Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: K/ExzguBPbQqhO2mZqQs9+Er01onf1iO4HmoH5OJ7rQ=
Subject key identifier: A7:2A:CA:FB:6D:A7:F8:13:FE:A7:9E:B2:81:45:BF:BE:E0:25:BC:CC
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019931C8520AF8BF5F4E0F95D08F9EACC9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 04:00:35 +0000
Manifest this update: Wed 10 Sep 2025 04:00:35 +0000
Manifest next update: Thu 11 Sep 2025 04:00:35 +0000
Files and hashes: 1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: 3thbPLvk0RHYt1pObRy5dTR+TyhR5HG5zRnmnFnBTmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:52:0a:f8:bf:5f:4e:0f:95:d0:8f:9e:ac:c9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Sep 10 04:00:35 2025 GMT
Not After : Sep 11 04:00:35 2025 GMT
Subject: CN=a72acafb6da7f813fea79eb28145bfbee025bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:26:25:6c:41:f9:a5:8f:e5:57:24:dd:bb:
92:a4:f7:cd:7c:4b:e2:5a:ec:42:d8:09:19:85:03:
69:a0:0d:15:42:d6:79:ff:07:92:93:85:03:03:67:
56:59:5c:77:6e:0d:22:43:28:f6:f9:f8:c8:e7:79:
5b:b5:09:18:80:be:f9:f6:dd:fa:59:6b:e5:fb:46:
5e:d9:df:ff:9a:ac:3b:be:c6:d3:cf:fe:71:9e:ee:
66:20:cc:fa:e3:9c:ac:e6:37:b3:a7:42:6f:7e:50:
82:f1:13:9c:aa:e1:da:e8:3b:9c:6b:6c:64:ef:91:
f1:92:bf:5c:54:18:c3:de:a2:62:ec:d2:19:b1:bd:
20:8e:2c:4d:f6:93:33:e0:2f:80:f8:83:6e:49:9d:
1f:2a:d0:6e:e0:32:3a:48:df:5c:41:6d:d0:6a:dd:
0a:53:19:00:77:ec:e7:6d:50:46:b4:0b:88:83:de:
cc:a0:23:c5:6c:1e:22:5e:62:77:62:59:ab:ec:24:
df:4c:92:ee:5f:46:95:c9:04:70:78:75:07:cf:ef:
8d:94:ae:fe:7a:b2:35:e4:29:8d:97:23:b6:3b:fe:
d4:1f:33:e2:3e:6f:2f:c5:f1:9b:c0:d7:9a:47:83:
d2:3e:29:8d:45:d1:55:01:5d:f2:39:bf:46:1e:da:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:CA:FB:6D:A7:F8:13:FE:A7:9E:B2:81:45:BF:BE:E0:25:BC:CC
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:46:99:78:84:92:ff:af:2d:d0:8d:42:6b:70:cd:e8:6b:bc:
44:64:3e:78:2f:91:dd:f7:9c:29:67:0b:3c:b2:24:df:67:21:
3d:7b:25:1c:9d:c9:6d:1f:f8:73:e1:41:1b:07:4e:24:ed:c7:
28:d8:f9:c8:05:97:d8:0d:22:8f:8f:64:87:59:42:34:f0:f8:
7a:df:0f:c0:3b:9e:e7:de:c3:bf:f6:ff:cf:f5:05:24:ba:f8:
14:03:f1:b6:da:46:34:78:05:00:9d:aa:b8:e7:60:98:50:e5:
a0:24:1d:2f:7e:5c:aa:b2:a0:0e:90:38:bb:3a:ef:61:7c:4e:
20:a9:d3:2a:81:24:81:36:a0:ea:ad:30:20:61:7c:98:c0:e5:
bd:0f:72:6b:84:75:a6:af:13:ee:d2:e0:fe:10:c7:ea:c3:74:
34:b6:c5:2f:0b:78:2e:ab:11:87:1a:68:7a:ff:e8:24:d9:7f:
fc:d0:bc:31:b1:bb:28:de:06:e0:8b:8f:7c:fc:3f:8f:11:9c:
fc:44:59:ab:d6:00:dc:8a:58:28:66:35:46:3d:da:fc:73:e3:
62:db:27:4c:13:63:d6:4a:92:08:02:0e:e5:b6:9b:83:1e:67:
9d:5f:4d:e3:a0:7d:af:13:d6:39:53:4d:63:86:ce:dc:39:59:
78:97:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:28:08 2025 by rpki-client