Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: 9akUh8FTAkqB+GhYcs2PHlQD++5mKgPxLUQL6rtWlpk=
Subject key identifier: 64:F7:55:BC:B2:78:0C:74:91:C0:80:6A:D4:04:63:0E:AE:56:7B:27
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 019A71B7F9D6CE09D328EB8E0A96E56BCF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 0328
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=)
2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: LwsRK7FVd4BhwqImRt23IJrPth1mg2XNZi4bMjh96Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f9:d6:ce:09:d3:28:eb:8e:0a:96:e5:6b:cf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=64f755bcb2780c7491c0806ad404630eae567b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:a7:cd:d6:a7:ab:a7:94:97:9a:a0:10:ba:
12:40:96:24:fd:ec:8b:f4:ce:1a:f7:5a:90:ca:f6:
2a:12:a7:07:32:c3:55:ef:39:35:e5:ae:6e:90:18:
02:3a:e2:40:7e:ff:89:98:cb:ca:e7:15:aa:aa:4e:
ab:21:f1:6c:dd:61:81:f3:4f:8a:d5:fd:2d:b7:ae:
db:8a:b1:1e:ea:10:43:18:c1:90:4b:1b:07:1a:51:
97:1d:a9:5c:23:50:7d:b2:69:68:ca:6c:48:99:28:
ee:4e:f4:1d:2f:16:5c:a7:a7:e7:83:d5:f8:da:d7:
87:d0:69:e1:27:84:b6:6e:da:cc:bc:a9:7f:81:d0:
a4:cf:af:49:04:2c:6d:f1:05:bf:1c:89:c1:fd:7a:
47:0f:72:1e:50:b7:52:38:2e:c4:bb:cd:8d:e4:25:
49:51:06:56:71:1d:e9:dc:df:88:a3:74:10:d7:56:
69:0e:cb:19:a3:d9:89:0a:a5:44:16:39:91:41:56:
4f:21:c5:c9:d5:d5:f0:33:b0:b4:d4:0c:77:2a:7a:
25:b5:ec:08:95:99:91:30:cd:f8:3f:32:e6:48:a6:
7d:bc:0b:07:24:38:9a:ca:c6:56:75:65:a0:81:4d:
a5:e7:e6:65:c3:d0:e6:8e:c3:a6:ec:56:12:33:21:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F7:55:BC:B2:78:0C:74:91:C0:80:6A:D4:04:63:0E:AE:56:7B:27
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c6:c1:da:de:fb:51:dc:13:19:cf:8d:31:8d:b2:21:a2:2e:
6d:2f:91:9f:2d:0f:db:5a:09:d6:7d:f8:39:c3:c3:6f:a2:9e:
53:6d:ac:0b:aa:4a:db:30:e1:7b:d6:0c:14:6a:3e:06:18:26:
9b:f8:09:f7:2d:04:5b:41:b5:48:b2:ff:60:3f:4c:5e:25:a1:
a1:58:17:24:15:29:72:22:99:a9:e3:6e:85:18:06:c4:ac:6d:
44:2c:f1:ff:18:0c:20:25:2f:23:d5:a5:bd:b3:6f:63:33:8e:
97:40:8f:0f:06:20:1c:e5:ae:fa:15:56:a6:dd:11:81:0d:7a:
38:06:80:df:68:b0:d4:d4:2e:13:44:56:67:04:d1:01:6d:f7:
70:cf:c0:f4:e3:3b:fe:80:98:52:f7:9b:69:96:e9:c7:2c:5f:
b6:d8:97:f4:22:c3:ff:9a:1a:9e:84:11:d8:46:5a:4e:19:dc:
01:ec:ff:41:15:0b:c2:dc:8d:6a:df:67:5b:62:bf:d5:3b:db:
8e:54:81:cc:02:9f:dd:7c:11:d4:8d:f3:32:ce:db:62:2d:20:
45:c0:78:02:1c:a1:78:46:cd:1c:69:3c:15:ac:14:97:b1:52:
41:ff:63:bc:ee:39:cc:2f:32:7c:da:86:ae:0d:69:e4:05:f6:
bc:ba:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:52 2025 by rpki-client