Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier: ZawyaGQtgS+K5nQmyjA1R9MA94YRASFnnfAc3h5/+yc=
Subject key identifier: F5:BF:11:0E:A2:E4:BC:15:67:8C:18:9E:F8:CD:90:9F:20:A6:5A:4F
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 01992FA35AB629461987947518D324BBD351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number: 0D4A
Signing time: Tue 09 Sep 2025 18:00:58 +0000
Manifest this update: Tue 09 Sep 2025 18:00:58 +0000
Manifest next update: Wed 10 Sep 2025 18:00:58 +0000
Files and hashes: 1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: 263Q7SMlFmuX3Mg+tKDE/M+9+jIMv2B/bVZ1m4UbsXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:5a:b6:29:46:19:87:94:75:18:d3:24:bb:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Sep 9 18:00:58 2025 GMT
Not After : Sep 10 18:00:58 2025 GMT
Subject: CN=f5bf110ea2e4bc15678c189ef8cd909f20a65a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:09:4e:c8:ed:d7:56:24:05:80:fd:a9:16:8d:
da:1a:59:ed:a5:44:fb:77:ee:67:08:b4:dc:06:1f:
b5:6d:04:54:5c:37:19:b4:15:68:79:67:58:63:83:
8d:00:cd:61:9f:10:86:b1:15:63:85:d9:a6:80:c9:
68:77:70:b6:69:98:e4:22:df:b9:ff:00:a0:b7:2f:
3f:b4:e5:2d:ee:c2:1c:17:02:96:c1:da:44:23:14:
18:03:03:16:f6:7a:71:6a:39:d5:e4:04:a1:31:da:
83:36:b1:5b:b8:bd:c3:d3:4d:20:e0:6b:b5:59:52:
f3:df:22:a4:b8:50:2b:19:c6:f0:dc:13:35:e7:66:
e2:d1:72:0d:fd:6c:c6:6e:c8:c6:a0:a8:d9:c3:76:
99:10:51:16:50:21:30:6b:b7:8e:d4:b5:a5:74:7d:
10:fc:1c:c5:b1:96:ca:96:bb:e2:9d:4a:11:06:7c:
f9:5f:cc:82:48:37:aa:77:6a:aa:cf:ac:2b:f8:b3:
56:1d:13:8c:c9:fc:38:ea:c2:c5:99:ce:92:af:89:
2d:78:fd:49:17:c2:a2:ec:9e:8c:22:02:0a:85:2c:
af:2a:8b:d7:83:2a:4f:5c:63:4f:b9:42:de:fa:86:
5b:c7:fc:20:50:72:73:92:cb:fe:e7:10:69:10:8d:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:11:0E:A2:E4:BC:15:67:8C:18:9E:F8:CD:90:9F:20:A6:5A:4F
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:ef:30:e5:61:d1:d3:e1:b1:c2:e8:f3:6b:30:53:53:e7:
cd:13:40:5c:40:85:c4:20:4e:f4:a7:4e:92:91:ea:98:92:e3:
06:f2:8c:24:21:39:1e:ef:f2:26:0c:e6:38:3b:50:8c:15:f0:
fa:19:3a:cb:0a:df:c5:ea:7c:2b:86:a0:d8:33:65:9f:2d:83:
83:9e:3d:db:1f:1d:53:ef:b4:cc:7e:85:f9:05:8b:c9:08:1d:
e4:e9:a9:8b:0e:7a:af:e7:c0:fa:1d:a7:62:19:8e:36:ce:57:
1c:a2:d6:d4:1f:7a:e6:56:4b:dd:26:68:b2:f2:3e:ab:53:ae:
dd:db:12:3d:e3:ed:31:0a:50:0a:09:3d:29:f1:33:d5:22:69:
12:97:05:21:e6:cd:80:6a:5d:0c:cd:b0:90:6e:08:45:f4:38:
09:28:e8:be:c8:df:27:e7:c2:dd:ae:4a:60:25:58:e9:5e:9f:
76:fd:1d:5a:b4:9c:33:99:28:4e:5e:e0:8b:3d:31:71:c7:81:
b4:5e:8a:c4:5b:fa:21:53:62:0e:be:b8:f4:05:80:80:c4:b0:
aa:28:90:62:75:85:90:47:1d:0d:ab:9a:a6:47:41:fd:4d:fd:
0f:01:18:26:96:22:c9:58:b1:d3:0e:e0:57:c1:3e:ff:a4:2e:
dd:dd:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 21:42:35 2025 by rpki-client