
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: rCWpxHYgQI5EonT1naTEG0L8KTfoKrN5/YciLf0daOQ=
Subject key identifier: 90:52:65:66:29:57:4F:2A:35:34:8A:C9:1B:CC:55:78:FF:5A:11:9F
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 0199FC219357B5329EC8EB4212D5B5156566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 080F
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: Sr0e3F3ItrfzKEeXyhqh4piHNBSdPkskHYq/W4tW3js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:93:57:b5:32:9e:c8:eb:42:12:d5:b5:15:65:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=9052656629574f2a35348ac91bcc5578ff5a119f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:80:05:e2:ad:45:07:5a:ba:5c:ea:89:f4:
8d:2c:11:0a:08:b2:d4:43:1d:3a:9b:12:33:70:c9:
f6:e9:15:f4:a7:35:00:9b:54:7b:22:d7:40:73:08:
cb:49:ed:b2:70:5d:20:05:26:a1:01:06:ec:a2:1a:
67:a5:55:e5:e1:03:b7:5c:6b:43:9d:08:2b:82:a8:
34:db:bc:81:cc:cd:a4:15:07:80:05:13:70:30:4d:
e9:b3:30:fc:a9:af:2e:f5:5a:93:f7:a4:a5:95:b0:
df:2e:c5:6c:b1:d4:af:5c:3c:3a:cb:4c:b6:bc:17:
3a:7f:db:d8:f2:0e:72:5f:e1:55:21:3b:70:93:5d:
d0:99:51:a9:e4:14:de:0c:49:12:6d:41:62:18:b6:
63:f3:11:4a:bf:57:88:b2:22:90:3e:28:c6:f0:99:
e1:51:66:98:79:2a:01:3e:b7:59:f4:ea:11:2a:e3:
28:37:5e:f3:45:d1:47:2d:60:62:5b:e8:12:4a:b8:
51:88:57:76:4d:cc:36:ee:26:cc:ef:12:58:37:f0:
f2:ab:f0:32:ed:f8:1f:c8:bc:b1:b8:83:f5:5d:36:
78:40:5e:21:05:a6:45:26:d6:0d:48:1e:0b:22:54:
f2:50:b4:75:ed:b2:f4:e9:8e:be:15:18:ae:01:84:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:65:66:29:57:4F:2A:35:34:8A:C9:1B:CC:55:78:FF:5A:11:9F
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1c:cd:a1:d9:85:1a:77:18:f2:66:1d:6b:b1:fb:a1:ae:16:
f4:39:07:d8:13:22:05:cf:6f:5e:8d:a3:53:fb:13:fb:45:05:
3f:b9:0d:5b:22:db:95:7e:6e:da:e1:5e:c1:a2:17:16:4e:70:
5d:bd:e5:a6:f9:33:22:a3:33:38:d1:14:fc:61:f4:15:db:1c:
6c:fe:15:1e:c3:49:d9:76:f3:d9:43:f0:0e:68:f2:66:a6:3e:
20:73:67:da:55:6a:0e:92:82:d9:a1:c8:7d:68:1b:c9:99:33:
e3:a9:55:71:8d:e7:5f:40:d5:63:9e:5e:e1:e7:33:c5:b9:b5:
f9:0f:c1:ce:f0:b8:f2:a3:cd:57:be:60:5e:d3:24:8a:56:32:
80:b8:92:3f:32:cb:18:07:85:2b:8b:a7:b7:5b:ee:2f:91:29:
92:78:6a:de:2d:0b:e5:e7:16:ea:c3:1f:b5:57:ed:01:7b:a9:
75:f3:74:0a:f0:b9:95:00:98:fd:20:a2:fe:ab:75:9f:44:76:
42:3d:46:a2:f5:f4:1a:6b:8a:2c:12:cb:3f:40:fa:d8:6f:67:
9e:6a:26:d1:62:d5:5a:42:0a:97:e5:a9:03:92:b0:a6:27:d3:
6d:76:ac:a2:18:b3:ca:20:62:fd:81:d0:7a:48:0f:ba:a8:aa:
f6:6a:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:25 2025 by rpki-client