Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: 1dSSY4Bs2elMiB1hZtFL7e14icm5A64JaPWhUUDYaOo=
Subject key identifier: 74:03:A6:9B:F4:C3:FF:81:11:27:2D:57:BB:98:33:9C:E8:BD:F2:06
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019A2D7B47648ACD67716FBC7305A69CD1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 170F
Signing time: Wed 29 Oct 2025 01:00:45 +0000
Manifest this update: Wed 29 Oct 2025 01:00:45 +0000
Manifest next update: Thu 30 Oct 2025 01:00:45 +0000
Files and hashes: 1: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: oa6b6rLyhCCuJduGUGzMUHs79msql6MqMqF3H0vN9Fs=)
3: wo81X6dNJnxHwqDCPslyPelPnyk.roa (hash: LNeGgskvgHmXiZQlDf/OPt0CW7kE7h3hGkIagvdPCcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:47:64:8a:cd:67:71:6f:bc:73:05:a6:9c:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Oct 29 01:00:45 2025 GMT
Not After : Oct 30 01:00:45 2025 GMT
Subject: CN=7403a69bf4c3ff8111272d57bb98339ce8bdf206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:88:cf:76:e2:60:3c:83:42:30:76:94:77:
53:16:fe:b5:55:ea:fe:f2:b0:c4:16:65:2c:47:8f:
eb:60:89:d2:04:35:a5:dc:29:f5:de:2e:51:80:47:
6b:59:64:14:3e:03:31:bb:d7:2c:f6:e4:86:6c:1f:
56:2d:4b:7a:45:eb:7b:69:7f:55:ec:a7:81:e8:6d:
0e:47:7b:46:24:4a:0e:c0:cb:d4:83:81:b6:51:23:
9c:6d:9c:de:1d:85:59:40:c5:f1:63:f5:2e:38:40:
71:ed:33:10:a5:ee:fe:e0:9b:1a:27:b9:b3:bf:90:
8a:13:fe:92:92:d6:ac:17:42:5e:54:f8:a7:1f:df:
a7:1c:f2:b4:91:8f:58:0b:9e:8c:c7:55:a4:51:dc:
8a:c2:ad:75:30:8f:d2:b8:34:c8:a2:7f:64:22:71:
c0:8b:b4:42:8c:0e:b4:b6:8d:30:ca:d1:47:64:56:
ed:3d:69:ef:c3:da:32:da:60:72:48:de:f4:38:7f:
ea:e1:51:cd:c9:6e:6f:e7:de:6f:b2:df:4b:2d:fa:
48:8c:64:db:44:5e:ec:03:61:99:2e:44:0a:3d:a8:
71:bc:c3:f3:c0:72:7b:15:95:9f:c8:62:37:0e:1e:
8f:51:50:c5:ae:93:08:4e:a7:92:2d:99:fa:d4:19:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:03:A6:9B:F4:C3:FF:81:11:27:2D:57:BB:98:33:9C:E8:BD:F2:06
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b5:e0:a7:6d:48:7a:88:6c:0c:a3:3e:23:2b:bf:c1:d2:c1:
77:5b:71:72:f1:f8:24:26:ad:5e:71:6a:5a:ca:78:5d:98:3c:
54:94:3b:05:bb:9e:9f:25:21:f7:31:4d:7a:3b:b9:73:eb:4a:
c3:e5:68:d5:f1:df:1e:f7:f2:9e:b5:e8:a6:a8:d1:39:55:a1:
d6:50:55:11:9a:f8:a1:f1:bf:11:ef:59:1d:6e:69:83:4a:94:
25:40:20:24:98:f8:82:2e:cb:0b:79:fa:95:4d:45:70:5c:97:
d4:89:5b:41:47:8a:85:99:12:86:4f:c1:d5:27:48:1f:0e:35:
d3:5a:9b:b9:14:17:43:bb:29:e7:f0:7a:1e:90:00:64:cf:6b:
26:e1:af:2f:fc:55:5d:eb:f5:62:43:b5:a5:53:12:ec:a6:5b:
06:59:47:97:c0:73:2d:7f:d4:58:79:41:ec:1a:9d:65:e8:4c:
d8:99:b2:ef:56:38:28:4e:15:8c:98:b5:1b:31:7d:1e:03:94:
eb:01:ce:cf:fe:38:9d:51:c1:90:2d:ae:a4:27:c7:fe:f3:30:
d0:14:38:fc:f9:ca:5e:f2:dd:02:2e:dc:4e:da:91:46:73:4f:
e9:49:3d:db:2c:76:05:65:55:f6:6c:3a:49:c2:fc:ae:5f:0a:
78:16:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:19:02 2025 by rpki-client