Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: EDrMz+lGLUw8gBj24B7F5tu413B/tuwAizizfglB6D4=
Subject key identifier: 17:01:E2:C4:3B:BF:C2:B3:45:32:75:23:A4:3F:8F:AC:F6:3B:6A:F5
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 0199FDD8D244D8128CBB8E0643899389973F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 03EE
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: Pp/GHFuPlzhikOMCT2KgvDcyePF3tx5tMp6IxxFPpd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d2:44:d8:12:8c:bb:8e:06:43:89:93:89:97:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=1701e2c43bbfc2b345327523a43f8facf63b6af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:e9:6f:39:91:52:ef:f0:70:a8:d8:cc:66:
b3:81:69:d9:a2:5b:28:a6:04:98:e8:b0:9f:67:93:
dd:2d:62:38:e4:10:ce:1e:dc:5d:9b:b2:39:40:04:
dd:b2:9b:25:e4:98:c3:04:ca:71:b8:d4:3c:f7:92:
9f:23:e2:d6:f5:28:8d:8d:53:54:d8:a3:3c:9b:07:
07:ad:9d:9b:a9:e3:75:bf:ef:72:b4:85:df:12:4b:
f1:e1:03:9a:94:ae:d0:54:ff:e6:fd:50:c0:cf:95:
c7:6b:85:ef:77:4c:98:fe:e5:eb:34:5b:dd:d7:fe:
c8:8b:ba:d2:96:81:e6:98:d1:46:09:35:63:cd:1b:
04:53:12:cd:c4:a7:dc:65:ac:b5:db:0b:37:d2:74:
ff:1a:5a:c1:99:fc:3b:d5:da:f4:c6:02:e5:f9:fb:
9f:26:64:e4:4a:7c:1c:52:d0:5b:af:f3:bb:c4:d7:
d7:09:22:ca:7b:65:a2:48:7c:96:3d:e6:37:7f:82:
1f:57:07:98:8b:15:67:9c:df:d9:4b:fe:d4:6f:37:
e0:17:90:98:0f:f6:42:d6:0e:16:9f:fd:62:4a:b2:
f1:6c:5a:6b:de:fb:99:81:15:7f:c4:75:ad:54:b7:
58:4f:b5:e2:26:08:a7:76:e3:41:06:de:d4:18:b2:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:E2:C4:3B:BF:C2:B3:45:32:75:23:A4:3F:8F:AC:F6:3B:6A:F5
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a8:78:c0:b7:e6:1a:eb:b6:81:41:36:e8:f5:91:28:1c:35:
96:b6:1a:96:59:12:35:a7:11:72:aa:5f:2f:29:f6:32:6f:e8:
9e:65:b4:f0:70:82:eb:cb:f4:f1:70:e4:1b:8a:6c:03:a6:f1:
00:d7:92:f9:fe:64:73:06:5c:11:67:d8:d8:b1:bf:53:0b:06:
5d:dc:be:77:8f:fd:bc:40:98:78:a1:36:08:b9:99:24:9b:ae:
ed:1f:e8:ca:e0:fc:2f:40:3a:a7:2e:2b:5c:74:4c:0d:ec:bb:
59:d4:2c:0e:92:fc:1e:c6:ff:89:62:8e:d3:0d:33:72:71:77:
82:7d:dc:2f:19:70:aa:2d:69:1b:1b:bb:79:75:05:1d:d9:70:
fc:bb:f2:92:96:ea:76:c6:c9:0c:b0:6a:a4:64:1a:a2:1a:82:
51:27:79:48:6e:00:88:3c:4b:30:1e:60:f3:b0:7b:30:8c:31:
cf:7f:39:0c:85:9f:1b:94:c1:fd:e7:9b:3b:c1:de:0b:6c:78:
b2:02:c1:a3:19:93:f5:9b:1d:51:23:bc:a2:d6:77:76:38:af:
d1:1c:5c:a7:a9:2b:ed:78:77:e0:43:a8:12:36:c0:b9:a5:93:
ee:83:4f:06:51:10:9d:55:49:84:42:1a:b0:1c:f1:54:05:84:
ed:11:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:26 2025 by rpki-client