Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: n0j4TQFjWFx/+EGTA4WbtJRbjxVBmajVkztv1LaCt2g=
Subject key identifier: F9:DE:CE:2D:6B:2B:6B:34:30:29:6E:86:28:18:A4:D2:1A:5D:F1:A2
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019838719D686B9116679D16FB023C3F6A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 15FA
Signing time: Wed 23 Jul 2025 18:00:26 +0000
Manifest this update: Wed 23 Jul 2025 18:00:26 +0000
Manifest next update: Thu 24 Jul 2025 18:00:26 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: g6XsA2H6Fd2aTLen9WaUDcdvx7AswYB86zCjc9P71mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:9d:68:6b:91:16:67:9d:16:fb:02:3c:3f:6a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Jul 23 18:00:26 2025 GMT
Not After : Jul 24 18:00:26 2025 GMT
Subject: CN=f9dece2d6b2b6b3430296e862818a4d21a5df1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:6c:33:e9:c7:71:2c:94:5d:94:10:15:ac:
00:08:0a:a2:a1:3f:af:14:c7:32:56:ac:a3:7a:fa:
d9:0c:d9:e9:ea:c6:b2:07:36:9b:f5:5d:95:54:88:
36:91:e1:5a:60:d9:6e:c1:42:44:7a:0b:3a:10:ce:
80:0f:97:b0:f0:44:da:a3:5f:89:cb:46:2f:12:60:
48:21:f0:9d:7c:2e:e5:54:dc:c3:81:fb:e6:ee:1e:
cc:0e:62:bd:a2:20:e0:d0:c3:d1:d9:b0:d7:52:91:
de:ef:5e:7b:85:21:84:11:ba:f3:b3:74:42:ac:89:
d7:d2:53:d9:23:a3:72:1a:b0:49:25:5d:ef:44:60:
6f:75:f0:12:72:18:77:6c:c0:c6:9e:53:d8:73:a7:
0f:ed:67:6f:8c:ae:f7:91:8c:03:70:77:67:28:a6:
61:cc:80:65:b3:bd:8e:40:31:aa:62:a4:ed:92:85:
e0:bb:84:a3:7c:8c:93:c7:f1:0c:91:36:af:50:7c:
1e:1e:30:29:27:73:d2:be:07:de:bc:7e:d5:8b:c3:
5b:b6:1d:14:fc:0a:33:7d:0c:3f:9b:ba:89:ed:70:
65:62:75:36:6a:96:15:49:e4:dc:b1:2d:ac:9f:3f:
c9:c7:eb:b9:3b:ad:1a:b7:f2:c3:8e:8c:84:77:41:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:CE:2D:6B:2B:6B:34:30:29:6E:86:28:18:A4:D2:1A:5D:F1:A2
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9c:93:b8:91:e5:ef:89:4e:0f:4c:6c:10:aa:84:c1:f9:bb:
1a:e2:45:77:06:e1:81:78:b2:f8:52:80:67:84:02:df:b3:3e:
f7:36:eb:6a:1b:1d:dd:5e:7a:0f:d2:92:0a:a4:1a:4e:b5:dc:
da:bb:50:46:e1:5a:5c:15:85:a2:0d:6a:27:dc:63:79:40:35:
99:f8:15:9d:c7:58:9e:1e:1d:a7:26:64:cc:b4:7d:29:b4:6d:
90:23:81:75:8a:ef:c7:fc:94:03:82:14:ad:ce:52:4e:8f:c1:
30:86:45:10:c3:d2:65:e4:8a:b7:60:b5:e6:c1:17:33:39:be:
06:93:de:90:e5:bb:56:0f:82:e9:19:3d:42:3f:9a:d8:14:99:
2c:a8:45:76:93:e3:1a:9c:4a:a1:3c:3a:34:39:02:6b:8b:70:
f2:5c:12:7f:57:9a:9c:97:fe:69:dc:7a:69:a7:5d:52:c1:a5:
39:30:ce:59:8d:25:36:b5:77:3a:15:51:ae:70:96:0d:1a:77:
2b:2e:54:30:fb:ef:19:1d:80:e5:a2:a2:cd:77:ad:fa:61:47:
cf:3b:64:2d:d9:4d:e5:b8:56:f8:73:36:59:77:08:1b:ad:ac:
dc:57:17:45:9b:8d:c8:69:03:99:72:d5:10:d9:a5:bd:f1:5d:
bd:59:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:04 2025 by rpki-client