Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: 6QQFDLRopG4s3kAOaBbkPQrrR5kMgm2y5jvAAFFIoT0=
Subject key identifier: 31:90:04:AD:8E:7D:D2:36:2F:C4:40:11:BC:31:04:C0:D7:19:30:73
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 019A4C2A917C912BF832A41572DDB5731F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 0260
Signing time: Tue 04 Nov 2025 00:00:49 +0000
Manifest this update: Tue 04 Nov 2025 00:00:49 +0000
Manifest next update: Wed 05 Nov 2025 00:00:49 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: cBGxYGlG6VXhC0Yyii2PlPZJ2c9+J/23AWMGi7OyouE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:91:7c:91:2b:f8:32:a4:15:72:dd:b5:73:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Nov 4 00:00:49 2025 GMT
Not After : Nov 5 00:00:49 2025 GMT
Subject: CN=319004ad8e7dd2362fc44011bc3104c0d7193073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:22:a9:0a:b2:90:e0:5c:cf:e3:61:25:e9:
c2:d2:dc:89:9f:9f:fb:6a:ea:b6:c8:cb:83:8d:9d:
0d:d9:f4:cc:94:1d:e8:65:e0:51:6f:a1:55:f2:36:
34:0b:75:aa:ba:16:b0:66:7b:8f:9d:fd:10:d6:23:
a4:2e:3a:37:bf:45:e5:b8:e6:32:59:d6:26:52:c6:
e7:b5:f4:ee:12:e4:0c:f9:ce:a0:61:1f:7b:74:cd:
6e:e1:bf:3e:43:cd:6a:3f:3d:51:99:dd:4f:77:c3:
64:2f:76:30:92:55:60:14:93:e6:24:db:ca:fe:b8:
08:e6:71:f3:ba:2b:24:43:ab:7e:d6:7c:db:b3:09:
1b:f3:dc:4b:c8:04:f9:36:d5:12:ee:98:72:f5:75:
94:50:25:72:3c:56:be:4b:1f:d4:ab:20:6f:a9:5d:
84:e1:58:5f:1e:7c:64:2e:41:2f:01:c2:63:14:b3:
46:91:a3:e6:66:c4:8e:0d:e9:d9:1f:78:8c:74:97:
9d:d5:5c:a8:2f:3f:94:b1:e9:43:00:04:a0:64:b6:
64:a8:07:6e:db:3a:b8:3c:3f:e7:ea:eb:1f:c5:b9:
f6:4d:8e:7b:c2:91:aa:36:64:4e:32:68:81:59:fe:
a7:66:bb:7c:39:d6:c7:1e:0d:cd:68:3d:3c:42:9c:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:90:04:AD:8E:7D:D2:36:2F:C4:40:11:BC:31:04:C0:D7:19:30:73
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:38:d6:a2:c1:14:c0:6d:e4:80:29:56:6a:96:b5:f7:55:5e:
d6:16:25:f8:c9:34:0c:b9:04:66:94:d5:d0:87:4c:9a:d5:4d:
8d:38:81:18:a3:5d:71:54:97:54:f7:94:92:7e:6a:d6:00:80:
e4:5b:b3:b5:5a:f8:1b:15:d9:18:54:f0:16:61:0c:79:73:70:
90:e1:25:cd:4a:eb:24:c9:10:0d:be:fe:4b:86:0a:17:18:0c:
98:af:6b:e8:b1:29:98:e9:bf:80:df:39:5d:3d:7f:40:a0:05:
b1:e2:a9:69:12:2d:dc:a4:3b:b8:7a:f7:33:95:08:24:c8:34:
15:19:9e:04:a7:1d:fe:fe:77:ee:b7:99:2e:3e:fa:55:12:b9:
93:2c:79:3d:36:d3:70:12:99:3f:7c:79:76:fb:24:91:db:39:
0d:5d:e0:ce:de:f0:84:a0:42:d2:d5:d9:d6:f1:83:f4:27:23:
6e:f6:55:aa:83:69:d5:7c:69:08:86:be:7c:8d:d0:b2:3e:97:
a9:a3:d1:de:0d:f4:b9:f7:ae:28:6d:71:c1:35:d1:41:90:bb:
ce:8c:1b:e7:99:0e:6b:fb:eb:73:a9:12:ee:dd:c7:1b:97:85:
6a:fb:a9:d8:8f:35:8a:4f:30:a6:98:c7:bd:55:92:93:04:40:
98:59:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:25:24 2025 by rpki-client