Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier: JhiqGFL+0BppCYnAUsLTKKpgFu6R+ddF74wO+1bXVW0=
Subject key identifier: 97:97:2E:24:C9:23:AB:F7:91:D8:A8:6B:F6:9D:8C:90:ED:29:7A:C5
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019A4E188BE790511BD2AC165B0283A3CA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number: 12E0
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=)
2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: SbMnI9QnMHafO1ORAxvtI7KJEDb5awggKvRyLZ3co+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8b:e7:90:51:1b:d2:ac:16:5b:02:83:a3:ca:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=97972e24c923abf791d8a86bf69d8c90ed297ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:ea:6f:db:1f:8e:70:9f:17:ca:bd:bf:e0:
5a:67:ae:f9:23:be:03:eb:b1:ca:31:67:a3:4f:ec:
83:d4:9d:13:33:d6:6a:5b:84:fd:b2:58:97:4a:19:
a4:67:ad:ef:95:a3:1d:52:62:90:67:2e:4e:1c:4b:
4d:80:78:98:59:3c:f8:5b:8c:29:fd:f4:01:1c:a7:
86:c8:2e:6f:0c:a6:84:ba:40:64:ce:aa:ea:c4:06:
36:1a:7a:10:80:30:07:f3:a6:54:d1:61:40:08:4e:
91:80:14:5e:ba:f9:e4:41:17:4b:69:8c:06:20:9c:
61:69:51:a5:c4:6c:57:2b:d6:fb:cd:a5:a2:7c:93:
01:a3:16:d6:21:c3:a6:d9:8a:62:ee:59:38:bd:c4:
f9:1e:11:fe:46:bf:1e:7e:0b:cd:c5:15:f3:04:ef:
3a:9d:99:b9:5a:1f:2c:60:d4:3e:71:d4:58:34:a1:
a3:f4:9d:21:a6:5f:76:53:eb:9d:98:23:11:2d:4d:
fb:23:cf:ec:51:84:7a:27:0b:9e:54:27:88:97:c1:
bc:9d:28:b1:c9:4b:e9:5f:53:5b:9d:cb:bb:29:f0:
c8:a7:65:33:70:b1:87:f6:11:ab:02:22:63:28:4c:
d0:00:f2:a7:bc:27:a2:24:cb:58:92:a4:ca:6e:17:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:2E:24:C9:23:AB:F7:91:D8:A8:6B:F6:9D:8C:90:ED:29:7A:C5
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1d:41:7d:8f:9e:13:95:9f:91:1e:f9:87:12:17:cc:de:44:
42:22:80:49:91:c2:db:ea:5e:83:30:95:42:ca:5e:e5:ca:df:
9f:0c:ff:6b:08:05:ba:44:b4:08:98:ad:58:9f:57:1b:63:db:
6d:33:f8:00:8d:81:ae:f3:8c:42:15:77:3d:ce:5f:33:63:78:
bd:f3:ed:46:77:35:9a:56:b1:c2:a7:73:bc:9f:28:15:9e:55:
a0:2f:01:ef:40:ea:6f:c4:a7:47:02:71:da:ab:5e:b9:1e:05:
92:bb:32:ae:79:28:a8:30:ac:58:ee:5e:96:2e:fe:04:d6:c3:
14:49:bc:f9:0c:bf:6b:05:68:3b:5a:35:35:28:8f:25:c1:6c:
c0:7a:c6:1e:b2:5b:2c:12:78:0e:1e:f8:da:f9:2a:81:4e:ec:
3b:0a:ac:8d:05:35:31:f6:6b:a8:24:8b:5a:52:75:a8:df:ee:
de:ad:1c:7a:6c:62:c8:b8:33:ec:34:d8:cf:d4:d2:ff:34:16:
ee:76:81:97:85:61:79:68:e3:82:3c:38:85:99:a4:59:75:20:
27:8a:65:e1:b5:62:39:ce:49:52:04:ad:e1:36:45:5d:3d:35:
4a:e3:89:3d:e3:07:60:1b:14:9c:25:8b:9a:9d:ca:75:c6:fb:
b6:92:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:01 2025 by rpki-client