Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: 6NmDpxDe8MHw0ruqISfu5W2+kqJznbf5jN599T6s9do=
Subject key identifier: F3:25:D9:A3:86:A9:9C:BA:4B:5F:63:FB:9B:51:19:61:33:0F:89:EC
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 0199FFC7246E48F29A7F3C3B7DA7128FADBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: F7
Signing time: Mon 20 Oct 2025 04:01:04 +0000
Manifest this update: Mon 20 Oct 2025 04:01:04 +0000
Manifest next update: Tue 21 Oct 2025 04:01:04 +0000
Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: GiB41iNx92ABi9owAIR/YR4IJcIRuLLlmOGUSFFmSDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:24:6e:48:f2:9a:7f:3c:3b:7d:a7:12:8f:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Oct 20 04:01:04 2025 GMT
Not After : Oct 21 04:01:04 2025 GMT
Subject: CN=f325d9a386a99cba4b5f63fb9b511961330f89ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:6b:a5:75:6f:e0:7c:f8:dd:e3:b0:41:7d:
54:74:e8:72:b9:72:34:90:3a:19:21:53:6c:35:e3:
9d:6c:90:06:62:0b:f4:d3:ed:f1:91:f1:b4:cc:d3:
d6:2c:05:9d:98:89:6f:1e:91:cf:09:70:87:44:39:
db:c3:bf:60:16:e8:27:9e:f4:75:3a:11:cd:ea:dd:
3d:01:55:48:7a:ee:bf:81:c6:76:7a:a9:2d:21:2d:
db:46:f4:c8:53:2e:65:9b:bb:fd:14:4c:13:1e:a3:
a8:58:fd:86:0a:24:aa:7e:05:2f:93:f9:3f:4a:fe:
99:c0:cb:48:1a:3e:f6:77:98:f1:2a:cd:7d:82:c4:
ef:d1:21:87:4c:e6:51:39:46:80:af:1d:84:00:85:
57:9b:bb:e4:b1:39:30:7c:ff:47:ea:5e:b6:56:9c:
f5:cc:88:43:5c:91:b1:82:47:60:d4:f1:f0:b4:58:
f4:79:f9:73:dd:0d:bc:9c:f9:ec:5a:30:2e:b7:69:
c2:68:89:10:58:6e:03:bb:b6:f0:d9:ae:42:68:4a:
23:01:86:fc:5f:2c:10:d5:a3:e2:68:af:82:4a:e3:
d3:71:ff:bc:17:09:cd:e4:4f:01:63:c4:6e:6f:cb:
db:7f:d7:3c:2d:73:3c:96:6f:3b:b0:ac:df:aa:92:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:25:D9:A3:86:A9:9C:BA:4B:5F:63:FB:9B:51:19:61:33:0F:89:EC
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ab:1f:92:09:de:83:b7:63:04:db:ff:d1:a9:e8:be:ea:bc:
f6:e1:ea:95:1c:ee:11:84:ad:62:c7:8f:37:0c:64:7f:25:7c:
70:5c:f9:1c:55:f3:69:fd:70:95:c7:34:d0:84:ce:45:e5:2e:
0d:85:e3:89:5c:c6:2f:24:84:be:82:db:30:9a:81:4e:2e:32:
d8:2d:18:9e:33:3b:77:b2:58:44:28:ae:bc:33:30:e9:11:f7:
60:2c:02:2f:d0:98:fb:58:92:fa:06:0e:96:80:63:64:9c:4a:
2c:cd:83:c2:f9:38:be:16:6c:96:1c:2f:62:9f:c5:8d:24:85:
bd:d4:a9:8d:05:06:f2:cf:50:d1:8a:62:c7:a7:d2:1c:18:dc:
2b:4d:27:e8:eb:be:51:73:d9:d0:cb:81:04:f9:d1:fa:08:15:
ea:7b:68:73:31:38:cd:0f:dc:20:a5:13:99:43:c6:ec:c2:05:
71:47:1b:3e:51:7b:48:cd:b2:0d:c3:a6:1d:62:46:0f:53:52:
01:99:d2:d7:0e:9c:ae:a1:1e:86:bc:21:6a:b0:18:76:11:12:
8a:db:03:4d:ee:b5:e5:8a:69:08:9c:71:ae:63:60:b4:97:b0:
f1:b3:94:cc:23:8b:6e:8a:11:48:af:68:9c:a4:6b:34:a4:61:
ef:e2:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:34 2025 by rpki-client