Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: TK92c3mU24Bolg+t0yxOVOrBuplBn19DTmc1CCX3sVg=
Subject key identifier: 8D:8E:FC:DF:86:FD:0E:6A:98:98:89:27:4A:EC:6F:03:57:BE:FB:02
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 0199183FD80A95DFE9F52BBA7BC080F75A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 05:01:01 +0000
Manifest this update: Fri 05 Sep 2025 05:01:01 +0000
Manifest next update: Sat 06 Sep 2025 05:01:01 +0000
Files and hashes: 1: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (hash: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: 7upBdWBWqZBSk5y/0EZuxjcfiTrafo02CZtF0QqJ1IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:d8:0a:95:df:e9:f5:2b:ba:7b:c0:80:f7:5a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Sep 5 05:01:01 2025 GMT
Not After : Sep 6 05:01:01 2025 GMT
Subject: CN=8d8efcdf86fd0e6a989889274aec6f0357befb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:15:15:5a:0e:3d:af:38:4b:ba:1b:51:7b:
ab:c0:78:00:d7:30:61:d9:e0:5f:98:91:d6:00:7c:
37:16:ea:e5:2d:ca:89:75:ed:3c:59:cf:d9:60:36:
44:f1:a2:23:c9:0d:f4:ae:24:38:ea:26:eb:bd:1d:
9e:b9:c0:97:71:3b:71:32:cc:a2:a3:2c:9d:b0:bb:
2f:a6:2b:27:8b:61:c1:39:e6:2f:88:33:4f:31:18:
9a:76:5a:b9:06:22:7d:fe:ef:ad:9d:e6:58:e0:4e:
69:93:06:8a:f7:c1:42:9d:22:63:31:1a:fc:cd:d4:
42:f1:6c:fe:8b:81:cd:87:e2:38:63:c8:b2:3c:20:
b7:da:97:70:59:a6:bf:3d:df:6d:0f:82:67:65:a7:
76:9b:25:db:1e:22:89:04:b3:14:2c:6a:0d:8a:6b:
17:b0:ed:5a:19:32:97:36:53:be:98:09:8d:d7:3a:
02:15:3c:97:a8:e4:ce:a4:60:81:d6:ec:6b:18:0d:
50:69:e2:9d:03:fb:29:dc:4d:3f:91:b7:75:cb:4c:
a8:f3:75:24:d1:da:ea:d5:2b:6f:7b:06:5b:95:58:
43:6e:87:dd:41:d4:6b:5d:c6:35:1c:3c:6a:74:1d:
9f:60:02:49:1e:29:a8:c8:bb:f6:d7:09:fe:62:9c:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:FC:DF:86:FD:0E:6A:98:98:89:27:4A:EC:6F:03:57:BE:FB:02
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b5:38:21:f4:da:98:41:04:84:b8:d8:bb:27:c5:64:70:f8:
97:8d:d2:6d:31:f5:b8:b8:18:2d:20:ed:ee:8d:fb:e0:b8:c2:
04:56:9e:04:ea:fc:c6:50:ef:f2:9c:61:c2:c7:17:0b:3b:e0:
57:85:e4:83:50:b7:1b:8b:0f:23:99:4d:e4:86:5f:9f:90:f4:
12:40:25:31:95:5f:41:31:bf:06:45:fb:43:56:8d:01:4f:86:
15:f5:5a:c6:0d:08:e4:2e:05:9d:eb:a0:93:b2:eb:81:70:d9:
85:c2:db:65:7a:bd:34:ff:ea:10:fe:2a:37:05:5f:a8:a2:f7:
4a:87:a4:89:52:27:ba:fa:00:0a:61:34:41:5f:86:8e:d7:27:
b1:74:51:38:94:c0:a5:af:22:93:d7:bb:22:ae:d2:07:bd:fc:
89:e5:44:ef:8a:42:72:06:33:21:f5:5b:11:fa:9d:78:27:be:
d1:89:fa:82:78:28:d5:66:c1:02:e7:51:d3:89:94:c1:09:8d:
c1:bc:28:1d:4f:42:43:77:4b:8c:2a:05:57:26:bb:82:d5:30:
d3:6f:95:6b:98:a5:99:21:d2:e2:d7:95:09:1d:32:60:8d:0f:
8c:aa:50:68:2c:0d:27:c8:51:99:c6:f2:62:92:4d:9a:f0:82:
73:49:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:52 2025 by rpki-client