Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: vP+l1/KGVj2YqYZZLBeWLUxekyJ+TyH+d5dVK7Fapu4=
Subject key identifier: B2:CC:B7:77:3C:78:39:9B:C4:1E:90:47:77:65:48:97:36:97:F2:60
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 0199FDD914F5A6A51BE30C4A69499D4B0F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 1450
Signing time: Sun 19 Oct 2025 19:01:26 +0000
Manifest this update: Sun 19 Oct 2025 19:01:26 +0000
Manifest next update: Mon 20 Oct 2025 19:01:26 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: 33xRuIYneiSHIZ8YIldnlA6kw3gK6ieYeyhrMHfyn0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:14:f5:a6:a5:1b:e3:0c:4a:69:49:9d:4b:0f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Oct 19 19:01:26 2025 GMT
Not After : Oct 20 19:01:26 2025 GMT
Subject: CN=b2ccb7773c78399bc41e9047776548973697f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:16:7b:f8:a5:8a:3f:5c:29:c7:8b:f7:91:
5f:97:4b:bb:1c:4d:70:38:07:cf:bb:01:27:f2:97:
31:79:e2:cc:ef:b1:6e:12:ba:59:f9:f7:61:ba:36:
0d:57:8f:10:6b:0e:3c:f4:bd:cb:25:ce:18:5b:1a:
e1:29:d6:62:9a:94:85:9c:49:fc:00:29:32:45:d5:
01:b0:22:78:6e:18:e1:18:cc:d0:60:a5:85:36:7e:
ea:eb:92:42:c1:21:8d:7b:23:ae:f7:9d:4c:93:90:
d3:77:b5:4f:b1:9a:97:25:3d:64:1b:78:ca:dc:25:
9b:ef:be:e0:90:00:bf:21:f5:96:31:74:b5:1b:55:
4b:fe:0c:b6:7b:d1:a5:9e:fd:82:35:c3:ed:d6:48:
f6:f8:31:4c:44:53:68:9f:74:f8:fb:75:5d:01:9e:
75:00:19:5b:5c:32:8a:93:71:ac:2a:5d:44:19:51:
b6:9d:7e:6e:cc:2b:83:da:e4:b8:52:ab:b9:a7:07:
7d:0a:08:1b:e3:9e:7a:8a:ad:34:af:07:02:19:68:
16:e0:84:1c:05:b0:1e:64:00:44:82:23:81:66:5a:
57:54:49:2c:d0:67:e9:10:57:39:47:f1:5a:d4:8a:
28:fa:a1:07:f8:9f:4e:5d:f9:ca:e5:4c:f3:bf:cc:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:B7:77:3C:78:39:9B:C4:1E:90:47:77:65:48:97:36:97:F2:60
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:6b:7c:a0:ec:3e:60:0f:00:f2:8c:41:19:d6:f5:2d:a8:
ce:8f:10:99:05:03:98:87:48:06:fa:fb:6c:cc:96:3c:27:3d:
35:e5:42:bc:05:54:87:e6:1e:8a:2d:9b:d7:dc:6f:d0:11:df:
2a:70:c4:af:dd:06:c6:f0:77:ed:ef:ad:08:c3:21:ce:47:a7:
30:0f:96:c3:33:91:fe:06:65:d1:cf:fa:ef:1d:a7:b2:dc:2d:
7e:de:81:ac:4e:19:67:71:d3:65:ef:3b:24:84:c3:ab:a6:aa:
5f:8c:78:5b:3b:54:c7:b6:e2:b3:ac:b1:20:5b:f7:db:26:b5:
74:6c:4e:06:23:50:86:19:32:22:b8:2e:d0:58:61:bd:9e:a2:
b9:85:fb:40:90:db:4f:f7:20:1f:96:b7:1b:2f:da:84:1a:79:
b8:5d:2b:a0:08:63:78:33:a2:45:c9:ed:0f:e5:97:23:0b:45:
a4:e6:f6:07:76:8d:e0:ec:b3:5d:4f:05:31:3a:54:50:5e:b8:
a0:3b:ac:0a:70:7e:2d:f6:b5:af:14:b0:e0:aa:fc:62:db:75:
ba:cb:c1:27:ef:62:15:a4:be:0d:9b:21:77:bb:8f:64:9c:b9:
a1:88:ae:c4:65:75:d5:0c:7c:5e:4a:47:ee:0a:bb:10:9c:fd:
a0:22:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:37 2025 by rpki-client