Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: V2r8Cwim+7JF/1N59dkJkeZ2ul0+GUQXs8Z+JIsHRRQ=
Subject key identifier: 6C:76:6A:B3:FA:7C:EB:F1:82:64:7A:A5:3C:4A:1B:04:9C:13:0F:90
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 019A4F2B01ECA308F403927A01CCDCA2A999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (hash: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: ILC9tYHDd6McdTSM4+MWOJASqP7HRvUmv3RzHzER4Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:01:ec:a3:08:f4:03:92:7a:01:cc:dc:a2:a9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=6c766ab3fa7cebf182647aa53c4a1b049c130f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:b1:85:42:4a:ab:9d:1d:b7:5c:28:09:2a:
f0:a7:7b:f3:6b:91:a7:d6:b7:84:79:e1:6b:c8:e6:
9a:07:ca:e9:43:fd:2d:56:2a:4a:bf:d6:d2:97:59:
ac:b7:92:85:b4:58:ea:f5:6f:cb:90:5f:55:82:d4:
ab:94:3d:0a:3e:42:f9:a7:8a:7b:60:f4:67:6c:e6:
a4:27:3c:b5:da:c9:7b:de:0f:5e:66:66:0b:5a:f0:
c0:65:3d:d6:f8:31:d1:15:03:d2:b3:54:2a:66:25:
b8:21:46:f1:3d:db:b8:f5:e3:c0:b6:86:53:e7:ca:
ec:9e:3b:3f:63:01:73:f3:21:4b:22:36:d8:50:98:
11:5d:45:16:45:07:7c:a9:a6:e3:20:d1:48:38:0b:
d9:a4:80:b4:30:df:d1:ea:3e:6f:c7:ca:df:1f:b5:
86:cb:e8:3e:67:ad:3a:af:85:8b:f1:c4:ec:d9:5a:
59:bc:74:c7:25:46:d0:21:49:c6:b9:12:d6:c5:67:
00:07:8d:fd:57:80:6d:3e:c5:4a:4b:89:85:cf:3f:
aa:f9:ef:04:1a:2d:e1:66:45:a1:63:ab:0b:60:a1:
84:c8:fe:0e:7e:de:17:cb:fe:09:29:cf:eb:c3:a4:
06:b9:3d:e0:05:42:d3:bc:9b:82:e1:81:1e:1c:54:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:6A:B3:FA:7C:EB:F1:82:64:7A:A5:3C:4A:1B:04:9C:13:0F:90
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f7:b2:bb:78:7d:21:41:ef:91:6d:7d:7c:fc:59:5c:ba:76:
ac:7c:46:4c:b9:1e:b3:a6:b1:05:ca:e2:e5:ac:1c:ef:b8:90:
59:ff:d7:df:8e:a3:64:64:cf:62:bd:b3:bd:9f:7a:de:a1:a9:
1e:fc:bc:ac:32:58:ae:7e:97:60:39:76:55:76:39:b8:d2:e6:
c4:a1:30:3e:8f:56:2b:c0:d7:41:60:69:0f:23:a8:49:b0:60:
b3:96:8c:90:00:54:75:bc:37:4b:77:6d:b8:e7:a9:78:d8:c2:
bb:0e:03:cf:65:69:60:02:5d:ac:51:bc:b3:8b:64:14:dc:e0:
d9:47:b2:74:26:4a:9e:3e:da:89:5a:0e:0d:5b:b6:10:71:ed:
1c:a8:f9:bb:cb:e6:cd:f9:0b:2b:84:43:da:20:46:c3:4c:87:
36:e4:ca:f0:2e:d0:4f:7e:22:fa:3f:2e:be:97:fe:6e:72:72:
35:12:09:d6:e1:e3:be:3e:36:c2:9b:82:96:18:a6:51:55:cd:
88:31:ce:d5:74:9a:e7:e5:0b:e3:a3:18:f2:98:a7:18:1f:fe:
67:71:72:ca:51:4e:8d:f1:48:8a:f8:20:05:98:2e:4e:c8:79:
60:fe:83:9b:f2:04:13:09:e7:b1:55:f1:03:0f:13:79:e7:63:
3b:79:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:52 2025 by rpki-client