Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: 1XDV1vnynA4n0+dhs6aUSst+orG+EMMHmoMDx5fPF2A=
Subject key identifier: 9B:59:3F:7F:69:6A:D9:4F:31:8E:8A:E1:C3:79:ED:1E:0C:69:72:20
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 0199FC589FAC9DB47B1376ACE771D17DCA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0D0E
Signing time: Sun 19 Oct 2025 12:01:30 +0000
Manifest this update: Sun 19 Oct 2025 12:01:30 +0000
Manifest next update: Mon 20 Oct 2025 12:01:30 +0000
Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: hOhHr96P1wVM6LtMPjLX18ooZQDFy2+PK+iobf+MA4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9f:ac:9d:b4:7b:13:76:ac:e7:71:d1:7d:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Oct 19 12:01:30 2025 GMT
Not After : Oct 20 12:01:30 2025 GMT
Subject: CN=9b593f7f696ad94f318e8ae1c379ed1e0c697220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:22:c3:98:40:6b:0d:76:0e:3e:c3:34:46:
c7:64:5d:43:f3:50:f0:87:ef:95:ec:fb:c5:ce:3a:
7e:3e:a5:66:83:fd:00:19:ff:ae:00:55:d8:a4:f3:
85:4a:94:3b:10:c0:03:d5:3d:a1:75:94:d6:9f:79:
ce:e1:3f:e9:5c:4b:61:ef:70:41:2d:56:64:38:14:
12:5d:0e:e0:65:d7:d0:f2:33:95:3a:70:17:98:de:
f0:a2:d0:52:1a:df:2c:e4:9d:c7:71:4f:4e:23:32:
b0:5d:f1:83:6d:ce:f4:59:3c:1a:f5:98:dc:d7:8f:
47:f8:c4:03:69:a5:7c:57:fe:b8:df:02:4a:c8:59:
3a:57:53:62:d9:aa:1d:f6:da:ab:f8:ec:68:87:cc:
ce:1c:cb:51:81:b4:f3:a8:8f:24:87:96:7e:79:ec:
3f:82:ab:03:c3:9e:b8:0a:4f:ad:80:df:87:c5:f0:
2f:8e:43:e8:cd:78:87:df:f5:fb:15:19:9f:8a:a1:
80:83:4b:e7:44:54:99:be:22:73:27:26:b2:32:99:
b2:60:55:cc:67:6b:ef:11:97:5e:0e:80:e9:8c:42:
e4:8a:89:ed:a7:f2:64:ba:72:1b:3d:74:6f:cc:e9:
43:b7:79:06:89:c8:f7:da:16:c7:9c:df:ab:9a:ab:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:3F:7F:69:6A:D9:4F:31:8E:8A:E1:C3:79:ED:1E:0C:69:72:20
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:21:aa:e3:9d:2b:a8:19:85:d6:35:e2:42:9e:2e:f4:a6:29:
db:b9:ea:a7:be:f4:db:0a:59:d9:22:6d:ad:a1:19:83:b3:e0:
14:e4:74:2f:5a:e4:4e:81:30:01:8e:c3:2f:85:25:46:25:34:
bb:fa:5c:19:ba:52:e1:aa:3d:d7:b1:06:a4:0a:44:a5:25:39:
37:50:a9:92:bd:84:6e:0e:f4:d0:c1:e7:d4:ac:9c:de:7a:24:
f0:71:02:c0:e3:21:3e:d2:b6:85:20:2c:dc:7c:68:4c:65:21:
db:7f:36:28:a2:0b:75:5e:94:b1:1e:3f:97:bb:fb:a1:99:78:
e7:cd:f5:92:00:4a:c9:ac:23:28:c9:4a:fe:f8:e9:6e:05:5d:
88:fa:f5:a9:b5:f4:80:13:19:8c:5c:6e:8e:03:58:04:37:3f:
23:df:90:59:2a:27:3e:a2:06:a4:ea:77:c5:34:36:ef:2a:5b:
ac:57:3c:b0:c2:45:e5:f0:f1:5e:02:c7:8e:f0:66:0f:8f:ce:
9f:a2:f3:9b:3d:ea:e6:bb:a9:3c:0e:b9:0e:54:9b:14:37:46:
63:74:8e:74:68:f4:79:a4:a2:95:66:5c:c4:5c:18:56:0c:04:
f5:ee:58:45:89:3e:68:43:c7:a6:ec:cf:38:0b:05:6d:f8:7b:
76:6e:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:18 2025 by rpki-client