Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: ssx5IaIO3Tqt3lfobsRPUIy37HETKkLJXfcf3D2y5mQ=
Subject key identifier: D4:62:CE:82:6F:ED:03:93:B4:F9:AA:87:88:CE:DD:D9:81:72:DA:FB
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 019892CA1CABA0B20EAF4BBF6EC4C2F440F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 098E
Signing time: Sun 10 Aug 2025 07:02:55 +0000
Manifest this update: Sun 10 Aug 2025 07:02:55 +0000
Manifest next update: Mon 11 Aug 2025 07:02:55 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: pesQA5adOrmQ7NQKkC7+XECuU4W9nCX7xs9kU2EzsAk=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ca:1c:ab:a0:b2:0e:af:4b:bf:6e:c4:c2:f4:40:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Aug 10 07:02:55 2025 GMT
Not After : Aug 11 07:02:55 2025 GMT
Subject: CN=d462ce826fed0393b4f9aa8788ceddd98172dafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:52:6c:a8:02:7a:0d:a8:e6:a6:6a:d9:de:
24:ac:08:9f:6c:16:04:4c:ab:75:2c:b3:87:9c:02:
ee:c5:5b:1d:41:d0:e7:d3:68:c6:74:85:36:ec:71:
9b:83:64:c1:e5:7e:3b:39:d1:1d:8d:91:a5:1c:bd:
e6:22:27:2b:ff:68:b8:c4:68:6d:01:79:b4:50:8d:
1c:4d:22:25:cb:0a:62:ba:9b:5f:3d:ae:e9:9d:d0:
8e:3c:7c:50:de:5e:c8:03:ec:dc:d9:9c:0f:c6:cb:
29:11:da:4d:b1:34:84:d5:b5:88:81:cb:8b:3c:ef:
1e:ec:f4:84:43:df:5b:da:61:54:fc:97:a8:f8:13:
f2:43:f5:6b:85:30:c4:65:4c:d5:23:db:33:30:ed:
7a:ec:16:4f:99:b9:08:35:51:19:47:76:56:ad:02:
bc:c7:6f:ae:fa:5f:97:df:da:75:db:f9:7d:18:d6:
6e:74:0c:c0:6c:7f:13:8b:ec:19:92:f7:6b:ce:2e:
86:cf:df:55:54:5c:cd:fe:34:3a:a0:71:5e:ca:2d:
50:ae:39:d8:2c:3a:db:4a:e0:ed:26:4d:0d:55:98:
63:fd:30:2b:73:14:fb:c0:d7:7f:dc:57:5e:85:5f:
07:af:68:2c:13:33:a0:bf:8e:a7:5f:d3:bf:24:07:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:CE:82:6F:ED:03:93:B4:F9:AA:87:88:CE:DD:D9:81:72:DA:FB
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:43:e8:1c:86:31:50:9e:de:4a:e7:b4:f7:62:dc:90:59:a4:
bb:d7:62:8c:3f:c0:11:eb:98:d8:9b:1d:7d:03:f0:65:62:e8:
71:86:bf:d5:ff:26:74:d1:bb:c5:2a:5b:dd:b0:59:a1:1f:02:
3b:49:1a:d0:90:43:09:d3:c4:b0:11:d6:2d:fa:8f:0c:f5:ec:
51:c0:a5:b2:6a:9d:ad:59:21:4d:58:2b:56:29:75:4b:5a:4a:
e5:fe:b4:51:1d:e0:99:2a:c8:57:b3:d6:6a:a5:98:b4:e9:53:
c9:5a:cd:a7:4f:9e:ca:4a:2b:ec:e7:50:77:bd:fe:a9:11:45:
a3:27:84:bd:03:2d:a6:d2:e6:03:b7:e4:0d:c1:ab:6e:c0:e7:
0e:41:b2:c6:dd:8f:55:77:3e:a7:da:4f:16:6d:05:45:45:9f:
b4:29:ec:37:0c:29:71:ee:a9:dd:2c:f5:8c:ac:e4:66:3d:9b:
50:e5:b6:a7:b5:39:f3:cf:86:42:34:43:21:6d:cb:d4:60:47:
cd:7b:f2:cd:a4:18:13:70:7d:cf:4a:fb:a9:d4:24:49:ad:75:
09:05:f1:bd:5f:f9:ce:70:0a:22:68:5a:76:b4:9f:82:13:0c:
35:4d:30:03:33:7d:4f:eb:f6:65:c6:ae:44:ff:02:d6:d8:68:
17:b2:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:17 2025 by rpki-client