Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File: mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier: RI9hWNlQcsBwsq5uKGxUL51Rhr6IvIknaOc9PwwdFkg=
Subject key identifier: 63:FB:D8:67:4D:73:10:2C:8B:0E:DA:36:5F:D0:B6:33:36:4C:1F:06
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer: /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial: 019936EF682941EE1FF4B51BE7D0CFB26C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number: 1498
Signing time: Thu 11 Sep 2025 04:01:23 +0000
Manifest this update: Thu 11 Sep 2025 04:01:23 +0000
Manifest next update: Fri 12 Sep 2025 04:01:23 +0000
Files and hashes: 1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=)
2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: bGi+zOYDOkslXxn+dcBt6M2PPp8rv0VF29HFMv5wK+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:68:29:41:ee:1f:f4:b5:1b:e7:d0:cf:b2:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Validity
Not Before: Sep 11 04:01:23 2025 GMT
Not After : Sep 12 04:01:23 2025 GMT
Subject: CN=63fbd8674d73102c8b0eda365fd0b633364c1f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:cc:73:76:f8:ca:bd:59:72:e0:97:e6:2f:
05:c4:dd:98:0d:ce:32:33:63:b4:c8:bc:59:eb:6b:
c8:8d:8e:0d:89:57:08:b6:05:31:5c:87:6b:6b:88:
18:aa:e1:9c:1a:f2:a1:8a:d7:95:2f:5d:c0:c3:e7:
76:dd:49:67:7e:19:22:0f:b8:16:35:20:97:83:ec:
23:ae:97:c9:4f:d2:c5:11:52:4f:18:cc:d7:d5:e5:
55:21:a6:95:91:86:a8:17:73:4f:5b:cb:d6:ae:84:
78:c6:5e:2c:49:7d:4e:60:55:c1:2d:17:bc:74:a6:
8a:4b:ad:75:2e:9e:e7:81:f3:8f:41:b6:e8:14:2d:
03:c2:d7:23:f4:b7:28:ad:11:3b:18:d5:2e:5c:5f:
e1:99:d2:1a:98:4e:c0:ef:0e:e2:57:a5:c4:e9:2b:
04:9e:98:93:30:be:52:f0:f4:a5:94:ea:0f:9b:a6:
2b:91:02:6d:ce:7c:e8:1e:f3:01:35:fa:82:d2:73:
5f:b1:80:e8:6e:a0:ea:26:c1:71:e6:f3:38:7c:c7:
b0:6a:47:9a:40:46:d4:b2:3e:ec:a6:f9:30:56:a0:
44:c0:4a:4f:49:bd:f8:75:88:d9:27:80:36:ef:d1:
b6:f8:ef:ce:12:92:3a:18:6a:c6:72:0e:f4:9a:a0:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:D8:67:4D:73:10:2C:8B:0E:DA:36:5F:D0:B6:33:36:4C:1F:06
X509v3 Authority Key Identifier:
keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2c:c6:8a:27:1e:18:8b:6d:c8:f5:a8:3f:97:f9:1d:d9:62:
a5:99:33:4b:91:37:c5:5d:51:9f:43:45:cb:be:39:6d:6a:b1:
1a:52:55:a1:2b:66:50:ee:b0:d1:c2:ba:a4:8a:f8:75:bf:c1:
a0:37:a7:0a:73:c7:aa:7a:e2:f9:94:cc:bb:7e:90:a0:c8:aa:
05:97:19:97:d9:86:c1:38:ab:ee:c9:b7:de:8c:c1:7d:cb:4e:
3c:92:97:8f:0f:ff:17:2e:78:fc:ef:7b:56:ff:d3:b0:a7:8b:
ea:51:b6:fc:be:af:f7:4f:ac:0b:f1:fe:88:d5:1f:43:66:ec:
06:36:de:71:c3:ed:dd:dd:61:84:1f:e2:01:37:35:75:a2:89:
9d:3b:26:83:0f:01:78:4d:85:4c:9c:e1:34:e0:ad:9c:91:fd:
ab:04:e1:6f:95:17:0b:50:55:4f:5c:b0:59:12:ee:6b:b1:0d:
92:0d:b2:22:e9:0b:43:4f:b8:4e:9f:e7:f4:bf:8a:ce:d4:7d:
93:c1:47:3f:98:51:5f:0d:30:42:67:32:a0:49:7a:89:3e:0b:
a9:a3:cf:69:a5:0b:00:6f:8e:ba:3f:61:9a:85:2a:95:c0:99:
a5:13:8a:d6:3a:0b:90:10:f0:76:3e:24:4e:04:d6:fa:89:bf:
38:ab:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:51:12 2025 by rpki-client