Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: 4fm8D4rlPJLlr5vOpqj2gym1YqzNRg2anuaraJ/tlOw=
Subject key identifier: CD:8B:6B:77:35:8A:5F:FE:6E:65:21:00:63:A2:2B:6E:42:39:9A:CD
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 0199FBEB968E03F5D287BFE1711B5C053FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 02F5
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: nyBIocxBD5DFfQr68QG0N3plYoG+vMlOSbAIV9f7IOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:96:8e:03:f5:d2:87:bf:e1:71:1b:5c:05:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=cd8b6b77358a5ffe6e65210063a22b6e42399acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:76:e1:de:81:aa:b7:cf:cd:bc:c6:2c:26:
fa:fc:ad:16:9a:b7:ff:43:c6:b3:05:18:9e:a5:02:
6a:c1:dd:36:a9:24:a2:d2:48:94:f0:2f:67:b0:fb:
98:da:a9:3a:c9:a3:e6:8a:66:a3:62:10:bc:e6:19:
8b:77:7f:07:9d:27:20:86:47:62:e8:39:8d:60:12:
27:0d:d9:5c:fa:0b:de:6d:8e:23:32:7d:3a:67:38:
d6:bd:71:19:81:e2:2a:2a:47:63:4a:f9:29:77:92:
63:a2:c2:b2:85:68:06:20:6a:9a:aa:11:15:7f:63:
38:e7:d1:62:70:e2:aa:00:3a:8e:2a:40:ed:dd:f0:
9a:07:80:b6:01:8c:60:9f:ce:61:8f:15:b4:d0:98:
17:e7:e7:f4:85:c3:8b:5d:9f:da:63:cb:76:19:d7:
c0:3d:2f:2f:2e:1e:cd:fb:cc:1d:be:b2:43:c0:37:
f4:c1:1a:45:ba:93:f3:f1:50:93:ba:66:ba:53:7a:
0f:fe:db:9a:97:26:52:1d:f2:71:40:4b:3e:5f:4f:
84:5a:41:6c:26:db:68:f2:ea:6c:9a:38:7a:15:1f:
d6:14:b1:d3:5c:25:de:4b:b8:e8:0c:3f:7b:5a:80:
54:ba:53:05:b5:21:f4:ba:a4:04:68:74:42:aa:fe:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8B:6B:77:35:8A:5F:FE:6E:65:21:00:63:A2:2B:6E:42:39:9A:CD
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:97:43:ff:c5:09:b5:86:13:18:6a:8a:c3:38:8d:69:1c:78:
42:d4:2d:81:1a:63:93:3d:7c:9c:4b:11:22:a4:c8:d7:f3:85:
23:10:fb:35:a3:ef:f7:0d:31:eb:0f:6b:94:0d:82:99:9a:ef:
ce:5c:49:ff:dd:31:cb:8e:da:af:d5:cb:df:34:34:74:ba:b6:
8a:83:61:d5:8d:8f:7d:af:68:64:8c:5e:68:ef:cc:8e:1c:46:
5c:83:07:d6:69:3e:03:1f:ee:c7:6b:90:6a:4d:48:2d:43:4a:
c2:62:e7:f7:b6:55:ca:75:a0:26:90:5a:15:1e:55:4b:06:41:
98:c0:79:dc:3a:ac:46:e9:1b:ce:58:b8:d7:9b:03:ff:51:f8:
52:27:f1:8a:12:20:cc:94:11:1a:c8:d6:6a:8b:41:16:b4:68:
ad:78:69:1c:d8:c3:49:49:18:f5:93:62:2c:00:2d:96:38:da:
a9:ff:24:c8:ba:aa:5d:d3:47:f6:7a:a0:92:34:1a:62:45:15:
a3:21:4e:59:2c:22:56:59:11:e8:d7:0d:d0:5b:af:7c:95:da:
d0:51:50:9d:fd:e7:f9:eb:59:34:73:20:93:ce:c7:be:08:a3:
11:9c:c2:de:47:65:5d:09:38:13:87:e5:d3:0b:7d:3c:f1:a9:
48:5b:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:14 2025 by rpki-client