Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: VZ0/77BSl43Gwjz8wfd4VoapPh8MbdmRUm98BHL7q2k=
Subject key identifier: AB:03:E5:E7:B7:64:BA:88:BA:B7:CC:33:CA:56:39:8B:74:90:00:49
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 0199FE46F84571837FF985164B30B2403501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 0298
Signing time: Sun 19 Oct 2025 21:01:27 +0000
Manifest this update: Sun 19 Oct 2025 21:01:27 +0000
Manifest next update: Mon 20 Oct 2025 21:01:27 +0000
Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: 3Z55XvcVHitxSmqIdoRSbB8Jqjt4ww1VY/jqXLlK+uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f8:45:71:83:7f:f9:85:16:4b:30:b2:40:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Oct 19 21:01:27 2025 GMT
Not After : Oct 20 21:01:27 2025 GMT
Subject: CN=ab03e5e7b764ba88bab7cc33ca56398b74900049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:6d:7f:f0:0e:47:c7:32:10:0c:2e:0a:40:
36:0b:0a:96:f4:aa:b9:07:75:ec:12:d1:4c:db:77:
f8:c5:65:4d:79:b0:a1:f0:24:56:8f:f6:01:08:82:
08:e4:89:65:cf:9e:3b:4a:80:b9:c7:04:d4:1d:db:
06:74:1c:1e:36:34:70:7c:14:bd:c8:5a:3d:e0:72:
99:3c:6c:f6:a3:5d:94:da:1a:dc:38:4e:81:fd:69:
74:d9:94:ec:22:51:fb:1e:42:b0:30:b5:a7:b9:d5:
b6:d1:70:b5:a3:ec:a1:4b:b3:3d:f2:d2:53:e5:e5:
5a:1e:97:ff:c1:00:8c:40:75:17:0a:b5:50:28:15:
87:14:71:b7:e6:18:a3:18:e8:a0:9c:53:2f:fc:ca:
60:ca:a3:42:b3:b7:cf:4c:d6:23:4f:cd:aa:3b:87:
83:e8:fd:9b:95:7a:ca:74:a5:cc:4f:d9:e5:08:65:
38:be:7e:94:74:62:46:6b:75:87:04:0d:00:5a:09:
2e:a6:52:ff:0b:7d:0c:ee:e0:fe:3a:7d:dd:a8:76:
94:d2:74:87:9f:af:1c:56:5b:61:c5:6b:78:70:cf:
ee:a9:a5:04:c4:dd:4a:04:6e:08:d8:11:00:43:e5:
e5:af:18:a8:a2:a5:38:91:44:fa:22:03:42:64:02:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:E5:E7:B7:64:BA:88:BA:B7:CC:33:CA:56:39:8B:74:90:00:49
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b5:fd:dd:76:7f:cb:25:df:fd:12:46:1a:d1:95:9e:da:35:
9b:56:0c:fe:76:23:26:76:7e:5d:ac:8d:32:58:36:48:b5:38:
89:53:54:69:73:fb:ff:55:81:9c:60:eb:32:2e:1c:5d:f9:ad:
a1:8f:0e:a9:6f:bc:66:7e:ab:25:0d:2c:dc:da:de:98:ef:3c:
4a:51:37:d9:54:c6:87:6e:70:15:11:11:44:76:d9:91:5c:3f:
82:08:81:8f:2d:5a:70:16:88:19:56:5f:a9:c1:fd:25:90:72:
89:01:b3:3c:39:d0:6f:c6:75:2f:cc:78:94:c6:e4:43:d5:36:
92:54:f2:ad:63:e9:4b:b1:20:ba:2e:35:8e:49:36:d4:12:4f:
4f:13:41:7e:3f:39:ec:98:21:7e:dd:33:03:e8:57:63:03:f3:
e5:4c:82:d9:b5:5d:b2:f4:45:6d:bf:00:f8:5d:17:3a:c1:0d:
b7:92:34:36:7b:80:56:5f:66:bd:8a:04:30:cd:3c:ee:42:03:
d8:32:d5:1f:a1:18:4b:a7:02:65:b7:56:37:b2:d7:9a:9b:58:
2e:5b:74:04:e4:24:39:4f:2d:52:21:69:9b:67:0a:d0:01:a4:
d6:39:1a:a2:3b:8f:95:dd:c3:9d:f7:c1:92:fe:50:2a:a1:e9:
5e:74:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:31 2025 by rpki-client