Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json)
Hash identifier: U1jN+BeQ5Z7QrQkTdd/rf+Gbr1peoJJiHir05PD0MCo=
Subject key identifier: C6:19:34:BA:87:4E:F9:40:24:30:9D:04:96:36:2A:33:31:4D:E3:66
Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a
Certificate serial: 019A503DB584B70EA65798ECABFE17A0E746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 19:00:12 +0000
Manifest this update: Tue 04 Nov 2025 19:00:12 +0000
Manifest next update: Wed 05 Nov 2025 19:00:12 +0000
Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: s1TzPSfEIosIUN8TbkqAeMS/LO/psgQFxqZ+mb/UFMQ=)
2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:b5:84:b7:0e:a6:57:98:ec:ab:fe:17:a0:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319b679c14681089f2d07786df04f779d741c11a
Validity
Not Before: Nov 4 19:00:12 2025 GMT
Not After : Nov 5 19:00:12 2025 GMT
Subject: CN=c61934ba874ef94024309d0496362a33314de366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:65:6b:48:c7:1f:50:0f:2c:92:d1:16:bb:
c3:59:02:e4:58:14:29:8e:ae:ea:59:dd:33:d4:92:
a1:6a:46:fa:da:7f:f7:43:ea:d8:c4:ca:f3:a2:bc:
6a:ab:26:82:01:20:1a:a2:73:c0:21:15:95:fa:df:
64:7e:b8:ac:88:41:13:de:f6:b1:f3:80:02:ef:b9:
af:01:93:f3:bb:db:43:6b:ce:5a:ea:55:4d:12:14:
55:46:30:86:f6:91:5a:17:71:96:19:23:85:17:3e:
b8:ae:3f:8b:18:15:38:65:9e:86:09:4b:25:c0:01:
f2:9a:e8:0d:e9:2f:5a:41:4b:c5:df:79:e8:2e:f3:
3f:13:15:53:f2:5d:c4:a1:38:f3:69:3a:6b:6f:da:
5d:a5:16:83:32:26:af:f4:f0:30:a2:c5:99:d8:b8:
7b:57:ee:40:2f:7d:31:ab:a3:41:9a:71:df:22:48:
a4:0f:69:84:b7:c4:c1:c2:3e:3e:c1:93:de:13:f0:
a6:c1:43:0b:59:cb:ab:d3:6d:d7:fd:ec:ad:21:e9:
6f:35:f9:d1:50:4b:ba:ec:c0:22:1d:5f:2b:d8:d5:
b0:c1:d6:f8:94:55:63:3a:01:24:a0:4e:c9:e6:3a:
d0:85:b9:9d:8d:6e:b0:3e:59:f8:b3:81:fd:1b:f8:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:34:BA:87:4E:F9:40:24:30:9D:04:96:36:2A:33:31:4D:E3:66
X509v3 Authority Key Identifier:
keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8e:a0:03:19:4a:bb:98:11:c0:e6:4d:53:06:74:8d:0a:f1:
fc:e8:8b:b7:f4:86:d0:4d:24:6b:ba:a6:e8:47:d6:6f:95:79:
6c:a2:2d:0c:c6:dd:be:cc:54:d6:c3:3f:8e:7c:1b:9a:10:70:
aa:25:19:b3:e5:59:7f:ce:bd:fe:db:ff:3e:ae:e0:45:6c:fd:
e9:cc:60:ea:c0:7d:b6:13:65:6d:2b:0b:7c:30:81:a2:0c:24:
ea:fd:26:9f:e4:4e:e5:e5:15:b8:f0:e1:db:bc:93:eb:3a:bb:
90:f8:c5:a7:57:e1:88:08:97:63:c3:84:b0:04:47:f5:cf:d0:
75:a3:08:df:8b:a0:f4:4d:34:55:8d:fb:ff:81:02:ec:e9:70:
5d:25:d6:1a:15:a2:9f:d8:a6:e2:15:bb:b9:7d:55:04:20:26:
1d:d3:d5:33:a1:19:28:9d:a9:20:82:3f:0a:44:fe:f0:39:67:
2d:9a:38:a3:69:fe:3a:4b:c9:6c:71:e1:92:1e:21:f6:f9:11:
05:6c:ea:ba:f0:0d:a6:0f:aa:54:18:a9:9c:c3:06:a3:42:05:
af:17:16:7c:8e:4b:82:0b:24:3e:46:20:68:13:d1:76:58:8a:
9d:82:37:b2:be:57:f9:5d:3e:e7:0f:03:55:b6:70:c5:67:31:
4c:fc:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:19 2025 by rpki-client