Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File: mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier: K9UKkAprRbH9bFOVtQ1tzPNzScm8o9Nt5nvU+WwmdjM=
Subject key identifier: A3:B2:56:73:19:8B:D6:59:1F:A5:C7:ED:01:83:D8:63:0A:A4:91:B2
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 0199315AF1B49D7EB6D206EA5D6BC51AFD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 02:01:07 +0000
Manifest this update: Wed 10 Sep 2025 02:01:07 +0000
Manifest next update: Thu 11 Sep 2025 02:01:07 +0000
Files and hashes: 1: 7TyGUQq5_upn7OI_8rMQkinORFg.roa (hash: KGYsAjI6sTjQq+H3tQWHe4y4uTdeAqiVMRj2OW3ueCg=)
2: An6YNgwh93187k654T-zbgMGRlg.roa (hash: nmjx1IvTXJQBFo0I6BDxNzxZSqlRyAfA/ku4fVVGSzU=)
3: YFV3fg2_UFfx7WAKmvDqKbwP8jE.roa (hash: dIpJXmybjciq6KSAb3XbD1GV1C0Qt6Lv/BzchkxxZYM=)
4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: XG3bh7dApVU1vC0VImAXjfb+Qt8JppoIhe7OdsuUlL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:f1:b4:9d:7e:b6:d2:06:ea:5d:6b:c5:1a:fd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Sep 10 02:01:07 2025 GMT
Not After : Sep 11 02:01:07 2025 GMT
Subject: CN=a3b25673198bd6591fa5c7ed0183d8630aa491b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:8c:d5:3f:51:ae:51:1e:94:56:d2:4e:37:
2f:c1:be:eb:dc:fc:db:ef:6e:04:97:d0:38:ba:75:
84:d0:2b:d4:9e:7d:81:2d:40:12:fb:5f:cc:4f:42:
c3:b2:6f:5d:b1:08:8d:a0:e0:c9:cb:a9:e6:b4:09:
cd:0e:b7:d2:9e:5e:78:73:ba:70:11:39:8e:8d:31:
21:a2:14:22:20:51:94:5f:b4:5b:32:09:e2:18:d8:
fa:29:98:13:4c:5b:91:f5:7b:0a:a7:a7:68:11:37:
c0:b3:77:08:d9:0e:97:67:67:7e:3f:74:b4:27:fb:
83:90:89:e7:71:66:36:d3:78:e1:ff:06:22:5e:54:
ba:b1:df:19:5f:6d:be:fd:2b:cf:63:a3:62:39:89:
4e:82:30:c0:c6:43:11:2d:01:06:cc:1c:ed:59:b5:
cd:84:c1:92:15:cd:75:34:93:74:bf:26:6a:d2:0e:
2c:98:9e:98:05:6a:8b:73:55:bf:87:75:bc:10:18:
01:8d:6e:fd:01:9c:bd:38:16:6f:18:eb:38:d4:ef:
1c:23:e2:05:d7:2c:bd:18:61:3c:83:bf:0b:b6:4b:
f3:9c:5a:9e:ee:34:16:d3:90:7a:a3:90:c6:19:28:
1d:3e:f1:d7:94:20:c4:3d:ba:c1:cb:d9:b0:ed:86:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:56:73:19:8B:D6:59:1F:A5:C7:ED:01:83:D8:63:0A:A4:91:B2
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d8:44:0f:21:62:c3:c0:ec:d8:c1:96:e5:61:e9:70:ee:a1:
d1:e3:5d:49:54:d5:a9:e6:36:22:f5:f4:34:ed:a5:e0:d8:82:
50:51:a4:4f:3e:52:b1:94:8b:0a:01:fa:62:7c:3e:1c:44:f3:
50:67:45:4b:98:46:d9:e8:27:9c:a1:00:a3:c9:4c:f2:fc:e7:
36:4d:9b:65:4d:60:61:3e:ac:4c:bc:b0:4d:59:c3:30:e4:31:
52:ce:49:6c:e2:56:3d:7b:88:c5:04:60:6e:1c:da:e8:3a:fa:
44:eb:6e:8e:11:c0:5c:7b:38:d8:fe:03:54:70:1e:e9:89:ab:
7a:17:5d:b9:3d:f0:c7:aa:2f:1e:70:2c:82:3b:c2:5b:ca:4b:
63:2d:35:a9:3a:a6:83:62:c5:c2:77:3a:56:60:6d:6a:db:11:
7c:4b:20:53:da:0a:6f:12:a5:71:a6:35:6b:59:be:2d:7d:5c:
50:d9:55:e2:62:17:2c:32:44:9d:db:67:34:76:6c:82:c1:20:
ac:48:bd:fa:1f:ed:c4:f5:91:5e:dd:be:51:22:fe:fa:5c:2e:
1b:14:a7:c0:10:7e:d6:ae:20:6e:de:23:6b:14:51:b0:43:2d:
0a:75:fa:a9:ea:38:00:46:31:b4:33:73:37:34:b8:be:10:e3:
f3:9e:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:40:00 2025 by rpki-client