Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: wfdfiMdC3F7i0rqIkkJhIzB2+GsRI61EL8PWAmF4clU=
Subject key identifier: E3:87:50:F3:45:46:6E:36:0A:4E:2A:91:96:FC:8E:17:50:50:8E:00
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 019A72CA97F312193AF6249DB3F8E4FF0D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:01:10 +0000
Manifest this update: Tue 11 Nov 2025 12:01:10 +0000
Manifest next update: Wed 12 Nov 2025 12:01:10 +0000
Files and hashes: 1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: YHbo1lvOumV1x1QPJ3+i5uZrEBWpci7yz8tvkDc7gXE=)
2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=)
3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:97:f3:12:19:3a:f6:24:9d:b3:f8:e4:ff:0d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Nov 11 12:01:10 2025 GMT
Not After : Nov 12 12:01:10 2025 GMT
Subject: CN=e38750f345466e360a4e2a9196fc8e1750508e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:b1:7f:3f:6f:a3:53:8d:b5:2f:fd:1f:27:
23:ff:65:97:96:d7:34:f9:a3:7a:c2:b6:2c:d4:0c:
17:4b:12:cb:bb:1d:d1:a8:c7:af:2f:f7:60:ab:b2:
1a:87:6d:05:c8:54:17:1c:09:36:fe:a2:d2:f1:3d:
46:0c:73:05:44:32:c1:fb:56:44:ce:e9:7b:40:17:
00:cf:e6:b3:5a:fa:87:7e:e3:bd:c1:d2:37:35:de:
8e:00:ea:3a:c5:3e:67:27:56:2f:80:78:68:f6:da:
90:41:a9:af:d0:d6:00:44:94:0c:bb:b7:44:0b:e2:
0f:6f:9e:cb:1b:ec:9a:77:22:55:7e:90:f1:78:67:
c2:2f:b1:d2:04:29:13:56:23:91:3b:17:f3:bc:58:
5f:2b:02:cc:f7:ab:dd:ef:10:a9:fe:63:6f:8e:1f:
c7:87:44:a3:06:d7:a8:51:44:a0:37:38:68:e9:4c:
f3:04:ab:e2:68:00:6d:b1:f4:60:78:fc:92:22:23:
b1:b2:bc:d3:25:b9:d2:b2:44:1f:60:6a:64:dc:56:
c0:ce:8f:73:d6:54:ea:60:d5:e5:c6:33:21:01:17:
c1:5d:6f:2b:47:0c:26:c2:6f:0d:a0:2c:38:89:52:
68:e2:dd:c1:c5:5e:71:4c:9d:d9:9a:47:c7:c6:f5:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:50:F3:45:46:6E:36:0A:4E:2A:91:96:FC:8E:17:50:50:8E:00
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:89:bc:fe:bc:51:ce:53:f5:65:b3:5d:8f:cd:3f:8b:38:
5d:16:2c:53:99:a2:6e:09:0c:33:88:72:3c:a0:ff:a6:c7:bf:
a1:eb:f2:af:b3:8f:61:6f:93:f3:42:51:6d:6c:6b:bd:6b:00:
9d:97:b8:3f:76:c4:3c:d8:de:ba:e6:f0:81:e2:72:74:ef:36:
10:f1:4d:d8:cd:16:ee:22:8d:81:5f:cf:78:13:c5:26:a7:72:
f8:84:f8:61:cc:ca:9b:46:37:4c:3f:99:50:c3:09:6a:6a:64:
74:3f:9e:f3:d3:10:46:91:6f:f5:32:f4:38:ba:a2:1e:15:ff:
c6:19:4e:bd:12:0a:1e:a8:5a:7d:57:2d:7b:b6:91:39:70:9a:
a8:f5:87:71:fe:4e:e0:24:2b:92:c1:a9:01:9e:13:30:ba:9a:
33:37:f1:4b:5d:31:7a:6b:bc:97:dc:d1:58:9a:0b:e4:02:21:
8d:cf:ab:89:27:c4:97:33:2c:aa:bd:87:7a:f5:81:1e:50:31:
c0:bc:9f:05:36:41:64:4d:6c:2a:ac:e2:48:54:46:05:d1:b7:
f8:2f:b6:14:24:b6:94:1f:f1:a6:cf:e2:c4:11:f6:63:c5:e1:
93:9f:40:de:ae:04:ce:e7:25:6f:fa:a9:db:8b:ac:12:d4:34:
fd:55:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:51 2025 by rpki-client