Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: g6elhydq7BwB4t0oxYVkBbZTBwP+2kSfqJSkDsf2Gvg=
Subject key identifier: 68:60:66:C5:74:C6:95:EB:9B:CC:B3:EF:3F:00:94:D5:09:E8:82:FF
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 019A7301864FA775A519AF2FED7AC35ED1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: nIZlFQDXR3MwRzlhUqS7p2D1blp9O0rowmJXJ+W7fVM=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:86:4f:a7:75:a5:19:af:2f:ed:7a:c3:5e:d1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=686066c574c695eb9bccb3ef3f0094d509e882ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:58:1e:34:6d:51:8d:26:87:6f:3b:0e:69:
69:3d:99:c3:92:9f:50:a6:62:6d:ac:dd:33:90:5c:
b8:74:21:6b:5a:9e:bc:19:f6:f6:a4:10:d7:63:57:
03:c6:14:df:c7:0d:65:45:5a:a6:87:cc:7a:95:06:
28:3b:e0:87:d0:0f:08:2b:40:b4:99:82:8e:66:34:
44:88:17:10:ad:05:ac:14:d8:42:04:43:1e:82:55:
0a:5a:dc:5a:ab:0a:c2:02:dc:fb:9b:4d:b3:fc:af:
d6:3e:ad:e4:01:51:f6:e5:70:9e:7b:72:47:f5:66:
92:e9:d9:75:d5:3b:4a:5c:8a:6a:d1:ba:c2:cd:f2:
06:09:81:ee:dd:c2:3f:02:76:bc:cb:3a:de:ae:76:
85:4c:2d:39:9a:d4:c0:d6:3a:d0:10:9b:10:d0:e6:
82:be:ad:74:da:91:d2:fe:6c:ea:4c:36:2d:a1:d5:
7f:fe:c1:39:ad:c4:e4:38:bf:5d:5a:bf:b1:af:5c:
d8:87:b0:44:6a:62:54:ea:a0:b0:ce:6d:ba:41:a7:
89:e3:3f:5b:48:58:69:17:48:fa:76:c5:82:b7:d2:
94:86:bf:8e:db:bc:db:f6:01:2e:87:b8:11:c1:13:
2d:fb:27:4d:f9:02:47:97:6a:6f:05:07:dd:78:b7:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:66:C5:74:C6:95:EB:9B:CC:B3:EF:3F:00:94:D5:09:E8:82:FF
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:ae:de:25:b6:c5:b1:bb:87:83:70:8f:3d:e0:ba:33:8f:
fd:83:2b:21:5b:c5:fb:16:38:a9:77:3d:05:2c:84:a5:88:44:
0f:1e:8d:8c:e2:a0:83:d2:ac:37:f0:0a:34:6a:6d:78:cf:89:
eb:be:a4:89:bc:ff:67:03:0d:79:86:41:c8:1f:28:e1:5d:00:
04:d0:88:2f:20:11:94:24:fe:57:f6:41:5a:36:bf:50:24:3b:
4a:d2:13:75:8c:44:a0:70:c4:21:67:c8:a8:e4:03:38:c0:58:
a5:a4:1e:f5:9b:15:e0:a8:2c:67:0c:ec:b3:ff:8e:b7:78:d5:
07:2b:e9:4a:6c:02:d6:e2:fe:7d:19:de:a0:31:df:f9:19:74:
02:84:6c:45:88:59:a0:ec:05:62:fd:bd:6f:3a:e0:e2:7d:6b:
d6:9b:1b:14:ad:7c:10:0b:b5:94:b1:20:d5:87:6f:d0:b2:e1:
6c:50:3b:48:a3:69:16:1e:61:12:10:4f:8e:82:f7:a0:af:e8:
51:85:5b:f4:e1:72:78:e8:b9:6b:77:d7:e3:92:86:e8:d0:a6:
d4:fe:bb:33:7e:b2:94:c4:62:86:fc:29:48:54:17:04:cd:77:
5d:7c:94:85:74:21:be:d1:ec:04:7a:c8:49:10:05:4a:52:f0:
25:94:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:56 2025 by rpki-client