Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: OGq52KfsfReUs3q8J7Mm8eHuFdEz1duIOB9iYLHpa2A=
Subject key identifier: 1E:D2:08:C5:BE:8F:84:C9:6D:DC:DB:46:17:B9:3A:51:B5:A5:04:6F
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 01987AC00A5559969314FC2591AA9221D03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 11EE
Signing time: Tue 05 Aug 2025 15:01:02 +0000
Manifest this update: Tue 05 Aug 2025 15:01:02 +0000
Manifest next update: Wed 06 Aug 2025 15:01:02 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: dBFD8olLoGB7jFsFH38rTDvPHLNT8IeGyo03AR7LIMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:0a:55:59:96:93:14:fc:25:91:aa:92:21:d0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Aug 5 15:01:02 2025 GMT
Not After : Aug 6 15:01:02 2025 GMT
Subject: CN=1ed208c5be8f84c96ddcdb4617b93a51b5a5046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:05:f6:97:65:aa:d3:90:e6:23:04:e7:be:
14:2b:66:22:a8:72:4b:96:0a:11:2d:fb:5e:21:85:
b5:e1:1a:ab:15:34:2f:c6:ee:72:f2:31:6c:c5:27:
30:37:df:ff:17:2f:a9:c2:61:ba:c8:54:9c:55:77:
b8:e6:35:38:48:f2:a0:5a:ca:c2:a6:d4:d0:e5:7c:
11:0a:d2:df:5e:1e:26:e8:b7:57:a7:5c:e7:22:85:
2f:88:eb:15:ba:4d:dd:16:6f:89:1b:6e:74:34:35:
6e:5f:1c:49:06:fe:04:83:43:e4:58:7c:78:78:1d:
86:1a:1c:c1:92:e0:0f:2b:2a:77:7a:98:9f:ff:1d:
ec:e1:30:2c:56:0d:99:d1:1a:9a:15:e8:bb:1a:10:
6b:7c:cd:95:eb:d0:2c:71:88:91:9c:f2:ed:b9:1f:
68:4c:15:ce:dc:98:f4:71:21:c8:40:ec:38:72:52:
c6:c1:1e:e1:05:a6:a1:76:53:e0:1f:d2:05:60:5d:
dd:e1:eb:63:13:0e:2e:c6:32:02:ff:3c:5d:2e:e2:
95:23:41:ef:0d:24:67:be:3a:f3:5e:c7:cf:34:c8:
39:4a:dc:fd:6e:33:7a:b9:09:61:70:3f:ce:c5:ea:
f9:ef:ef:a2:66:67:4d:ad:cc:4c:46:02:72:07:c9:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D2:08:C5:BE:8F:84:C9:6D:DC:DB:46:17:B9:3A:51:B5:A5:04:6F
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d8:f3:80:c8:1f:16:59:bc:5c:83:26:4d:8c:8f:18:5d:29:
f9:7f:55:ce:cc:4e:11:a7:b8:29:0c:d2:73:86:c4:04:96:25:
20:5d:53:bf:f4:bf:e3:5f:f1:57:87:5c:c0:55:ff:aa:34:62:
ad:70:f8:c5:4c:0a:d0:6c:77:f4:69:5a:a5:8f:34:98:dc:b5:
5f:3e:b3:d8:18:90:63:bc:b7:b0:d4:f4:e3:e1:f1:ee:6a:34:
ee:54:f2:a3:16:14:df:e9:28:00:79:23:cb:57:a4:0c:e8:4c:
f2:08:8e:7c:0d:b4:d6:7c:4b:e8:40:7e:21:87:90:47:5d:65:
45:fc:45:9b:aa:fc:f3:79:b5:2d:78:a7:ef:4e:20:f2:75:68:
b9:38:95:c8:89:9d:6a:0a:7b:f5:8f:61:38:5a:c8:4f:59:96:
7a:b4:21:f6:a1:b4:77:ec:0e:ba:76:aa:97:dc:2c:35:bb:e6:
dc:4b:38:2c:c0:a4:4e:e4:79:e3:ae:cb:bd:66:e4:c7:56:88:
bd:5a:6a:a4:9a:e5:4c:6b:e7:00:59:b1:3d:a3:e3:37:57:9f:
b0:d2:09:f6:45:fc:bf:86:40:3a:1b:d0:62:fd:00:90:a5:11:
16:81:1f:9c:8b:a0:74:b9:b9:0a:43:6e:02:3d:ba:5a:71:c8:
67:58:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:48 2025 by rpki-client