Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: Jz+naOIKiDJGzGueftBE2Xef/sHiJWPz11befxvQTfI=
Subject key identifier: FF:04:87:40:C9:34:C4:C9:84:45:9C:3F:22:D4:A9:10:A3:EB:E0:0E
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 0199FBEBA917562468B77E90F42EF1B2CD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 0572
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: tYoM16a1O9OZo5XYoFfju_qqz8M.roa (hash: GdlsDb/allp69iNiLm+qN/cOyit2KYOzK+rzYY7uXMw=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: gtqYuYCp6eFLsXPqfiyCdOXSGrJZxDt8RFLkVX3UA3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a9:17:56:24:68:b7:7e:90:f4:2e:f1:b2:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=ff048740c934c4c984459c3f22d4a910a3ebe00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8f:10:6e:99:65:2b:1b:e3:15:77:40:21:6f:
cd:f2:ff:c6:4d:a3:3d:83:94:10:c9:a8:14:a1:0c:
47:1f:88:3c:23:ca:87:29:9e:88:0a:f7:b8:e2:04:
90:c2:21:71:e4:28:3c:30:29:b9:a5:35:86:9b:1a:
6b:7f:80:40:80:03:66:98:a7:25:fc:cc:19:e5:0e:
c7:ce:06:a9:9a:7e:36:d8:4a:a8:d9:35:dc:b5:5c:
ed:cd:60:4a:5b:25:9c:1a:1b:c3:9e:f9:7f:87:e7:
ca:42:aa:ad:6f:7b:76:38:82:c3:40:01:50:e3:cb:
7a:88:03:19:65:6a:bf:79:c8:ef:a4:f4:bb:e6:7c:
1b:9b:d3:d2:7e:61:2e:9d:eb:d5:4b:f6:64:92:23:
62:40:3f:f8:19:94:b3:25:c0:9b:7a:29:b1:df:78:
f0:41:e8:f6:1a:88:7c:80:70:74:ea:4a:cc:0f:27:
d2:27:ed:a3:0b:e4:3a:fa:ad:2a:99:54:2f:df:86:
8b:52:4e:12:91:71:9e:e1:59:62:dc:30:5e:10:81:
16:d0:59:95:11:be:59:f3:fd:18:53:75:d1:8e:81:
5c:03:41:85:c0:b2:00:84:00:b8:88:d9:7c:9f:76:
55:5f:bf:89:8b:40:e8:a5:35:09:8c:fa:87:46:a9:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:04:87:40:C9:34:C4:C9:84:45:9C:3F:22:D4:A9:10:A3:EB:E0:0E
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:88:4a:dd:24:36:a1:c0:61:07:7f:5d:a2:c8:2f:59:c4:
43:96:aa:aa:89:97:d0:cd:5a:6f:fc:2f:d2:02:11:94:60:b4:
d1:f1:38:7a:2d:23:88:af:ec:20:04:b4:d6:49:0b:16:41:ae:
0b:54:c7:6e:00:26:c9:3d:9c:4a:6a:e9:38:82:f6:29:39:ca:
3e:7d:fe:16:a4:f2:5a:8e:6a:bb:2a:87:63:bd:23:19:76:ab:
9e:65:d3:f3:a3:56:20:f1:4e:2a:8b:04:7f:44:f2:17:57:fb:
c0:52:b3:fa:7d:5a:e7:41:da:8f:fd:5e:26:64:8e:6a:11:67:
f5:56:b5:a1:9f:31:bf:be:7b:76:02:00:84:86:7e:e1:ba:a9:
dc:ab:95:15:d0:d3:03:87:54:c1:9c:52:12:f5:c2:4e:3c:a4:
60:cc:50:08:0f:27:e1:b4:01:50:d9:ba:24:f7:7b:18:6f:93:
8d:20:3d:aa:b4:30:15:86:0e:be:75:77:ea:58:ed:4d:f3:e5:
2f:45:f3:58:db:04:27:96:25:e4:26:38:4b:e5:45:97:34:49:
c4:0e:f1:d5:fb:d9:61:01:9a:82:81:05:f5:25:33:a9:c9:a7:
26:46:fb:40:47:e3:55:51:67:c3:8d:9d:00:a7:21:cb:a8:4d:
70:93:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:48 2025 by rpki-client