Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: 86gkLh8DmseNvVxcyozBC5tiXSZNzBdoR39zxcywmI0=
Subject key identifier: 6F:28:D7:18:CC:AE:70:01:36:7A:59:B9:A9:73:F5:0C:67:C1:1E:8A
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019A003511FEB59BA6676E903FD565C6AD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 13AB
Signing time: Mon 20 Oct 2025 06:01:09 +0000
Manifest this update: Mon 20 Oct 2025 06:01:09 +0000
Manifest next update: Tue 21 Oct 2025 06:01:09 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: djhH8bFP5fmr0RMe0wfg0rEmz+ijimcPjttAWPWqknI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:11:fe:b5:9b:a6:67:6e:90:3f:d5:65:c6:ad:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Oct 20 06:01:09 2025 GMT
Not After : Oct 21 06:01:09 2025 GMT
Subject: CN=6f28d718ccae7001367a59b9a973f50c67c11e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:91:73:d3:1f:33:89:0e:18:b8:46:8f:9a:
f7:24:13:bf:d9:ba:38:33:a6:7e:93:b0:6f:11:13:
c7:af:65:d3:35:21:23:b1:96:a3:ce:16:19:e3:53:
a8:a2:9a:49:b7:57:6b:87:d5:fd:c3:51:09:3b:d0:
a5:b7:33:84:b7:11:1e:3d:27:a8:26:f4:42:1b:27:
f1:ef:21:3c:7b:b0:2f:da:aa:41:c4:c2:d9:80:ad:
ae:1c:f1:9f:0c:a7:54:79:60:87:04:bb:70:31:3b:
7a:0f:25:0e:33:52:0c:13:37:72:16:49:d8:10:74:
15:04:a3:7d:60:6e:91:70:31:da:36:1c:9d:cf:ef:
02:53:91:56:ab:3a:05:43:73:aa:2c:14:87:5d:93:
6a:b5:60:56:23:c2:8d:5c:be:ae:50:a7:d5:4b:ca:
e3:85:d3:c7:76:91:bf:82:d2:df:1b:34:50:8d:47:
cf:3d:e1:c3:68:ed:ae:4e:bd:70:23:05:e6:c5:de:
68:5c:bb:50:a5:8c:54:96:9b:6b:c5:2a:c4:5b:f0:
08:ee:f0:34:72:e5:88:a0:a3:df:e8:54:6d:0f:4a:
d2:9b:8b:2c:35:1d:df:60:fd:41:bc:ac:22:70:9a:
ec:85:a7:c1:65:fa:df:a3:80:9a:ea:cd:9a:49:78:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:28:D7:18:CC:AE:70:01:36:7A:59:B9:A9:73:F5:0C:67:C1:1E:8A
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cd:7c:fe:0c:0b:a2:b4:a5:98:df:28:4a:2a:81:42:54:c6:
04:f8:9c:e0:e6:f1:61:00:c8:d9:c2:1e:92:e3:fe:47:f5:36:
a6:c4:30:0a:bf:80:02:da:0e:29:dd:21:66:6d:d9:c3:ca:dd:
b6:49:98:2c:96:23:64:d1:73:c9:d9:ed:c3:f4:91:e6:49:4b:
86:9d:70:74:60:ae:60:e2:bf:15:3d:10:ff:70:b2:c2:35:ef:
d2:37:c1:63:6a:a4:87:8d:6b:13:07:95:62:9e:e9:32:2e:67:
27:1b:34:75:6c:8e:83:22:8f:30:24:66:56:7f:d0:80:04:a1:
6f:07:03:03:d3:6a:8f:6e:c5:f2:d1:46:0a:a5:2a:d5:42:c4:
e0:9c:3d:b1:1c:28:a4:c4:84:12:44:ea:63:e6:28:9d:d3:53:
7b:d4:28:f7:a8:91:8f:e8:a5:cd:a2:54:d9:8d:25:02:ce:24:
c8:f9:91:70:f8:1e:02:40:6e:f5:9c:06:98:04:2a:ce:b1:20:
4f:45:db:de:85:9c:81:61:3b:a9:65:43:2e:1b:54:36:b1:72:
b8:b0:d1:fe:c5:1b:4b:06:71:bd:aa:9b:8f:f1:98:2d:ca:b1:
df:89:1a:11:38:20:8f:11:c9:6d:7c:c3:22:43:76:77:bd:76:
a2:19:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:02 2025 by rpki-client