Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: zzM8UNmBHvypGWA+5n/FVZ5BjELzJele/fYaijX/3zw=
Subject key identifier: CF:3F:C3:F9:D6:03:57:28:D8:F2:14:38:C5:A1:DE:B1:3B:A9:B7:AA
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019A4D05DF9D6CFE38B56D4B97C8B32A7B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 032F
Signing time: Tue 04 Nov 2025 04:00:21 +0000
Manifest this update: Tue 04 Nov 2025 04:00:21 +0000
Manifest next update: Wed 05 Nov 2025 04:00:21 +0000
Files and hashes: 1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: 08BpO/RSyL0wEY6lrtkTjAu6srVNQU5SIqhKEh87sik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:df:9d:6c:fe:38:b5:6d:4b:97:c8:b3:2a:7b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Nov 4 04:00:21 2025 GMT
Not After : Nov 5 04:00:21 2025 GMT
Subject: CN=cf3fc3f9d6035728d8f21438c5a1deb13ba9b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:84:45:f7:93:a0:8a:be:a4:de:9e:17:82:
ef:4f:c5:1b:5e:98:35:ea:30:f2:d8:e7:b9:bf:e7:
ec:02:4b:4d:f5:23:c1:52:61:50:36:c5:6a:92:be:
60:a5:3a:f5:92:ac:de:3b:ba:c7:3c:31:ba:1c:56:
5d:f2:95:2c:48:4d:bb:39:b8:b7:4e:d7:f7:cc:b1:
d5:40:f1:ca:01:e4:f1:34:55:1f:c7:9b:94:31:05:
e1:cb:b9:04:e2:92:2b:64:81:32:b4:d8:e5:1f:b3:
13:43:8e:7e:3f:34:3f:b0:27:69:ef:c7:3a:b4:5f:
c1:88:d8:1e:14:21:42:b6:38:8c:2e:d8:39:f4:9c:
40:9a:f5:ed:c0:0d:c4:60:70:aa:99:a5:8a:9f:61:
94:5f:16:7b:37:39:90:5a:40:97:e2:8a:fa:b5:0e:
0b:9f:dc:64:3d:4e:ec:e4:f5:1c:05:5d:6f:c4:05:
17:6e:bb:21:5c:22:61:fd:d6:2e:8a:63:5b:2b:6f:
49:71:c7:f0:69:38:ab:78:4d:8b:c0:61:8b:25:8a:
1d:fc:41:a7:57:45:96:4e:01:01:41:99:cc:fb:d5:
97:65:7b:6c:b8:7d:e3:eb:57:58:70:0f:1e:d9:87:
7f:9a:3c:59:e2:38:db:1f:35:0c:2c:1b:42:1d:2f:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:C3:F9:D6:03:57:28:D8:F2:14:38:C5:A1:DE:B1:3B:A9:B7:AA
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:94:04:2d:cc:9e:c1:74:f2:0b:c3:29:ed:37:95:a6:9c:
a2:d5:ed:94:e9:b2:63:b8:b9:4a:9a:7e:06:c5:26:b9:1b:41:
77:26:23:90:dc:28:80:aa:6e:dd:8f:0a:94:0c:af:1a:41:b4:
45:11:09:2a:ca:4a:d9:0a:93:39:ba:4f:e2:85:d6:d0:35:c4:
b0:c7:5f:d3:8a:7d:dc:a6:48:dc:6c:2c:19:e7:ef:56:de:38:
69:d5:7c:bf:13:20:ea:bd:fc:df:fa:7b:f7:49:98:7e:9a:ab:
d2:a8:e3:d0:21:c8:73:0d:8f:c2:69:0d:35:a2:89:4d:98:0e:
e8:2f:9a:c8:f8:4b:7f:cb:c1:f6:b2:99:11:00:93:5d:70:b3:
27:26:a8:1f:27:64:5e:95:d4:9d:50:ef:01:63:0f:30:c6:82:
cd:4a:42:38:ba:4f:39:b0:7f:9f:45:fb:f4:00:90:4b:e1:37:
26:33:73:cf:93:25:23:07:36:70:77:fa:17:ad:54:b0:45:d3:
ae:83:f1:9f:97:2f:76:98:8e:ee:a9:14:6b:f6:ee:28:e0:b4:
0b:02:ea:2f:de:d2:61:92:e6:66:f3:e5:d7:6f:86:ef:04:e9:
0c:bd:50:d4:b1:d9:a5:cc:87:fb:4e:6c:57:35:ff:4e:27:c3:
2b:b8:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:35 2025 by rpki-client