Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: PzfLWCNqNLHmsxYF0sIMbOAcVFRoWBqA41VqtbMcOlc=
Subject key identifier: 9E:C8:72:CF:96:66:B7:D5:5C:CD:04:06:3D:3A:CF:CE:C3:56:E8:89
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0199FB0EEFBB2D3D623FC9D49EF4D43CE7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0B98
Signing time: Sun 19 Oct 2025 06:01:24 +0000
Manifest this update: Sun 19 Oct 2025 06:01:24 +0000
Manifest next update: Mon 20 Oct 2025 06:01:24 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: S4bdFNN/1c/62Ek0f8HLph/+pp9Hs5V1gydlgZSMvmI=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ef:bb:2d:3d:62:3f:c9:d4:9e:f4:d4:3c:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Oct 19 06:01:24 2025 GMT
Not After : Oct 20 06:01:24 2025 GMT
Subject: CN=9ec872cf9666b7d55ccd04063d3acfcec356e889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:ee:b8:da:84:1e:09:5d:ec:96:07:c1:b2:
c1:ad:75:0c:c3:d1:7c:65:d8:dc:0d:4d:28:52:b4:
b7:67:33:f9:13:62:c3:ac:3e:be:a1:f4:6b:86:b4:
2a:20:d1:72:45:6a:bc:bf:d4:a1:27:3d:65:0c:6e:
cb:6f:df:12:32:75:eb:1c:3e:fc:48:69:61:db:ce:
c8:85:50:eb:9a:39:18:aa:bd:0f:6e:14:5e:8d:c3:
5f:dc:bb:3a:8a:3e:5c:0f:2a:69:a9:65:9c:3f:f8:
54:dc:c3:d5:78:06:1d:8b:e3:c1:fb:e5:b1:bc:72:
dc:0e:cc:22:94:2d:dc:2b:dc:f9:4c:b2:41:67:08:
32:cb:88:40:51:b1:53:f5:68:78:13:4b:5f:57:b6:
ee:6a:2d:29:9f:25:f0:ad:7e:89:c5:33:4f:ed:a5:
b4:27:2a:94:22:4d:3e:89:05:fa:4c:b6:1d:0f:11:
82:25:bb:f5:84:27:c1:f2:b8:ef:26:ae:ac:5a:51:
b3:a2:7d:f9:15:9d:82:a3:dd:3a:8f:2b:3f:6d:1e:
78:6c:15:48:de:63:68:4b:16:1c:e2:b1:77:bb:ea:
1b:66:b6:6a:7a:be:41:5a:84:81:24:8c:16:18:27:
63:0d:34:38:a0:9e:23:30:35:0b:51:3e:67:74:6a:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:72:CF:96:66:B7:D5:5C:CD:04:06:3D:3A:CF:CE:C3:56:E8:89
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:b3:71:94:8e:60:80:cf:0d:dc:0a:84:b9:16:92:87:0e:
a7:50:9d:4f:eb:76:ad:66:48:63:d4:7f:d1:37:1a:c8:2d:a4:
f5:b8:c9:6a:64:e9:9d:5a:f1:c7:35:af:8b:b9:27:82:67:69:
c6:64:70:49:64:0d:52:e6:ce:5e:5f:49:33:b4:70:b0:5c:22:
38:c1:3c:3d:fa:8c:7e:d1:d1:df:6f:89:a6:bc:53:2a:a0:81:
d1:d6:da:a5:1e:92:9e:88:7c:db:0f:96:1c:85:6e:31:6b:a8:
df:8b:90:da:7d:3c:82:5a:17:4e:80:91:44:4c:3a:09:b1:27:
5f:2b:52:5b:df:63:3d:70:7e:1d:3a:a3:cd:57:5e:a0:cd:eb:
b6:3d:b8:50:80:2e:4c:01:3c:1f:b0:62:27:6a:5a:9f:ff:4c:
27:a4:b8:de:de:6f:3c:8a:de:8b:eb:a2:18:39:c0:8c:3f:cc:
cb:a8:f2:c2:27:cc:7a:fb:e9:31:61:7a:03:d2:32:5f:bc:5f:
46:44:06:41:89:45:76:86:9b:da:8b:a8:9c:b8:ba:d0:1b:8a:
7c:f3:35:c6:5f:9e:ff:4e:d9:19:22:33:8e:a1:e5:49:5c:8e:
57:20:4c:7e:30:d8:d2:e0:7d:27:41:e8:c4:c5:65:44:14:2e:
2f:08:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:30 2025 by rpki-client