Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json)
Hash identifier: Hv7/fnXfkhzCKB6WPrDb9nTtVNefaC2uy6f/YLcQBG0=
Subject key identifier: 6A:C2:43:0F:FD:99:D4:44:1E:C4:5A:1E:4E:1D:2F:71:56:D6:FA:FA
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 0199608F51FFAC56CEB2F151F83BB804147E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
Manifest number: 01E6
Signing time: Fri 19 Sep 2025 06:00:29 +0000
Manifest this update: Fri 19 Sep 2025 06:00:29 +0000
Manifest next update: Sat 20 Sep 2025 06:00:29 +0000
Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=)
2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: tViUOXrjA2wZcgZESeNlfwuIqttUYQceg9xkLPtbqPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:8f:51:ff:ac:56:ce:b2:f1:51:f8:3b:b8:04:14:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Sep 19 06:00:29 2025 GMT
Not After : Sep 20 06:00:29 2025 GMT
Subject: CN=6ac2430ffd99d4441ec45a1e4e1d2f7156d6fafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:98:fb:22:a3:05:b0:4a:94:63:fb:04:9c:
ce:45:81:cc:8c:14:fd:d2:f0:c4:97:6e:f6:4d:ad:
1f:aa:e3:d8:f0:eb:c6:36:a4:4a:f4:8b:a9:73:f2:
c2:8f:c9:7e:b7:70:6f:7d:9f:9c:a1:b3:41:b4:f3:
c5:01:0b:77:da:6c:2e:09:5e:8f:63:38:3c:69:36:
54:81:a8:3e:5e:75:d4:59:a5:b1:c4:f7:88:79:11:
de:d1:50:94:63:94:ee:7f:ed:e1:7e:1e:64:e1:8f:
b3:8e:c7:ec:a9:e8:c4:c3:40:24:dd:97:46:2c:8a:
2f:0d:ee:8a:e5:76:a3:6e:02:35:7f:c1:7e:c8:0f:
b9:15:90:81:1d:f4:7b:8b:19:8a:0c:93:b2:aa:ff:
d3:02:e5:87:52:47:56:25:97:6a:b7:2d:52:40:25:
da:e4:ec:d3:9c:bb:af:b1:14:8c:73:bd:bc:09:93:
80:69:9d:a0:a1:1c:3d:30:a9:3c:0e:9d:f8:c2:ac:
97:6e:b6:ba:bf:af:38:cd:88:e2:41:fb:2f:69:c1:
a5:de:c4:cc:4a:7a:83:ef:ba:a0:47:e0:e2:d5:56:
15:19:38:ac:03:41:89:33:4c:85:1e:29:97:83:d9:
ce:f3:b9:1e:b7:ed:71:cc:74:74:94:f0:fb:ae:3c:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:43:0F:FD:99:D4:44:1E:C4:5A:1E:4E:1D:2F:71:56:D6:FA:FA
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:82:c0:e7:b4:6a:4c:30:ea:e1:1f:7c:2b:3c:20:f3:83:ba:
df:75:64:b8:16:11:f4:d9:e5:0a:97:44:71:b6:fb:a5:72:7f:
2e:d0:5a:9d:01:9e:40:a0:ac:c7:6e:7a:4c:b8:5f:66:69:50:
68:92:9b:4b:4a:3e:ca:3b:c3:22:e3:0c:c0:a3:a2:00:dd:78:
6d:75:de:bb:db:38:5f:1c:85:ac:74:fd:2d:9a:c2:00:e1:94:
55:19:69:f2:46:b2:2a:d3:72:0c:1d:4c:d9:30:9e:92:90:85:
d7:84:09:a9:08:09:70:2c:be:4f:c3:e1:7e:4f:8d:9b:50:1d:
02:8b:49:68:f1:91:10:3f:49:37:77:7c:14:35:f2:db:8d:6b:
e6:00:23:6a:4e:65:46:81:31:48:6d:80:6e:fd:f0:05:53:b3:
3f:ce:09:45:ad:df:bb:4c:98:cb:a2:38:4f:f7:d5:ac:ce:63:
31:56:ea:2a:14:60:86:7d:9b:f6:88:36:d7:cf:7a:47:47:a7:
c0:6f:57:ad:11:e9:2a:d0:ed:06:7a:8a:97:18:2e:74:5b:07:
52:6d:aa:3c:80:fd:ad:3a:91:c4:25:88:50:0c:24:9f:97:4a:
83:82:7a:c9:d0:c9:a1:28:df:4d:cf:e3:8a:05:85:9d:2e:a9:
9d:6a:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:09:04 2025 by rpki-client