Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File: mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier: yD0Ms3tJfBU8MiRrPws0yHYqhgabh4FqrQRKTwNWNo4=
Subject key identifier: 42:B0:37:10:70:21:3D:9F:E4:E6:EB:59:6E:88:02:6D:C6:8F:05:72
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 0198838CAF2EAE89C1DE1D6A964562364FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 08:01:31 +0000
Manifest this update: Thu 07 Aug 2025 08:01:31 +0000
Manifest next update: Fri 08 Aug 2025 08:01:31 +0000
Files and hashes: 1: 7TyGUQq5_upn7OI_8rMQkinORFg.roa (hash: KGYsAjI6sTjQq+H3tQWHe4y4uTdeAqiVMRj2OW3ueCg=)
2: An6YNgwh93187k654T-zbgMGRlg.roa (hash: nmjx1IvTXJQBFo0I6BDxNzxZSqlRyAfA/ku4fVVGSzU=)
3: YFV3fg2_UFfx7WAKmvDqKbwP8jE.roa (hash: dIpJXmybjciq6KSAb3XbD1GV1C0Qt6Lv/BzchkxxZYM=)
4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: eRTu2DsAPdNp6iHGbnrF0gY8GLua9gMpwYunsBGtmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:af:2e:ae:89:c1:de:1d:6a:96:45:62:36:4f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Aug 7 08:01:31 2025 GMT
Not After : Aug 8 08:01:31 2025 GMT
Subject: CN=42b0371070213d9fe4e6eb596e88026dc68f0572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:fa:5b:29:ff:d5:31:ea:53:2f:d9:52:82:
0c:4c:12:c8:23:26:75:d1:a5:d2:d7:2b:5e:b5:78:
11:12:6c:1f:fe:c2:72:68:25:b4:b6:26:5a:70:b6:
88:06:4f:db:9c:2b:78:65:73:de:1c:6d:4c:85:b9:
2a:43:33:5b:f3:c0:bc:12:3e:8f:e1:9f:e1:d6:d4:
42:09:66:77:29:8d:f3:74:03:5a:a4:29:04:97:89:
00:77:24:19:1f:63:53:e0:d0:af:59:66:fd:a5:2b:
75:97:13:1d:c0:d5:19:f0:9c:1f:91:02:26:9e:1d:
35:d3:2f:c0:b6:2d:6e:32:ee:bb:99:28:38:ed:50:
82:38:15:5a:44:62:44:77:fe:ed:ac:6a:3a:8c:f9:
d2:70:64:c7:b9:ee:77:22:91:eb:86:cb:0b:50:47:
f2:f8:1d:97:ab:9d:dd:40:7e:a9:c7:42:d7:8c:7b:
d3:7a:5c:a9:fa:79:a3:07:c8:27:f7:7c:6d:ee:ce:
47:c0:96:e8:f9:05:06:7d:91:96:c2:94:21:12:88:
3d:f2:34:21:78:3e:36:25:21:60:2f:9b:c9:e1:b1:
ae:b5:2e:ed:ef:85:73:41:92:a6:d7:e1:3f:c9:15:
6a:b0:6c:97:00:37:e2:48:3f:2d:72:74:4b:8c:55:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:37:10:70:21:3D:9F:E4:E6:EB:59:6E:88:02:6D:C6:8F:05:72
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:de:0a:67:c4:73:86:c0:a3:ba:b0:af:50:00:02:83:02:a4:
f0:b3:dd:5b:c3:b3:44:33:ea:b7:b9:26:ef:a0:48:9c:5d:d6:
0c:9c:47:32:67:a1:ad:b8:1d:48:ec:29:9d:79:fb:57:c9:17:
22:d0:ef:7d:5f:8b:62:0a:24:bc:89:51:12:29:b2:43:e6:f9:
ca:e9:4d:6b:07:11:5a:d1:e0:50:f8:b0:dc:a4:06:b3:9b:e0:
f4:77:61:70:4b:b4:bb:62:dd:bc:50:82:4a:a0:31:a2:36:d7:
9b:cc:b1:45:4f:78:73:a0:c0:0a:c8:4d:aa:d9:ba:fd:64:a8:
31:b4:17:dd:a3:6f:ba:5f:a2:4d:8a:b5:09:93:0e:13:0c:06:
e3:72:e6:22:ff:b9:94:ce:3a:fc:9a:0c:db:c1:ad:4d:ea:d0:
0c:b4:f9:e4:d5:d2:32:c7:49:dc:08:a5:d9:b8:5b:e6:a2:2a:
9e:db:99:73:e2:47:d0:ee:6c:58:b2:fa:6a:dc:77:5c:e6:7b:
53:8c:a4:22:9b:7c:3a:c2:46:0e:05:31:a5:d8:d4:9f:0e:39:
49:f0:ee:e7:cc:c8:7e:d5:7c:12:5e:7d:a4:92:db:95:cb:e4:
6e:32:15:e9:17:56:1e:c6:bf:02:b4:9c:ca:47:c9:4e:69:c0:
8f:ab:02:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDjK8uronB3h1qlkViNk+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi
Yzk5OTEwHhcNMjUwODA3MDgwMTMxWhcNMjUwODA4MDgwMTMxWjAzMTEwLwYDVQQD
Eyg0MmIwMzcxMDcwMjEzZDlmZTRlNmViNTk2ZTg4MDI2ZGM2OGYwNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hP6Wyn/1THqUy/ZUoIMTBLIIyZ1
0aXS1ytetXgREmwf/sJyaCW0tiZacLaIBk/bnCt4ZXPeHG1MhbkqQzNb88C8Ej6P
4Z/h1tRCCWZ3KY3zdANapCkEl4kAdyQZH2NT4NCvWWb9pSt1lxMdwNUZ8JwfkQIm
nh010y/Ati1uMu67mSg47VCCOBVaRGJEd/7trGo6jPnScGTHue53IpHrhssLUEfy
+B2Xq53dQH6px0LXjHvTelyp+nmjB8gn93xt7s5HwJbo+QUGfZGWwpQhEog98jQh
eD42JSFgL5vJ4bGutS7t74VzQZKm1+E/yRVqsGyXADfiSD8tcnRLjFWvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKwNxBwIT2f5ObrWW6IAm3GjwVyMB8GA1UdIwQY
MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt
ZTNhYjkwODdkNDAzLzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz
LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbN4KZ8Rz
hsCjurCvUAACgwKk8LPdW8OzRDPqt7km76BInF3WDJxHMmehrbgdSOwpnXn7V8kX
ItDvfV+LYgokvIlREimyQ+b5yulNawcRWtHgUPiw3KQGs5vg9HdhcEu0u2LdvFCC
SqAxojbXm8yxRU94c6DACshNqtm6/WSoMbQX3aNvul+iTYq1CZMOEwwG43LmIv+5
lM46/JoM28GtTerQDLT55NXSMsdJ3Ail2bhb5qIqntuZc+JH0O5sWLL6atx3XOZ7
U4ykIpt8OsJGDgUxpdjUnw45SfDu58zIftV8El59pJLblcvkbjIV6RdWHsa/ArSc
ykfJTmnAj6sCWw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:47 2025 by rpki-client