
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File: mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier: u+F4jXFMrYomRknlTZC/yoCgAc37n57a+Sw2yLnEoPs=
Subject key identifier: 1D:A5:51:8F:EA:72:EA:26:3D:7B:B8:84:4E:1A:D9:D4:AB:5B:12:E4
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 019A5187945C7A2F1AE619695138C057D2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 01:00:31 +0000
Manifest this update: Wed 05 Nov 2025 01:00:31 +0000
Manifest next update: Thu 06 Nov 2025 01:00:31 +0000
Files and hashes: 1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: x3L00QcqK4DV07shvnz5jm0qKMcG1p2BtL0Aq2I/31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:94:5c:7a:2f:1a:e6:19:69:51:38:c0:57:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Nov 5 01:00:31 2025 GMT
Not After : Nov 6 01:00:31 2025 GMT
Subject: CN=1da5518fea72ea263d7bb8844e1ad9d4ab5b12e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:17:28:fa:25:9b:54:bc:b7:52:e3:90:34:
ca:b9:2f:2c:59:b8:be:61:b4:1f:18:d3:53:0b:5c:
22:b1:71:e9:3f:59:95:9f:f7:69:ef:07:1a:bf:c8:
eb:07:5e:55:88:5d:dd:fb:9d:de:fa:05:94:e4:44:
37:ef:8f:90:86:51:15:8c:22:5b:45:51:14:96:fc:
12:4e:8f:bb:61:fc:3b:10:82:db:a7:1a:1e:f1:48:
a0:da:24:aa:cd:17:77:40:60:d4:08:88:56:00:7c:
63:40:4e:11:ca:46:d5:6d:a6:9b:92:43:4c:25:ce:
d8:c2:49:04:26:7f:d8:71:28:6c:20:a0:a3:27:dd:
8f:19:39:35:90:52:30:8e:7d:bd:3e:79:2d:fa:1b:
b7:dc:f4:c4:90:3f:61:37:45:10:d9:d5:c3:f3:cd:
2e:a1:b2:8d:a6:28:b2:b1:c2:ab:74:2d:a2:41:80:
af:c5:0c:51:03:bb:cb:90:72:3f:66:6e:0e:4a:59:
98:b0:d8:b5:f9:18:7e:24:c3:24:c0:33:24:c1:4c:
df:ed:2c:80:8b:b2:22:dc:43:fd:d6:9c:d3:5d:3b:
b1:00:f9:9c:44:d3:01:6d:07:50:46:45:c8:d9:86:
da:4e:a7:e5:be:46:55:cb:45:8d:2e:9e:0e:cb:84:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A5:51:8F:EA:72:EA:26:3D:7B:B8:84:4E:1A:D9:D4:AB:5B:12:E4
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:03:ce:41:3b:39:81:b2:54:33:fe:b8:0a:61:5f:eb:2b:93:
fd:e0:80:af:60:99:89:ec:86:1e:ca:75:ad:f8:2f:83:21:29:
84:53:e6:51:a6:dc:d5:28:02:45:81:e4:33:c2:8b:c4:22:e1:
8f:20:3f:ed:82:2e:3c:69:ca:f5:c4:bd:05:23:a7:18:df:cf:
43:37:6a:34:7a:c9:b4:63:b0:1f:4d:ea:59:1e:fc:b1:b1:ac:
94:e4:0d:bc:ef:82:7f:1d:a0:b6:f7:c7:c8:81:2c:be:56:b6:
79:14:db:aa:b8:3b:10:eb:8d:58:83:61:ca:62:23:d6:1f:9f:
17:2e:ba:c1:e5:a7:8f:9f:84:9f:d0:8b:d7:d4:20:00:58:c7:
5e:cb:4d:8b:d1:ca:f6:65:c8:30:cc:eb:06:11:e8:0c:5f:c6:
f5:47:a8:b3:e9:16:42:bf:85:d0:31:34:87:3c:e9:3e:5b:5e:
08:17:be:fd:c6:87:63:ab:d1:9e:6f:55:d2:4f:d6:a2:c9:02:
df:86:0a:d4:31:82:93:31:c1:9e:ba:76:3b:d6:57:7b:09:0e:
fa:05:6a:53:01:db:28:43:c6:7b:81:8b:c7:89:d9:3b:c3:63:
7d:a4:8f:b5:a8:b2:06:8f:1f:76:5b:cf:db:83:7a:12:76:3f:
7c:c3:c9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:06 2025 by rpki-client