Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: 6Br9CehKD+ZcEIIeTcCdxlcOVh1PnA2Jrp0cjWER7b0=
Subject key identifier: D6:C9:B1:E3:D4:4C:21:3E:D1:3C:53:31:35:7C:40:86:52:20:F4:A0
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019A18E2186AB7DA742966AD8BC8B7EBF2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 0314
Signing time: Sat 25 Oct 2025 01:01:01 +0000
Manifest this update: Sat 25 Oct 2025 01:01:01 +0000
Manifest next update: Sun 26 Oct 2025 01:01:01 +0000
Files and hashes: 1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: TLNRKeUBTfmYECokWnIsj6nzDzVXC5YWIdIjZKbox9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:18:6a:b7:da:74:29:66:ad:8b:c8:b7:eb:f2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Oct 25 01:01:01 2025 GMT
Not After : Oct 26 01:01:01 2025 GMT
Subject: CN=d6c9b1e3d44c213ed13c5331357c40865220f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:0f:ab:9f:96:45:d7:02:f7:04:c3:32:80:
35:a6:f3:55:b1:ce:6c:35:08:2b:d2:0a:9d:ef:1c:
f9:9a:69:2d:73:f3:85:fb:07:16:cc:6d:fd:98:63:
3f:4e:d1:fa:a1:3e:00:a8:79:e5:39:d0:a8:f0:dd:
03:86:7d:45:d0:82:e9:9a:67:74:fc:a4:73:86:3d:
ef:48:f3:53:f4:f7:84:7f:d4:68:51:4e:65:aa:08:
95:3b:47:9c:0b:b7:70:ae:83:39:7f:7c:67:f2:f4:
c9:76:af:97:1b:c9:df:bc:3d:cd:42:dc:41:6a:93:
0b:fd:a2:25:f2:cf:9f:d8:44:91:77:52:9c:83:06:
78:b9:e8:2f:da:51:e8:0a:02:9b:4e:58:87:18:81:
31:4b:54:ac:37:14:8c:43:fe:e2:9f:23:cd:65:e4:
25:08:23:61:bb:03:ba:df:70:60:53:c2:b6:31:34:
1d:ef:b8:7b:48:bd:1a:9b:48:20:d7:a1:9d:ee:02:
ce:c5:94:63:30:e8:6b:73:ea:fc:97:4f:87:44:00:
71:f2:00:97:79:a7:04:91:3e:fa:e4:6b:25:33:a8:
f8:01:8a:59:a1:ae:57:a7:19:15:cd:00:77:31:97:
3f:5d:76:0d:38:26:de:df:c1:d4:62:c4:80:96:fb:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:B1:E3:D4:4C:21:3E:D1:3C:53:31:35:7C:40:86:52:20:F4:A0
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:af:b8:c9:38:75:38:73:31:39:3f:47:4c:c7:7b:83:cc:54:
2b:b6:c8:e8:5c:86:8b:6d:93:1e:ef:b1:8a:e6:f7:a8:f3:1a:
27:3a:4f:fa:3d:75:8a:53:e7:a6:13:11:45:82:33:3d:b4:24:
f5:1a:2f:83:43:b3:08:03:5f:86:07:5e:8d:22:fc:93:15:3f:
19:37:62:4e:2e:65:f3:14:c0:12:81:f1:58:4b:92:4c:26:f7:
a8:d2:89:03:25:64:34:62:f5:c5:43:76:05:1a:15:ab:5b:e9:
86:f5:a9:4a:d3:96:aa:4e:4d:01:35:06:14:cc:9e:fe:f7:ca:
55:f1:f3:fb:46:f6:dd:83:6f:d9:06:0b:29:6d:46:4a:7f:8c:
8d:11:d9:a9:a5:6d:ec:25:3c:b0:34:23:b7:73:bc:07:9a:bb:
24:97:2e:c7:5f:d3:cc:a8:78:af:8f:29:9f:65:47:01:2c:c4:
bd:90:7c:92:f3:7e:55:5d:bc:6e:74:a8:cf:18:ca:b7:fb:b7:
1d:12:16:fc:dd:51:23:78:2f:63:e1:45:40:52:68:cc:f5:45:
61:89:ca:29:8a:57:3b:ac:81:4c:23:d0:09:ab:91:7d:9f:bb:
86:59:ee:02:1a:e2:75:8d:de:70:8d:40:f3:a3:c8:72:9c:bb:
90:dd:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:20:24 2025 by rpki-client