d:86:8e:84:
dc:e1:c7:51:87:29:52:73:4d:d8:c3:d8:f2:92:2d:
d3:d5:37:4d:d6:19:11:d5:4c:54:c5:46:ce:1e:6c:
db:14:90:2b:48:0a:5c:b9:a6:f9:20:e7:a8:17:04:
6c:d7:18:2d:ee:1f:9c:93:5b:c0:68:24:a9:ab:6b:
c0:72:23:08:9d:32:f3:d6:2d:dd:3d:18:3a:b3:da:
89:6e:90:fb:12:cc:09:6a:2a:5a:f1:76:ae:28:a0:
55:4a:6f:cf:ad:ac:f9:9c:e7:08:d3:19:3e:2d:2b:
e7:2b:75:84:d7:bf:d3:da:3a:da:f8:43:cb:60:d6:
66:a2:7f:ae:cd:b7:bf:40:4c:3e:e1:1f:47:48:04:
67:26:20:dd:a4:9d:a7:e6:a9:cd:54:c8:e1:4f:54:
b7:53:a9:33:1d:80:4b:e3:8b:98:23:b5:96:c7:ae:
d5:95:b9:33:6a:de:c9:24:b1:56:10:fa:60:80:74:
0f:29:dd:5f:4d:3a:10:9a:70:b9:cb:51:d1:c7:0f:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7F:8B:F8:CB:9A:4A:EA:A3:81:4C:49:F8:40:D8:D5:C4:2C:D8:9D
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fb:b0:c2:4e:77:51:a5:88:a1:36:e7:5e:41:05:c5:78:d5:
4d:ef:db:af:ea:34:b3:f0:81:9c:dd:cf:b3:05:e6:34:01:8b:
d3:e2:6c:39:a3:4c:2e:f9:da:fc:2a:b1:22:82:f4:98:31:24:
f5:16:45:ff:3a:99:49:7c:4e:4a:dc:07:29:7f:b6:80:64:eb:
ec:47:fb:7d:c1:73:d3:04:96:02:a4:b6:0e:f3:64:52:be:69:
ff:7e:7a:c0:4c:a5:99:06:50:72:b3:ba:25:34:fb:e2:3a:fe:
fa:3f:56:2a:93:7f:b7:37:63:f2:4b:95:eb:bb:80:10:f9:d6:
1c:ac:b9:94:dd:ca:27:d1:f7:b6:6d:b3:f4:38:57:19:90:78:
43:3c:35:03:39:b6:7b:56:e6:6e:7e:2c:42:5f:fd:95:74:32:
73:ee:a7:0f:e4:f4:17:ea:c0:9b:ea:c2:ca:49:11:67:cd:74:
e0:b1:7a:e5:67:bc:98:07:b2:19:8d:a9:80:ec:c0:b8:ca:84:
a7:79:6c:70:d1:b2:4e:f5:3b:1a:a2:a4:d8:f4:08:40:c7:80:
3f:30:b8:02:42:dd:ce:3d:88:3b:32:6b:34:4b:39:c6:8a:51:
96:d9:0d:55:23:57:58:4b:0c:c0:ad:c4:57:31:47:b7:d3:dd:
f1:4b:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:54 2025 by rpki-client