Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: 7xW9TdTacu/eXbOebbSPmvyKRR16wsJ2d4AYY6f5b5U=
Subject key identifier: 1D:AE:5D:9A:02:36:B0:37:1B:14:DF:58:E1:0A:E0:A6:72:B4:8E:33
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019A4E4F78B4402C57B20EDB5D14E6EE86D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1720
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: oe9I1azxPZE1LdbYjP32L5tShCIG/rG9TYvuYp+VHOA=)
3: wo81X6dNJnxHwqDCPslyPelPnyk.roa (hash: LNeGgskvgHmXiZQlDf/OPt0CW7kE7h3hGkIagvdPCcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:78:b4:40:2c:57:b2:0e:db:5d:14:e6:ee:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=1dae5d9a0236b0371b14df58e10ae0a672b48e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:89:2c:bb:f0:15:0e:45:2a:ff:7f:8c:4d:
98:12:72:2f:93:20:aa:d8:2b:ea:c1:2c:4c:4f:24:
c7:b1:47:89:41:51:2d:f8:dc:0d:8f:79:78:a3:34:
b6:d3:11:d1:1e:b0:4b:8f:51:f7:71:e2:8c:0a:4a:
9d:a3:a4:9a:19:37:03:48:41:13:2d:3b:05:d6:60:
b1:b1:ec:72:bc:ea:de:7b:23:0c:89:b3:bd:08:44:
87:56:74:7d:44:c3:3a:c3:d0:1a:68:45:f9:27:b4:
fa:3f:53:df:ac:15:74:f4:c7:87:ce:2a:6c:13:22:
cf:7d:db:e9:7a:c4:65:f5:8f:7e:4e:ab:e7:65:7d:
82:67:91:9e:4e:78:54:0d:8b:10:92:89:54:64:69:
b9:f9:d1:4b:ab:7b:e9:c1:52:2e:1e:ca:b7:3e:57:
df:85:aa:50:6a:12:be:00:63:d0:50:cb:c9:07:dc:
10:50:88:c3:19:3b:c0:56:f5:14:14:9a:25:47:5f:
0e:6e:ce:99:2e:6c:24:a7:f2:39:a1:97:1b:d4:31:
64:94:1b:70:2f:80:a9:c1:d7:78:43:bb:7f:53:cf:
27:7f:f2:fd:97:57:67:4c:1e:fb:72:fa:b1:2c:c5:
80:1e:26:23:da:92:ee:c4:18:20:ed:5e:98:b4:2a:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:5D:9A:02:36:B0:37:1B:14:DF:58:E1:0A:E0:A6:72:B4:8E:33
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8d:b0:ea:0c:6e:f3:24:b3:dc:a3:b4:4d:64:81:85:d6:4b:
4e:5f:82:f7:df:d8:35:92:5c:c9:3d:8f:33:77:bb:bd:33:98:
2e:5c:7d:aa:dc:2e:b7:ce:aa:90:37:ec:c7:b7:19:3e:88:ce:
60:12:cb:2f:b9:79:e8:5f:95:a9:3c:42:c0:e1:68:d9:4d:80:
bc:35:9c:b9:c9:8b:a2:ae:f4:45:a0:c2:65:8e:a3:be:4d:2a:
34:d7:6e:de:f3:53:75:07:08:33:e7:77:82:46:4b:0e:d4:30:
00:4e:f4:6c:41:ca:45:12:b6:c7:5d:94:b6:ee:e7:08:6f:99:
24:38:f1:ef:a3:dd:a5:db:e8:48:f8:0d:cf:82:18:70:9c:6e:
5e:3d:24:0d:86:a0:e7:5b:a2:9f:1b:3d:89:f5:49:06:01:56:
68:65:22:ac:4e:a9:41:6a:54:df:47:b8:02:26:a0:36:a2:d9:
36:3a:4f:d1:ff:a5:ec:06:86:e5:66:05:b5:80:79:e2:05:73:
d6:b0:bf:d0:31:7c:8d:2d:e1:a3:aa:c7:40:1c:42:5c:fe:62:
05:dc:d2:b9:a0:3d:94:0b:c0:65:df:e3:e2:c8:a0:b3:88:53:
b9:3c:17:bb:e1:06:39:57:bb:56:fd:58:67:49:67:5d:a2:40:
f7:8a:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:25 2025 by rpki-client