Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: pvQKvMaEUmjO2iePDPHjehCnHJzJ8Vvc/mQ6RwOfzys=
Subject key identifier: 4D:FE:CF:53:20:4F:3F:2F:F9:F0:16:25:A0:20:12:57:40:77:0E:49
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 0199FEEBDE5B5BB6F3CC6DC88FD9F6AE61E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 0238
Signing time: Mon 20 Oct 2025 00:01:34 +0000
Manifest this update: Mon 20 Oct 2025 00:01:34 +0000
Manifest next update: Tue 21 Oct 2025 00:01:34 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: 4PGK/AVWu0oZe01Hp4hGzYiYdAA7IQ7axsGJ74TKrrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:de:5b:5b:b6:f3:cc:6d:c8:8f:d9:f6:ae:61:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Oct 20 00:01:34 2025 GMT
Not After : Oct 21 00:01:34 2025 GMT
Subject: CN=4dfecf53204f3f2ff9f01625a020125740770e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:9a:44:98:3b:11:bf:d5:0f:ee:27:0c:03:
a2:85:14:63:ca:2a:70:af:ff:a0:52:87:35:fe:d3:
45:b0:20:86:50:c0:75:97:fe:52:1d:32:f3:44:df:
16:49:68:90:df:5a:4c:84:da:55:ac:8d:3b:14:70:
b6:b4:9e:0d:d8:ad:76:72:19:f1:c8:bb:60:53:04:
6d:de:79:d6:4c:84:91:c3:01:7a:44:76:6e:3f:f2:
f8:14:f6:b2:76:af:80:64:f0:cb:a9:d8:a8:be:65:
5e:b2:29:5d:ad:c0:2e:5c:09:b8:36:5e:37:fd:2a:
9a:5a:8c:12:c9:0c:14:1c:b3:36:1b:79:5d:5e:86:
99:c2:04:9f:e9:cc:63:78:b9:28:53:26:ce:f4:90:
01:59:b4:3d:c1:8f:81:3a:06:4d:b8:c6:b3:aa:a5:
3d:9a:47:fd:32:55:db:ed:b5:ba:14:8a:a3:8c:6f:
ce:56:5e:ff:82:08:4a:2e:da:0a:ab:48:1f:7a:0d:
64:c1:d5:4c:d8:7c:9b:8f:be:88:a9:3e:db:af:db:
66:28:1e:cf:48:fe:77:b2:f4:5f:8a:d7:59:4d:7c:
57:17:a2:82:5f:9d:e0:6e:bb:68:a6:d1:7b:5a:e1:
7f:da:71:82:99:89:1d:d0:f9:2d:0e:aa:34:e5:c8:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FE:CF:53:20:4F:3F:2F:F9:F0:16:25:A0:20:12:57:40:77:0E:49
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3d:f2:ca:a7:09:19:4f:c9:c8:7e:b2:26:e3:e5:9a:e2:12:
bf:23:6d:8a:8d:d2:a1:f0:56:a1:13:b0:f7:1a:89:d5:37:ce:
9f:aa:b1:32:de:8e:66:37:93:cd:4c:fd:c1:4b:db:0e:05:06:
cb:aa:57:69:96:89:4f:d0:9c:c1:e9:ab:23:f9:e8:c4:0f:30:
2f:be:2d:85:b2:79:8d:3a:6d:e4:70:5d:1c:fd:66:14:90:30:
f9:5d:9c:27:1a:eb:e5:23:5b:4e:f9:24:f2:c2:9f:c6:ed:e3:
80:e0:77:af:d7:ae:fc:a3:25:ac:9a:58:35:ab:43:c4:7c:4c:
54:dd:8d:d2:4d:8b:fc:5e:1f:82:f5:41:c4:bf:98:1c:cf:e8:
58:a8:d5:51:6d:12:be:2b:9e:6b:2b:1d:06:fa:92:b0:2c:71:
30:9e:28:e6:63:9d:5d:ca:70:d3:0f:84:ff:da:d2:24:fb:5b:
f3:29:0d:4d:5b:67:8c:08:14:e2:a3:3c:f1:86:d9:ce:e7:6f:
e3:84:55:c6:e0:6d:c8:ac:53:4a:c3:a5:46:f1:7e:f5:8c:a6:
d9:f4:2a:c5:de:8c:64:2b:e6:e0:14:f5:c1:cf:da:70:e8:f4:
a1:96:05:75:68:47:cc:d0:64:71:42:b7:19:38:02:33:f3:7c:
23:18:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:09 2025 by rpki-client