Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json)
Hash identifier: OSUSwXQ/blYsWMCeuqHaXtrwB8yPAqpuRH1Z8AlJrHM=
Subject key identifier: D7:47:FB:81:77:BE:FF:9A:25:5C:E9:36:F0:E3:3C:82:C7:94:0D:EA
Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589
Certificate serial: 019A7112AD93E6AA8D379C1659F658860F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
Manifest number: 06C4
Signing time: Tue 11 Nov 2025 04:00:40 +0000
Manifest this update: Tue 11 Nov 2025 04:00:40 +0000
Manifest next update: Wed 12 Nov 2025 04:00:40 +0000
Files and hashes: 1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=)
2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: Soft5Akn7NRTVIzjeF3j6t5gXsXW6Q9egHKZEUFUo5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ad:93:e6:aa:8d:37:9c:16:59:f6:58:86:0f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589
Validity
Not Before: Nov 11 04:00:40 2025 GMT
Not After : Nov 12 04:00:40 2025 GMT
Subject: CN=d747fb8177beff9a255ce936f0e33c82c7940dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:3c:c3:d1:fc:83:31:e2:0c:a7:34:74:c8:
a7:af:69:54:6b:58:20:f0:4a:e0:5a:b0:b7:48:58:
be:e5:44:a0:a5:fe:61:92:c2:ba:e0:9f:1f:d9:2b:
9c:93:c7:ab:59:2c:62:88:80:89:cd:9a:47:ab:5f:
dc:82:24:0c:a3:99:7c:4b:98:00:ef:6c:ce:6f:37:
24:25:eb:3c:af:9e:a7:df:b3:85:48:80:3a:2a:65:
ec:4e:3f:6c:9c:67:2a:c3:c5:5c:f6:e1:f7:c8:eb:
49:fb:2b:e6:7b:a1:6f:30:27:ff:e4:63:39:9e:d5:
1b:bc:59:12:98:d1:a0:33:17:1e:29:55:57:c6:55:
1e:7c:7e:08:77:27:25:a6:36:35:5e:36:a0:53:ec:
ad:e4:92:97:d1:84:16:14:29:74:75:7c:2c:eb:7c:
d8:ab:05:e6:be:9c:73:ac:6e:3b:59:29:62:5b:fe:
fd:4f:9f:fa:ba:30:fa:65:d5:fb:0e:34:d1:1b:2c:
ce:d5:6d:95:d9:d5:d5:b6:14:a8:0a:11:e1:80:42:
af:51:b0:ad:bc:31:8d:da:84:a9:88:ac:b8:bb:ff:
63:cf:0b:00:3e:6a:9a:7c:44:78:ee:01:03:6d:9a:
7c:db:43:f1:d2:94:98:81:05:12:eb:9e:40:5c:f1:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:FB:81:77:BE:FF:9A:25:5C:E9:36:F0:E3:3C:82:C7:94:0D:EA
X509v3 Authority Key Identifier:
keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:b5:eb:5c:3b:8d:5a:87:4f:cc:48:fa:50:bd:24:9e:1c:
50:40:0f:7d:58:76:83:0a:84:d2:05:57:7d:ff:73:7e:5a:ce:
7f:2a:64:ab:e9:32:a0:83:a2:c4:35:bb:65:34:df:0f:7a:5f:
99:bf:2b:11:dd:4b:35:8a:cf:31:d0:3a:65:78:5b:80:7d:f0:
8a:f1:05:69:f1:26:ed:e6:58:e6:6a:b2:2f:0d:f8:f3:59:91:
96:76:25:de:f4:be:14:20:0b:be:45:81:b7:29:99:c1:85:19:
9c:dd:ca:2b:ce:c6:5d:3e:ce:12:8e:d6:04:0a:61:f2:31:37:
10:e6:af:af:1a:a0:dc:db:88:e2:66:31:a9:3b:d3:43:7f:d7:
ce:ee:5c:77:1d:e3:6b:7f:a0:60:39:8c:17:1f:b3:84:44:d3:
23:ec:19:40:91:2e:2d:2b:12:88:19:35:c2:f4:ad:23:14:81:
5b:78:15:ba:ad:57:06:d4:cf:60:9c:b0:1f:63:8c:34:01:e9:
b2:30:c0:50:87:43:7a:dd:23:e1:ec:07:72:48:df:ca:de:60:
83:78:2f:3d:45:07:e3:08:28:4c:05:a5:74:9d:54:af:bb:20:
5a:d7:27:73:af:e6:f6:fe:e6:f4:e1:1e:7e:d1:ac:4a:1f:7a:
fd:52:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:03 2025 by rpki-client