Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: Q7+D5bpVecrAkXraW5Z82ODd7iQDFqZzQMMWCX1UQIk=
Subject key identifier: 0A:D3:CC:49:BA:E4:CB:4E:7C:C5:B6:7C:38:63:FE:28:6C:3E:4B:75
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 01995F0EE7A9625C18A3009CC26BF7C7B9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1691
Signing time: Thu 18 Sep 2025 23:00:36 +0000
Manifest this update: Thu 18 Sep 2025 23:00:36 +0000
Manifest next update: Fri 19 Sep 2025 23:00:36 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: J6Zs4yS4y5ed3lZeb0VJq4CunJmTxRtRqXujt6KOUv8=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:0e:e7:a9:62:5c:18:a3:00:9c:c2:6b:f7:c7:b9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Sep 18 23:00:36 2025 GMT
Not After : Sep 19 23:00:36 2025 GMT
Subject: CN=0ad3cc49bae4cb4e7cc5b67c3863fe286c3e4b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:20:16:a8:38:b7:13:95:ec:fa:f0:5a:ff:
30:ed:47:80:08:f4:64:ff:a5:47:b7:c8:35:d7:90:
b6:43:d7:3d:73:5d:3c:3d:c7:ed:2a:89:fc:25:41:
c8:69:28:95:1c:2d:ea:8c:48:63:f1:3c:f0:bc:04:
0b:50:b6:66:35:82:db:38:17:22:a3:06:cb:32:27:
ee:76:c3:07:6a:22:c1:a1:f5:5a:ba:70:87:46:56:
bf:21:50:80:d7:ba:5b:d8:9f:57:d6:93:f6:d9:cb:
6f:f0:d7:0f:7e:39:ef:86:84:64:bb:12:82:37:f3:
f5:48:ab:eb:d0:44:02:86:96:90:62:25:8e:7b:a8:
e0:73:69:e8:2f:e9:1f:d7:13:a7:2c:e2:e7:66:da:
54:82:f0:78:be:ef:63:2c:b3:c9:30:4e:74:de:56:
96:6a:d9:28:0a:6b:66:6e:36:9f:f1:ed:3f:66:b2:
5a:80:13:10:fe:61:c5:db:f6:34:1d:ed:28:2f:e7:
63:9b:18:17:ca:6a:cd:6c:9a:ff:6d:c7:14:92:ce:
3c:6e:8e:e6:ab:0e:1d:6b:d9:03:5c:0d:46:3e:ad:
62:f8:51:06:20:99:53:d6:13:67:29:93:03:33:12:
b4:79:8d:d3:5d:57:50:91:b6:ed:7e:3c:c6:19:09:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D3:CC:49:BA:E4:CB:4E:7C:C5:B6:7C:38:63:FE:28:6C:3E:4B:75
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:cf:c6:b1:28:6d:d3:f7:6f:68:c2:f2:f6:0f:87:8d:58:
64:6b:ce:41:90:12:c2:0a:29:3f:53:f6:44:50:30:c9:41:21:
56:a9:9a:9e:6c:e3:a3:63:d3:72:5a:98:1d:5a:2d:eb:b7:9a:
0d:1f:33:33:dd:5e:cd:4f:03:fc:04:82:bb:54:9a:1a:10:e8:
0a:74:e0:1d:5d:4b:50:38:be:d6:1e:10:2d:cb:d7:8b:71:45:
a6:f8:26:a9:57:d0:d1:5c:e7:e8:b0:3c:d4:68:0e:96:34:02:
e1:23:48:a4:36:c2:67:07:52:20:c1:76:07:18:14:05:54:6e:
3e:88:60:c4:b1:fb:ee:b9:e6:01:b8:c3:2b:85:85:34:7d:e3:
f4:bb:84:d1:c2:22:62:b0:12:db:01:6f:2f:33:8f:b6:36:23:
7b:4c:28:ef:33:f9:b5:49:4a:2d:89:4d:81:28:11:50:25:a9:
27:23:3a:ee:ea:6f:a6:b7:75:a8:eb:b5:07:b5:ef:ad:fa:85:
c5:97:44:8c:24:f1:61:c2:26:ba:e3:74:63:5e:aa:a6:39:59:
ca:dd:5e:7e:88:20:13:60:00:53:f2:19:74:c9:2c:fd:9c:a6:
67:34:54:01:bb:e9:f7:fd:f6:f5:87:99:7f:82:b2:51:45:1e:
99:df:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:44:30 2025 by rpki-client