Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: hn2fR2x6j5ZBnycMeURWQJ/xVkE/P4GcId0Wqlyquxs=
Subject key identifier: BE:BC:3C:94:E9:88:D8:D5:2B:47:6E:00:8E:9D:10:17:4B:FF:A4:0A
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019A24E591DB41FBF3D565C668850758D982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 09:00:16 +0000
Manifest this update: Mon 27 Oct 2025 09:00:16 +0000
Manifest next update: Tue 28 Oct 2025 09:00:16 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: nwpouNNP3l/GNbyQc+GdTSiM0XVGvD+gF6Ip0VFzpFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:91:db:41:fb:f3:d5:65:c6:68:85:07:58:d9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Oct 27 09:00:16 2025 GMT
Not After : Oct 28 09:00:16 2025 GMT
Subject: CN=bebc3c94e988d8d52b476e008e9d10174bffa40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:ea:8f:72:76:62:28:7b:aa:6b:b8:ea:bd:
e6:51:2b:99:1e:77:a2:b7:3b:1a:e9:bd:fb:a6:78:
86:df:84:d2:d0:ad:f5:88:b0:56:17:45:e6:2c:c6:
a0:b6:76:be:20:fc:da:f4:05:43:ab:19:4a:03:7a:
e4:f4:65:03:c3:c9:d8:8c:53:3c:39:8a:56:67:74:
81:b8:2f:bb:37:f4:51:52:2a:8b:86:aa:80:85:a4:
ef:33:9d:f6:c7:93:fa:79:6d:ef:7e:26:bd:d9:64:
49:e4:fc:b7:f9:ec:5f:2c:ff:9b:b5:a2:d4:57:66:
05:d1:45:f4:60:0a:07:88:30:e1:a3:79:70:ff:1c:
39:01:e7:61:3e:b6:75:ef:42:d6:cf:e5:85:60:2d:
bb:8e:36:0f:2b:ab:eb:64:5e:7d:78:56:89:79:61:
7d:ca:1e:63:61:3e:74:17:31:3a:37:dc:1f:4c:91:
4c:3d:b9:27:c9:f9:80:f8:0c:5f:5a:29:f9:73:9a:
70:12:8e:a7:2d:d2:78:96:e2:2a:20:5a:1e:1b:7a:
7f:1a:f2:ed:ed:73:67:e5:35:08:47:4d:2b:ab:db:
b6:28:ce:40:67:b7:e9:23:2e:6d:75:ae:7e:9b:0b:
45:6f:60:53:24:8b:35:bd:87:4d:35:35:06:84:c8:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:3C:94:E9:88:D8:D5:2B:47:6E:00:8E:9D:10:17:4B:FF:A4:0A
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:aa:f6:f1:f3:d4:f5:f3:3f:40:68:fc:01:8c:b5:7f:a3:a0:
c8:37:6a:df:93:71:fc:c7:28:0d:f6:9f:5a:4e:3f:65:cd:f4:
7f:0f:ed:6a:81:25:6c:86:b9:ef:5d:be:c9:4a:b8:ac:7a:49:
61:18:69:67:87:e7:ee:1e:ed:a9:e4:c4:28:42:25:0a:56:a1:
6e:f7:75:2b:4a:e6:9b:c8:b7:ec:ea:5c:54:e4:a9:68:f2:e0:
ea:47:00:68:a0:0f:1e:81:cd:b7:ae:a2:0e:48:09:b4:e0:85:
bb:f0:82:bf:b2:09:a2:58:d9:54:e6:7d:2c:4c:78:ce:38:ed:
09:f9:b3:f5:d0:c8:a9:50:42:e7:54:99:1f:db:a0:f8:65:40:
01:76:66:2c:0f:4b:23:47:1a:a4:94:01:1a:58:70:8e:37:ff:
67:11:a7:1b:73:07:60:74:ff:f5:3e:64:7c:7c:93:7d:84:b4:
7e:14:e0:07:10:5c:ab:23:55:31:1e:7c:c3:4f:aa:3d:b3:5c:
cc:d7:f4:1e:29:6d:ee:54:b5:fa:1e:6d:7b:fa:36:14:5d:d4:
42:e2:27:39:f0:6e:ed:de:72:71:db:59:50:5f:89:10:89:ba:
fe:cc:03:9e:01:76:df:42:72:62:c0:0f:26:8a:c1:20:3d:46:
d6:00:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:03 2025 by rpki-client