Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: E20Y4n91eunyuBaWWcwDxtdZyEfdJpr8P4WaNZy72/Q=
Subject key identifier: AF:3D:FA:24:50:CC:4B:8E:62:70:E0:35:C8:58:50:ED:04:DD:D5:6B
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019A4D744CD07EBE37CD18F68193996E9A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:58 +0000
Manifest this update: Tue 04 Nov 2025 06:00:58 +0000
Manifest next update: Wed 05 Nov 2025 06:00:58 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: I1OIxgitW/aPG9LAKzDbL4QX6RUgUgNID9i4mp7umN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4c:d0:7e:be:37:cd:18:f6:81:93:99:6e:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Nov 4 06:00:58 2025 GMT
Not After : Nov 5 06:00:58 2025 GMT
Subject: CN=af3dfa2450cc4b8e6270e035c85850ed04ddd56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:25:24:27:5f:90:12:65:cb:47:ff:85:86:
3e:c8:33:28:1c:64:d0:90:ba:3e:7e:31:0c:76:09:
33:28:c4:8f:67:8e:c3:1c:2c:00:f2:be:be:81:de:
7f:a5:29:95:4c:12:0a:7d:02:c5:15:69:d9:13:f1:
a1:69:37:3d:04:5b:2d:d3:e4:1f:3b:f9:3f:36:bb:
14:fb:fe:9b:a3:a8:d1:50:68:a1:c1:5e:a6:28:40:
f8:2c:6b:5a:16:be:68:31:ce:dd:a8:0f:26:71:8c:
86:5e:5a:9b:e2:de:f3:d6:8e:8c:02:3d:9e:a0:e8:
83:d1:76:89:d7:ef:7e:1c:fd:20:70:67:39:2d:5e:
bd:b5:36:cb:e9:3e:4d:3e:f3:14:9c:3c:b9:81:44:
2f:9c:14:77:c8:37:e2:50:cc:fa:09:07:ea:7d:96:
24:5e:7a:c1:e4:04:1e:7f:69:af:6a:f8:29:bf:f2:
7f:e3:40:c7:b7:ff:49:3d:64:33:41:bb:86:38:9f:
19:af:2c:2e:65:fc:07:37:ed:00:69:2d:58:85:ae:
22:09:29:02:09:f9:91:dc:a9:3c:43:c2:4a:bc:bf:
88:5d:00:81:cc:fd:d1:6f:73:52:8b:c6:55:8c:14:
c1:1f:ba:3a:4f:be:14:80:ef:47:75:15:cf:e0:9c:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3D:FA:24:50:CC:4B:8E:62:70:E0:35:C8:58:50:ED:04:DD:D5:6B
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:83:7a:84:05:f1:75:2f:08:32:15:53:51:0b:e3:1b:52:7c:
b9:e8:f9:33:8f:c6:d1:9a:8f:4b:8c:3a:ac:92:0d:3c:b4:a9:
a3:5c:b0:3c:a1:6d:fa:74:71:57:2e:98:70:3b:7b:ec:ba:b8:
61:35:0d:e1:3b:69:ad:41:f9:04:7a:c6:70:0a:d9:90:3a:42:
99:fb:9a:15:d4:d5:e7:13:1a:aa:33:fc:41:b8:63:4e:a9:4e:
66:80:a5:34:45:34:63:b6:b1:79:e4:09:02:66:71:47:bf:dd:
32:c0:bf:eb:f5:a3:02:91:4b:8f:b1:37:ef:07:34:ad:1f:f8:
65:1a:70:cb:59:75:3c:c5:d5:9c:b7:7e:b5:2d:a7:9a:10:1e:
0c:94:23:41:ab:eb:d2:f3:a1:db:23:4f:d2:06:f7:2c:24:e8:
dd:8d:dd:df:4a:8a:0d:58:e7:52:d3:af:6b:8a:7c:a4:8f:e8:
5f:47:b0:95:a2:5c:39:33:01:41:ba:f1:a8:cd:c9:08:6f:54:
1c:37:ae:32:fe:eb:af:f2:f9:04:a8:60:f6:80:73:e9:82:22:
ea:f6:ec:00:bb:13:dc:73:2c:10:2b:94:a1:c3:40:f7:1a:f9:
af:52:49:87:8c:b8:e3:cd:bf:2a:28:54:c1:82:e7:03:54:ea:
a9:04:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:38 2025 by rpki-client