
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier: eCMqhRA2bMYHK026U5DRi9A8Wmn/4nVC6NZG3ntDpPY=
Subject key identifier: 61:70:88:0F:2A:BF:B5:B2:E5:B8:CF:DA:B9:FB:D9:F0:AA:AF:3D:83
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 0199FAA0CFA326E359A869365685571CEF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 04:01:06 +0000
Manifest this update: Sun 19 Oct 2025 04:01:06 +0000
Manifest next update: Mon 20 Oct 2025 04:01:06 +0000
Files and hashes: 1: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (hash: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=)
2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=)
3: QRtKZhH9f2q5Qs4y3jok3HnjFK0.roa (hash: kTYNUIGwJLwA+YttUf3vVXejkVq8FL+41G3GFzyW8/w=)
4: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=)
5: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (hash: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=)
6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: z4jmHWrI4aV11uPqck6ksPaP6kdidtwJ7Y9EjJtcEsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:cf:a3:26:e3:59:a8:69:36:56:85:57:1c:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Oct 19 04:01:06 2025 GMT
Not After : Oct 20 04:01:06 2025 GMT
Subject: CN=6170880f2abfb5b2e5b8cfdab9fbd9f0aaaf3d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:1a:4b:0c:08:18:87:99:29:5b:da:6d:c4:
a2:d3:60:93:1b:82:b6:c1:42:5e:7f:68:1a:ce:69:
ff:f5:f6:ef:2b:95:8e:ee:02:88:15:ac:47:24:5e:
39:69:57:49:6f:66:08:9a:68:08:e5:a2:04:c8:ec:
97:52:24:03:5a:00:72:87:fa:d8:64:5d:04:4d:61:
17:30:40:3e:49:c4:62:8d:9e:aa:d8:53:0b:3c:53:
a9:4f:f1:9d:a4:b6:77:be:f6:fd:7e:cb:18:17:b9:
91:c0:4a:54:92:44:24:ff:3b:fc:10:5c:35:65:b3:
88:8c:2a:77:ad:3f:b9:78:46:d1:da:14:a9:4e:9e:
57:c5:4c:51:d4:ff:39:21:47:63:d3:ea:52:43:22:
e7:64:92:bd:a7:88:94:5a:ba:a1:38:4c:64:c4:3d:
ff:0c:53:7a:5b:06:52:c1:4f:2b:a9:43:0f:25:92:
e4:fd:9b:3b:69:20:50:65:8c:70:d9:3e:51:bc:e3:
be:49:6e:ab:d3:75:b2:62:30:2c:6f:a6:83:78:1c:
0d:5e:17:a3:00:cd:97:90:0a:af:52:f1:71:21:ff:
e0:2a:fe:e2:e3:7f:83:53:e7:f2:d6:fd:80:18:54:
55:90:a9:89:91:0e:f9:03:a5:85:2a:ae:38:a6:db:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:88:0F:2A:BF:B5:B2:E5:B8:CF:DA:B9:FB:D9:F0:AA:AF:3D:83
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ea:c9:70:6a:49:85:a8:f4:96:c9:f6:b5:89:41:f1:88:2a:
b3:e5:15:ec:25:a2:9b:3d:6b:3d:20:82:f8:08:0c:1d:20:96:
5e:3c:0b:a6:c4:1f:b8:b3:1d:b5:e4:5b:80:93:8e:6c:35:3b:
a6:32:c3:68:0d:32:07:32:61:44:79:65:c6:cc:b6:63:7e:e0:
b7:8d:66:bc:b9:af:53:d4:df:17:ee:47:c3:34:67:37:09:7d:
9c:67:95:6f:3b:08:97:e7:d9:9f:d9:af:d2:3a:dc:34:b5:04:
0a:90:ed:89:f4:f1:70:63:14:1b:90:81:af:6a:82:a8:24:80:
54:b3:56:f6:a2:da:2b:65:64:c8:ee:c0:27:0b:57:90:6e:13:
29:3d:1e:b7:47:94:20:b8:a6:9e:12:df:29:fe:c5:1a:8c:bd:
2e:c4:fc:3c:6d:43:34:50:45:f8:67:67:55:59:d6:15:89:51:
1b:8f:ec:29:3a:61:a2:38:0d:db:62:7a:e5:b7:c1:fc:db:11:
6b:e8:e9:3f:60:4c:60:09:27:96:92:8f:a9:69:09:f3:c6:c7:
76:bc:54:8f:34:51:87:04:78:ab:bf:5e:f3:d5:3f:28:be:bb:
75:9b:aa:d1:0c:9d:dd:10:90:cb:56:bc:4a:0b:51:fd:82:e0:
30:e0:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:42 2025 by rpki-client