
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: NDV2rsSRcfaZRve+ssEhQlnF8x+EvL09fskLooJc/FI=
Subject key identifier: 7C:35:E0:A7:2A:8C:B9:DF:17:80:C8:CC:CA:3D:8A:94:C7:FF:9B:84
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 0197BAEB3D2AA8F14F3FA9F6AB930A90C5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 12CC
Signing time: Sun 29 Jun 2025 09:01:08 +0000
Manifest this update: Sun 29 Jun 2025 09:01:08 +0000
Manifest next update: Mon 30 Jun 2025 09:01:08 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: Bza5/IG2GUa5JH5G0wFzeUVIFF5MayJGebE2WSCqeBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:3d:2a:a8:f1:4f:3f:a9:f6:ab:93:0a:90:c5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Jun 29 09:01:08 2025 GMT
Not After : Jun 30 09:01:08 2025 GMT
Subject: CN=7c35e0a72a8cb9df1780c8ccca3d8a94c7ff9b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:15:b5:d2:09:19:5f:03:e3:fc:b6:7e:80:
0b:4e:a3:e8:d9:0a:8e:4b:c1:da:47:07:b9:3e:65:
59:4d:d7:10:f0:f3:a0:63:40:7e:81:d0:be:eb:2e:
62:df:01:1c:19:a7:7f:86:af:1d:1a:d4:6e:43:1f:
a6:d9:f1:17:dc:34:5f:12:1a:fb:ee:5f:d9:55:e1:
55:93:1c:01:cf:a8:3f:a6:55:73:8f:0c:e5:27:00:
b7:89:04:ec:f2:17:fb:1b:cd:29:7f:12:dd:e3:0d:
68:ab:43:e5:9f:f2:24:59:f2:d5:57:e7:41:9d:06:
b3:99:6a:6b:9a:d7:9e:74:93:77:d8:3a:b4:da:85:
92:b2:25:79:7b:92:18:91:fd:2d:ff:b7:71:9e:2c:
5c:c9:2c:21:4c:22:cd:3b:a7:a0:77:72:f5:f4:a4:
f3:18:ed:e2:db:4c:45:52:89:86:d7:7c:b6:c6:2d:
1c:1d:3f:bf:61:c7:41:75:88:b2:cb:12:cb:1d:3f:
f6:c6:b3:8b:b9:7d:1a:aa:48:5c:dd:b5:f9:76:8d:
26:00:97:a5:6d:df:3d:50:fb:13:0e:df:c8:b7:04:
3b:b1:a3:18:5b:16:d8:05:c5:f0:47:94:86:60:f7:
2d:68:0d:9a:79:c7:5a:16:9a:bb:b8:be:bb:c2:e8:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:35:E0:A7:2A:8C:B9:DF:17:80:C8:CC:CA:3D:8A:94:C7:FF:9B:84
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:37:67:68:48:ce:0f:8f:3c:ad:4f:d9:97:56:e5:be:ef:
12:d6:d8:96:70:dc:bc:9e:05:b0:28:13:a0:cf:03:3b:7e:73:
a3:05:53:22:cd:ec:18:73:36:fd:a3:11:1d:59:71:1f:d8:dc:
8a:f6:31:2e:f3:0b:9d:b0:e2:e1:14:bb:df:8e:71:6a:28:a2:
6c:dc:18:f1:7b:4a:5a:98:99:8a:76:54:b3:41:14:df:27:22:
7a:23:64:14:74:3f:25:6d:fc:de:03:8e:2a:1d:5a:11:4b:0c:
4b:dc:6d:51:d3:83:91:8b:61:9a:9f:94:45:52:49:1f:b8:83:
4c:bf:62:9d:16:30:06:fe:0d:c3:c2:5f:41:63:ef:0f:e8:7d:
ac:63:a9:be:ce:cd:5f:0a:1f:02:20:73:95:62:13:b2:07:0b:
24:de:81:cb:d3:27:02:dc:82:8e:6c:85:fc:c1:64:8b:04:f6:
5b:c6:5a:ec:8a:6b:23:7a:93:29:56:ea:df:5c:31:35:c8:54:
02:00:31:8a:c1:e0:aa:9b:c9:8b:22:ed:c7:20:d8:02:4d:be:
6c:6f:ed:de:c3:14:9d:65:67:85:7d:66:b5:3e:8f:0d:98:b0:
ec:e2:c6:9b:d3:a3:1d:31:df:26:67:42:16:2d:f0:1b:06:ca:
42:06:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:34 2025 by rpki-client