Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: W4COIG5u96ZcP1yjObK42wHON6bprcPuJTTsKRwO0Xg=
Subject key identifier: 38:55:85:3F:BD:63:70:43:27:A1:27:17:75:2A:D0:5D:02:73:DC:22
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01987C09DBD651EE0A832F7DFA75D3AC6924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 21:01:17 +0000
Manifest this update: Tue 05 Aug 2025 21:01:17 +0000
Manifest next update: Wed 06 Aug 2025 21:01:17 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: F/OvEC4fynDpUmZSc5R5QlJL92mAJLksBdsw8NjnzLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:db:d6:51:ee:0a:83:2f:7d:fa:75:d3:ac:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Aug 5 21:01:17 2025 GMT
Not After : Aug 6 21:01:17 2025 GMT
Subject: CN=3855853fbd63704327a12717752ad05d0273dc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:83:18:cd:41:42:1a:b5:7d:93:5d:39:fe:
ba:cd:ae:58:f1:5a:24:9d:20:bc:fa:2b:78:e4:a2:
30:59:f0:2f:46:e9:43:01:69:46:50:68:e6:47:11:
ed:f8:25:2b:49:e8:55:21:4f:50:5a:e5:78:69:8f:
5c:89:58:9a:58:bf:6b:c2:fb:25:dd:28:d8:91:ed:
10:f2:5b:de:35:52:c9:61:4b:81:8b:09:c6:29:8b:
a1:a5:09:c4:a9:2b:d0:d7:81:08:4d:d8:e7:47:cd:
32:50:27:2c:ec:f9:d2:71:5c:29:e2:05:af:14:a2:
18:82:a6:cd:38:3d:7f:bc:b3:1b:25:ff:5a:d6:ed:
8e:92:93:c4:51:0a:6e:bc:4e:74:2c:57:00:dd:82:
8e:cb:f5:87:c2:6d:c6:85:90:3e:f6:c5:1a:f4:d3:
73:28:db:a4:b7:97:2d:2b:8a:ce:34:79:24:ee:1d:
17:9f:1a:07:f4:b3:33:e9:4a:9b:92:13:11:86:96:
ff:a0:a7:30:c5:bc:6b:33:98:02:ce:37:07:b5:2b:
9e:89:01:9e:43:a2:90:fb:1a:08:52:02:42:54:f8:
5f:aa:c4:fa:89:6b:61:b5:ed:94:48:95:67:93:9d:
5c:6e:66:da:fb:28:35:47:56:0b:82:e4:fa:a2:2d:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:85:3F:BD:63:70:43:27:A1:27:17:75:2A:D0:5D:02:73:DC:22
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:33:42:c4:84:30:6f:d0:6b:65:da:82:66:55:26:db:ca:64:
06:bf:8a:80:0a:d6:35:f4:9c:fa:cb:57:1b:51:18:61:04:39:
1f:ee:27:e9:5c:b3:7d:d4:75:dd:d4:58:1e:f9:01:c6:ce:78:
b2:9b:e1:11:77:fa:7e:ed:df:05:e2:2c:35:b2:25:82:4b:2b:
20:37:41:44:75:d1:41:2f:53:94:f0:15:b0:09:00:25:d5:0c:
ff:c3:2a:30:45:3e:78:3d:61:c1:8b:01:2c:3a:85:50:50:60:
54:2a:64:50:69:06:35:a1:42:99:31:3c:70:b1:1d:7f:0b:48:
39:ec:45:0a:66:1b:a9:d0:fe:33:1d:fb:1b:47:37:45:cd:38:
41:e9:9e:4c:93:90:58:c9:4a:26:e2:1d:a4:d1:a0:c3:8a:6f:
d0:f0:60:b7:ad:43:e2:bc:13:e6:c5:a3:17:34:05:9f:fe:3a:
29:32:50:32:d5:94:a8:28:8f:42:ec:08:9e:e7:e8:22:3a:7e:
7d:24:7e:18:5d:27:7d:53:3f:54:2f:cb:37:77:19:27:5c:99:
16:72:e3:b0:15:66:e4:78:89:5c:c6:81:f0:6b:38:16:f8:e4:
23:d4:6e:22:c7:ec:b3:99:b9:f7:d1:65:48:e9:af:b6:07:36:
c3:4a:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:36 2025 by rpki-client