
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: o60b7KvebEbYpWUH29JR8JvBLUO56WFWaWZQD617qlA=
Subject key identifier: 60:A1:F8:77:37:98:5E:A4:59:1C:A2:39:59:F6:5C:EB:A7:05:9D:80
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 0199FAA13993D038845F261B4330EA83DCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 0719
Signing time: Sun 19 Oct 2025 04:01:33 +0000
Manifest this update: Sun 19 Oct 2025 04:01:33 +0000
Manifest next update: Mon 20 Oct 2025 04:01:33 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: N3tbs4y9EqU3Ge737cunLP9NaUCfZkK0gnxFmAwiRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:39:93:d0:38:84:5f:26:1b:43:30:ea:83:dc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Oct 19 04:01:33 2025 GMT
Not After : Oct 20 04:01:33 2025 GMT
Subject: CN=60a1f87737985ea4591ca23959f65ceba7059d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:f7:f2:cd:8b:83:69:2c:29:78:62:0e:f7:
9a:b2:3c:70:22:74:e8:8b:e8:94:a8:cf:79:81:e6:
d3:e1:ac:0e:b7:0a:b0:7b:d4:5d:c6:1d:67:dc:78:
68:a8:56:af:38:f8:73:c2:37:7f:e1:81:ab:2f:62:
fd:23:d6:70:00:43:0d:bf:96:51:ae:e0:ee:c0:a7:
54:d2:5b:e7:24:f8:bf:12:71:b2:bc:b6:b8:f9:73:
40:64:87:af:8a:b8:88:2d:ba:4e:24:08:c7:21:c9:
63:d1:f4:df:2c:b5:d9:76:65:20:ce:90:86:6b:fa:
a0:d0:1d:87:ba:4e:e2:3a:c3:41:a4:ed:10:de:1f:
bd:12:88:b4:b5:68:b7:4b:96:79:d8:e6:be:47:3b:
ba:97:21:94:54:e9:62:ac:e8:37:f0:51:7f:f4:87:
06:b3:4b:53:02:41:fd:6a:e6:03:73:9c:77:b1:5e:
7d:74:b3:f0:86:5d:70:bf:5a:04:06:d8:52:a6:47:
1c:9a:f9:8f:86:68:84:ea:18:20:07:f5:1e:9c:de:
52:c5:c2:d1:46:16:4e:c8:8b:2e:2b:6a:34:bd:bf:
b1:3b:eb:a6:cd:8c:54:87:b0:96:b1:b8:0c:b3:94:
2b:e8:1d:76:4d:3e:82:9b:94:2a:54:10:d1:79:01:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A1:F8:77:37:98:5E:A4:59:1C:A2:39:59:F6:5C:EB:A7:05:9D:80
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:23:64:57:4f:8b:42:2f:89:13:7f:aa:bb:1c:92:67:b8:be:
b7:41:27:30:94:a9:9b:97:80:6a:5f:95:cd:6a:10:db:60:65:
53:af:05:9c:46:15:29:e9:b1:8e:32:98:36:90:12:f0:2b:43:
f2:f8:a2:91:90:f3:ad:6c:90:ca:fe:b3:24:dd:bd:ca:19:eb:
3e:d3:18:56:c9:cd:86:dd:3e:20:6f:1b:9d:4c:0e:b9:bd:d1:
5b:d6:ea:28:e4:29:02:f5:a4:df:67:15:fa:9d:cd:fa:20:3a:
ab:6a:06:0f:c9:8e:bc:8a:09:1c:71:62:d8:87:c9:42:e7:4a:
c7:b2:42:cf:f0:2b:14:cf:10:18:4f:11:02:ae:02:5a:e2:b5:
84:11:78:fd:bd:9d:f0:39:18:f3:30:f9:98:3d:e8:77:eb:63:
1e:ff:b8:7b:db:30:8e:42:39:de:0d:68:73:3e:33:cb:82:18:
b9:a1:bf:65:0a:e2:19:9e:9e:b7:be:b4:2a:69:60:ad:fb:24:
c9:b0:a9:66:d2:bd:48:c5:33:02:dd:18:ee:5d:64:33:3b:69:
4a:cc:b9:0f:67:67:7f:00:df:a9:9b:d6:d9:fc:59:9e:02:02:
8a:da:0a:ca:a9:dc:6c:4d:ca:d1:ac:51:be:9e:6a:35:19:e4:
54:38:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:35 2025 by rpki-client