Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: RJTqrn9huhQcncOC0WhcCH3N8kp4HNXVJecSfk3AvGw=
Subject key identifier: 1C:8D:8C:93:2F:E3:E5:11:57:EC:70:FF:96:2D:CF:C4:11:96:47:C8
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 01992BC72606EA334A166A5EF3229D4A380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 00:01:35 +0000
Manifest this update: Tue 09 Sep 2025 00:01:35 +0000
Manifest next update: Wed 10 Sep 2025 00:01:35 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: LV3Le3iSXKQ5ZWuJYrOgu4PeX5x/pQFepp1U0PqLGyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c7:26:06:ea:33:4a:16:6a:5e:f3:22:9d:4a:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Sep 9 00:01:35 2025 GMT
Not After : Sep 10 00:01:35 2025 GMT
Subject: CN=1c8d8c932fe3e51157ec70ff962dcfc4119647c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:2e:68:32:92:4c:e2:7f:17:38:3e:49:3c:
25:8f:f3:0b:a1:0e:87:50:9b:63:00:cb:a1:06:42:
32:b5:55:f7:d9:5b:68:1d:e2:c2:fe:e1:3f:d2:c4:
05:7f:6e:0a:4b:76:a5:97:9b:24:b5:c1:4a:d9:b6:
68:50:60:90:92:1c:11:da:b9:f0:10:a5:c5:ec:56:
f4:2e:f5:a5:5f:a5:2d:9a:20:47:6d:1b:5e:02:8c:
e4:58:f7:26:c3:50:4f:4b:68:03:d3:b0:77:57:0e:
4a:b7:e7:6c:e8:33:b0:3b:0a:af:cf:59:de:47:e5:
83:14:96:52:d7:d3:14:8c:71:00:24:bf:a1:6a:8c:
9f:d4:9b:bc:d8:e1:e9:fd:19:4c:20:a6:39:15:7f:
c1:c2:aa:5b:85:b1:4f:64:f2:99:92:2d:99:23:ce:
91:92:23:19:a5:02:d0:51:45:7e:ac:8c:e2:b4:41:
09:85:e0:a9:58:b7:2a:35:ad:a2:16:0a:17:fa:75:
51:5e:9d:3e:26:21:22:71:14:62:e5:57:e9:c9:fb:
6e:6a:a1:50:c8:f1:30:2c:fb:d0:df:6b:43:eb:5b:
30:66:93:2f:2f:42:5f:73:52:1f:cd:31:94:60:6a:
d5:1f:15:0a:52:77:18:58:ac:a5:9c:ac:27:ec:a0:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8D:8C:93:2F:E3:E5:11:57:EC:70:FF:96:2D:CF:C4:11:96:47:C8
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:b3:31:b2:09:77:0b:5c:44:3d:a4:7c:b0:ee:77:10:72:
8a:c5:08:99:fb:74:c9:aa:07:05:d0:37:9d:0a:87:ed:56:51:
d7:63:6d:a7:dc:89:1f:e1:a8:f6:06:cb:9e:0c:f5:3e:26:74:
fc:5b:10:e7:f4:ff:1f:78:ae:79:2e:ef:35:b6:64:ba:43:0e:
b3:8d:04:ef:f4:10:8a:4c:e7:3a:c3:63:6d:06:06:cc:1a:1d:
56:85:91:f4:ee:46:5e:05:fb:b1:62:a1:dc:cf:fa:55:e1:d5:
29:58:06:15:57:4f:43:fe:1b:88:49:fd:b9:3a:85:b8:84:1d:
ea:2f:f5:cf:ce:8c:38:4d:23:9a:e1:cb:f9:f7:1d:b4:77:3a:
a4:67:81:5c:5f:06:1e:0d:b7:a3:1a:27:f5:f0:1f:b7:44:bb:
ec:81:ce:8c:99:ff:61:19:cb:58:5b:e4:08:c6:8a:33:e3:f3:
47:cb:99:2c:29:29:14:9c:39:c6:7e:d8:98:65:7f:60:d9:35:
d6:86:a4:69:27:79:45:2a:11:54:23:40:97:cd:2d:53:d0:30:
81:13:64:dd:1b:b9:f7:0e:0a:a6:0f:5a:83:bd:39:be:a0:3c:
a2:c7:23:a3:93:47:aa:75:24:3b:13:e7:4d:39:e3:e7:1c:3e:
87:17:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:17:49 2025 by rpki-client