Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: kSWsbyArNcEE5X2wFGfl0wgHSUb3QNXISmIlJKBwFRk=
Subject key identifier: 93:D3:37:AB:8C:BE:59:15:0D:CB:D4:82:4D:23:2B:2F:F5:7C:C7:BC
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 019A4EF564E456430EB26051E3FA53222899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0A74
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: TVAEj0LyGcS4PRv88JpJ0PSfzo08S2Ji+W7qwSAqMdE=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:64:e4:56:43:0e:b2:60:51:e3:fa:53:22:28:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=93d337ab8cbe59150dcbd4824d232b2ff57cc7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:24:b3:85:5e:0e:15:dd:3c:8f:93:31:47:
98:b4:e2:a9:26:f8:bd:1d:e2:34:bb:ae:47:12:37:
9b:af:8e:b8:33:c0:7a:aa:5b:6f:6f:3c:18:b3:46:
66:c0:2c:69:ff:b2:40:a1:10:77:aa:06:a7:6e:ac:
86:69:ff:3e:18:2e:bf:d9:e8:ce:7d:26:b5:ea:e3:
a1:6e:cd:8b:a2:e1:da:9b:42:82:67:6a:ef:ea:aa:
5b:a6:58:6a:26:c9:3b:ee:0c:64:7d:69:cf:bc:e8:
0e:0a:96:b0:08:5d:e1:14:44:61:b4:f7:61:f5:c3:
86:18:2a:ff:44:aa:d4:e5:44:35:89:51:27:df:73:
ec:87:e0:0c:db:b6:90:80:53:a0:0d:4b:41:23:64:
43:85:d3:1f:33:02:a2:f2:60:4c:b2:65:0e:bc:0a:
98:15:3a:b3:30:ee:d7:fa:46:2f:72:11:56:81:29:
43:9d:a1:d5:60:cc:22:99:40:26:f9:bf:ff:ff:93:
4b:1d:c5:92:bc:fa:37:29:08:d4:65:4b:7a:0a:cc:
13:dd:64:6e:06:43:de:d3:7a:4e:d4:e6:c5:28:f3:
ce:b5:a6:a7:38:4c:46:32:67:6f:f3:bd:57:44:b0:
b6:98:18:c8:d6:56:83:32:99:45:5f:23:e9:2d:80:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D3:37:AB:8C:BE:59:15:0D:CB:D4:82:4D:23:2B:2F:F5:7C:C7:BC
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:59:9e:14:1d:8f:29:a5:2a:0c:c9:10:90:88:68:36:44:bf:
be:49:8f:8a:96:7b:67:96:44:53:93:63:56:75:cb:5c:31:94:
bf:db:ad:39:69:e0:42:f0:0a:e8:c3:33:31:b5:32:d5:43:31:
a5:6b:d5:5f:81:2e:67:a5:7d:58:5c:9a:0f:3a:2e:b9:5e:8d:
fc:41:13:f7:70:11:54:91:f1:b6:42:51:8f:6b:ff:57:2e:46:
bd:ac:af:25:9f:02:d2:0a:ab:54:d4:db:7a:ec:d4:15:9b:a5:
f3:cb:03:b8:4e:f6:68:8e:29:f3:72:27:18:42:a9:4f:3d:b6:
83:1d:13:e3:37:a4:7f:ed:73:61:06:10:cd:22:a1:e9:e5:2d:
b2:27:30:56:cc:6a:49:3c:0c:d7:2a:0d:75:da:01:b0:44:60:
03:0b:10:b1:54:68:3c:2b:a4:63:3a:4d:2a:38:33:b3:a5:8b:
fb:92:99:49:46:94:86:a3:17:6b:2d:34:92:8b:b9:3b:69:3b:
0b:14:4f:0b:a0:6e:b6:8a:fe:1e:2e:be:d9:07:8b:f7:38:fc:
d0:18:29:c1:30:36:fa:79:5f:77:5c:54:78:d1:00:a1:76:dd:
07:90:97:48:97:16:33:5d:ea:10:e8:34:fc:48:4e:86:30:91:
3e:f4:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:03 2025 by rpki-client