Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: /ZjYsBCDHivvNTYRP6MbjD5BIZ2okA0wrPAZ5xlrSOA=
Subject key identifier: 40:93:FE:91:44:8C:A1:E8:1F:23:84:32:C0:2E:6E:AE:DF:19:1F:46
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 019A71B8C53AD15A83E9008366E11C6D6ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0A86
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: 7ejB+dSdIuzag8CywNEPG6g9sojYX0MQ4xm/2hD5NQI=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c5:3a:d1:5a:83:e9:00:83:66:e1:1c:6d:6a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=4093fe91448ca1e81f238432c02e6eaedf191f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:3a:ec:0b:08:30:4d:ab:cb:e7:9a:30:15:
c8:26:ba:87:95:a4:8e:c4:13:c8:e3:43:14:59:38:
1e:9f:b2:d1:38:85:2f:25:80:81:82:14:a9:0d:dc:
36:64:35:3d:81:9f:d3:c8:78:fa:cb:00:e1:cb:9d:
31:27:6b:41:dc:e6:4e:ad:22:0a:ce:45:64:3f:03:
90:bd:96:dc:a0:60:91:27:2c:b0:b0:d3:6c:5a:08:
25:87:8b:ff:b6:e7:c9:92:3f:57:39:de:dd:94:25:
44:da:5b:c9:ee:89:2b:dd:e5:a7:5b:2b:c2:f5:5d:
49:26:ab:96:40:59:3c:ed:9d:34:0e:f0:56:82:92:
36:9c:5b:04:9a:e0:2c:7f:1a:50:df:34:57:52:c5:
9b:ba:08:d8:88:b5:42:5c:ed:be:67:f3:6d:64:a7:
f8:68:9f:77:9b:4f:7e:aa:21:f0:b9:48:a1:08:b5:
a5:54:3b:3e:35:fc:40:78:02:ae:36:65:45:0d:03:
6c:67:10:4b:ee:0c:41:e1:dc:14:14:34:8f:74:61:
c4:8a:c7:cb:00:35:bd:5d:37:84:cb:2c:7a:a4:92:
e5:d7:78:76:13:69:f5:c0:9e:b6:4a:a0:d9:62:48:
63:a1:c6:fc:40:d9:ad:75:d4:57:e9:a6:c1:a6:45:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:FE:91:44:8C:A1:E8:1F:23:84:32:C0:2E:6E:AE:DF:19:1F:46
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:b5:2e:d5:aa:f7:c7:50:b9:46:6c:5f:e0:ce:4e:d2:28:
a2:09:19:ff:5f:0a:f3:c0:b0:98:21:42:b4:2e:67:35:90:ca:
ab:0c:1c:6e:95:eb:4e:e8:e0:b5:71:cf:fa:e5:de:29:c7:19:
99:2f:2c:d4:54:2a:20:ad:0f:25:18:c0:1b:68:ad:0a:28:68:
1f:99:b1:06:91:c2:4c:2a:85:98:24:64:ec:1c:11:42:df:37:
b1:4d:ef:59:fc:02:1c:6e:53:f5:2c:0f:2c:7b:bf:03:cd:ce:
e9:e8:3c:42:e4:e4:a7:42:d1:6e:c8:de:92:2c:3e:ce:df:49:
3b:4e:90:f4:87:76:cc:63:f4:70:07:cb:47:53:86:a5:ff:da:
04:48:ae:9e:51:24:59:bb:d1:48:6b:2f:3c:c6:94:66:5b:96:
aa:6a:e3:b5:f3:8e:47:ec:76:bd:bb:22:11:c6:0c:de:65:ac:
d9:f0:60:2c:e8:fd:90:32:29:89:6c:33:6f:db:ea:3c:91:c9:
23:b5:e2:f8:c2:dd:44:dc:d4:8d:39:9d:1e:bd:35:bf:fd:75:
4f:7c:d1:fd:6e:4f:b8:46:7e:38:7c:5a:33:6d:1a:49:ae:59:
77:99:e0:4f:b7:c4:e9:df:58:aa:d2:2a:de:ef:c5:14:f2:bf:
f7:5b:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:40 2025 by rpki-client