Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: E86zP3LwucIcdcm9RXR1k3KYxBzhciOwefs+RQUGnaM=
Subject key identifier: 45:1E:F6:FE:90:06:83:35:EF:82:F5:2E:A4:A7:9A:69:A1:C4:8A:F5
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019A50747ECA6FAA73DAEE1D2DDEE2C74E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:03 +0000
Manifest this update: Tue 04 Nov 2025 20:00:03 +0000
Manifest next update: Wed 05 Nov 2025 20:00:03 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: gouUyQ7jDLxniRY3JspKjB8tx6H2ECLRBJgzy2t8Pv4=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:7e:ca:6f:aa:73:da:ee:1d:2d:de:e2:c7:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Nov 4 20:00:03 2025 GMT
Not After : Nov 5 20:00:03 2025 GMT
Subject: CN=451ef6fe90068335ef82f52ea4a79a69a1c48af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:21:02:c5:f9:84:d7:3b:82:2e:77:dd:4e:
df:9b:33:b4:1b:b6:08:d1:00:24:53:3e:77:58:82:
7a:30:29:9e:09:d4:72:20:4f:b8:80:b9:e7:e9:ac:
59:51:f6:c6:78:92:92:c4:6e:25:92:48:fe:a5:a2:
f3:7e:97:8b:ee:95:c6:c7:b6:f9:b9:12:ee:db:cb:
c5:2b:49:db:a1:ef:0f:59:6c:d9:15:0e:3d:e0:7a:
7b:22:2f:82:da:a7:d5:37:5f:23:ad:2e:5f:37:85:
04:6c:84:42:0f:45:6d:6d:0b:30:25:c6:e6:be:34:
c5:a3:c2:57:e2:ad:34:75:b6:6e:e5:a0:d7:f6:e7:
c1:5a:53:74:51:5d:27:8b:2e:14:a1:98:3b:f0:d5:
ef:43:40:26:7b:19:9b:9e:3b:80:76:6d:12:cf:d0:
e1:6c:98:3e:53:e6:b9:23:45:b0:31:c2:75:d8:42:
a3:a7:c3:25:76:81:7d:b5:88:30:cc:4a:4e:71:00:
43:70:04:fb:7e:48:e2:4e:b0:22:8e:4c:79:ed:10:
04:71:0a:a6:4c:cb:2f:2c:b6:73:90:0d:7b:1b:ce:
b1:d0:96:71:1b:16:66:9c:8c:ac:d6:46:01:7a:5f:
9f:c0:8b:d5:8e:c7:51:02:e7:96:c7:61:b2:e7:b1:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1E:F6:FE:90:06:83:35:EF:82:F5:2E:A4:A7:9A:69:A1:C4:8A:F5
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:45:14:9c:f3:13:ea:ac:e1:8b:92:ed:86:1e:87:71:2c:36:
2b:6c:01:23:27:bf:c5:a8:02:de:a7:73:26:fe:78:7f:40:c2:
c7:0a:3d:6e:1c:ec:7e:96:3f:07:57:ad:51:05:ad:2e:2e:a7:
3e:76:e1:f0:56:0c:15:75:f1:df:f2:e1:15:e0:18:64:b8:81:
da:73:4c:d8:26:a2:3d:7d:4b:c9:a2:16:8e:f1:09:a8:cd:d4:
b7:33:04:73:7b:e3:80:52:73:92:56:f4:94:2f:f5:54:53:b7:
4a:18:53:a0:07:ed:23:0c:20:17:c5:b8:8f:79:48:cd:dd:d7:
5c:b6:e8:c5:19:f3:cb:19:50:19:8a:4f:5a:46:96:cf:41:90:
b3:21:a0:e1:10:c1:85:4a:c5:cd:ec:0f:5b:69:a7:aa:ac:2d:
fa:e2:5a:fb:ba:4d:3e:a4:ec:cb:40:c6:1e:e7:f1:d7:49:48:
6c:8d:40:8d:b6:02:38:a0:f4:28:97:64:33:db:d8:b1:d2:1e:
a1:7c:da:f5:f5:7f:33:1a:0e:92:38:da:10:d6:d1:aa:84:ed:
35:02:66:1f:07:da:85:b7:9c:2e:5a:0b:7d:75:9d:db:22:0b:
08:91:65:07:10:75:53:60:9e:88:18:ad:a1:cb:34:86:34:d8:
97:9e:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:55:08 2025 by rpki-client