Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: vC0YTZ3a5MeTOZd9qHCgsDa8sGTr0qFZKDZnM2HAXT8=
Subject key identifier: 12:87:80:A5:5D:46:29:C6:06:EC:95:E5:30:83:30:32:C8:9E:55:9C
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 0199356E7D9886BFBE63214B6800CBD59260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 21:00:57 +0000
Manifest this update: Wed 10 Sep 2025 21:00:57 +0000
Manifest next update: Thu 11 Sep 2025 21:00:57 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: YjWIHL+SucfPDmf4rtVwmM/9Eea2WJqNr/qeZpWyRtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:7d:98:86:bf:be:63:21:4b:68:00:cb:d5:92:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Sep 10 21:00:57 2025 GMT
Not After : Sep 11 21:00:57 2025 GMT
Subject: CN=128780a55d4629c606ec95e530833032c89e559c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:81:f3:01:c2:40:2e:9d:7a:8b:4b:e2:2d:
0c:c1:42:3f:e0:25:b6:41:ed:11:0a:42:25:43:1e:
64:b0:c1:45:aa:5b:51:ad:df:c9:ff:34:05:27:ec:
68:58:a6:7b:fa:e7:18:6e:67:3f:43:43:ca:30:08:
4b:af:73:73:8c:8f:13:dc:b4:17:12:c9:43:e1:76:
d8:f3:57:bc:b9:b3:0b:f9:d3:b7:f3:9f:35:33:a8:
5b:59:ca:71:e8:5c:9b:e6:67:27:c4:51:fb:d0:c2:
d0:5e:ec:72:c3:8a:d7:08:5f:5d:0d:3a:2b:f4:3f:
96:1d:a1:77:23:9d:a3:95:ad:e5:16:d0:92:08:11:
8f:41:34:6a:ac:47:b6:83:d1:c6:b9:d9:76:c6:6d:
15:f4:2c:7e:2c:7a:00:d7:ca:77:43:eb:3d:2a:90:
66:5e:ee:e4:10:53:25:15:1c:f4:1a:ce:d6:1c:07:
0e:c9:9c:98:c1:f3:da:e7:b6:ec:52:cb:9d:a4:4d:
e2:d6:24:8e:50:40:b6:d5:e5:09:9b:50:c0:57:f2:
aa:14:6a:be:8d:70:b0:2a:bf:0f:5e:1d:f3:fa:27:
49:cc:95:d6:47:5d:bb:83:e2:01:71:3d:dc:83:2a:
11:f1:22:0e:06:63:29:34:6c:c2:04:e5:2b:3d:5a:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:80:A5:5D:46:29:C6:06:EC:95:E5:30:83:30:32:C8:9E:55:9C
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:27:b3:77:c3:ca:94:a2:7d:c2:ae:cc:2e:29:7e:86:3d:3e:
d1:ac:c6:98:6a:0d:20:fe:a4:53:db:d1:6f:ee:3f:02:7a:f1:
74:0c:8d:30:d6:1f:61:27:c0:c4:29:a8:9b:56:cd:23:2b:e4:
86:6e:00:ee:a0:4f:22:f3:2a:13:fc:d3:fe:b9:1c:3a:6e:6c:
f0:35:4d:a2:bd:00:d7:3c:29:01:c6:5b:7b:9e:9d:67:75:78:
2b:98:a8:8c:83:3d:d4:e6:88:d8:a6:fe:aa:f6:17:8e:c8:92:
8b:33:a8:48:4c:60:01:32:e0:cd:a6:6b:c9:5e:67:6c:27:b4:
df:4e:d8:e1:19:51:77:f3:57:c6:48:6e:f1:48:10:55:e3:75:
7e:25:17:52:9a:c7:c2:cc:f8:e5:25:8c:fd:bc:9c:5d:da:b6:
80:09:02:42:4e:ea:8c:c9:e5:cd:ac:08:31:b6:dd:d4:58:d1:
e4:6d:b1:29:a6:cd:39:7e:86:11:1e:c7:f4:63:a2:93:b6:16:
4d:c3:4e:26:f7:2a:47:f4:e3:9e:a5:b3:5c:83:aa:47:32:da:
81:a2:20:7e:71:35:be:f0:00:4c:ce:88:0f:c2:07:3b:55:aa:
c6:73:59:1a:48:d7:e3:0e:6b:70:77:dc:c0:9f:bd:04:70:e6:
55:b4:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:58:00 2025 by rpki-client