Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: P3kCExwCdLkSCBBFhkvlO/rHLeM5LHAAnMZ7+neMuVo=
Subject key identifier: F1:40:D6:E4:A5:6B:27:57:D9:7D:18:28:56:B7:EA:A6:65:2F:AC:C3
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019A17614C340E3F7C972DD1A7D8931C6529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 16F2
Signing time: Fri 24 Oct 2025 18:00:43 +0000
Manifest this update: Fri 24 Oct 2025 18:00:43 +0000
Manifest next update: Sat 25 Oct 2025 18:00:43 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: c7dLhIuLOKOnAe3gKiub76USOSQW+YmlAm/LaIKyiXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:61:4c:34:0e:3f:7c:97:2d:d1:a7:d8:93:1c:65:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Oct 24 18:00:43 2025 GMT
Not After : Oct 25 18:00:43 2025 GMT
Subject: CN=f140d6e4a56b2757d97d182856b7eaa6652facc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:1f:05:54:54:9e:64:bd:ff:c5:a3:de:81:
c5:79:be:0a:96:14:49:f9:86:df:72:6a:1c:69:c4:
46:18:e6:ee:12:1a:9c:30:7a:0b:d0:b7:a6:14:8e:
7a:c3:fe:7b:14:e0:47:20:29:c5:cb:7d:e4:94:81:
6c:8a:db:a1:0f:fc:31:33:d7:db:9b:be:d1:cc:aa:
a1:20:27:c4:24:4f:b1:2f:41:e9:47:85:c9:7b:dd:
3a:d4:2d:63:56:8b:c1:db:ae:3b:5a:24:4d:1d:73:
3f:f9:8e:8a:7b:19:43:f6:82:d0:2f:3b:68:e5:99:
bf:58:e4:4d:ca:ad:a4:1e:fb:98:44:44:b8:bc:1b:
91:44:7d:0c:13:f5:37:79:c7:84:a1:18:e4:9d:2f:
1d:e7:66:49:2c:41:66:bf:a2:6b:fb:7c:6e:4b:ba:
b8:81:1e:03:e0:12:c9:8f:16:d8:35:71:6f:7a:e4:
93:37:2e:a8:7d:85:b7:d2:61:c5:61:bc:a0:61:42:
d7:5a:32:03:d6:0f:50:6c:4f:cc:fa:85:00:3a:b7:
3a:f0:6a:c3:cb:39:30:8e:55:cb:69:87:07:0e:aa:
fa:82:e1:f4:4b:2f:bd:9f:23:b4:52:42:cb:aa:d2:
eb:aa:03:8a:59:ab:11:63:bf:82:73:4f:1e:45:de:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:40:D6:E4:A5:6B:27:57:D9:7D:18:28:56:B7:EA:A6:65:2F:AC:C3
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:46:74:ce:eb:92:96:d9:d2:ff:c9:27:3e:23:0c:27:55:4c:
6f:46:99:a0:42:d1:94:fd:73:26:58:65:5d:f8:c6:40:a7:c3:
08:5e:2c:42:23:d1:ca:9d:41:5e:95:07:7e:e2:c5:75:f9:ea:
fc:bd:24:b9:76:23:57:e3:8e:e0:80:14:3b:f9:e0:98:8e:23:
59:ce:5e:5b:ea:3e:8d:01:37:e0:e8:3f:61:2b:17:8a:f8:6f:
01:13:6c:9e:23:e2:33:4b:dc:63:99:2a:24:ca:9b:8a:66:f1:
85:4b:8f:4e:ae:36:6c:dc:08:09:2a:c1:f4:67:eb:70:1e:80:
64:8d:fa:c2:52:14:e7:29:c0:db:3c:5a:d8:0d:e6:51:32:da:
2f:7b:50:54:4d:23:5c:a4:15:b3:f0:84:7f:93:b4:08:a7:37:
2c:82:0c:74:36:a6:36:15:6e:7f:db:bd:97:83:28:8b:90:80:
70:97:0d:53:cb:09:4f:a8:cb:ab:a4:eb:0a:a9:4f:f3:0a:70:
60:9f:6d:4c:48:72:12:61:23:e9:48:e1:00:1b:d9:e0:12:58:
16:7a:8f:bd:aa:87:6f:f4:9e:c8:a0:b8:9e:5c:c5:36:e6:26:
0b:10:e2:43:64:94:1c:d0:5c:87:78:fd:02:b4:d4:1a:7b:38:
bd:17:e1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:09:23 2025 by rpki-client