Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: Ik12BENWgLy0uYMXjxi0KTE0hUibvXLf5AXodbDBQwI=
Subject key identifier: 57:2D:FA:C4:B6:BC:C1:B2:1D:1C:F4:56:1B:DC:85:E7:B6:10:45:17
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 0199FE468A07E088538802154B6F017F69A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 13F8
Signing time: Sun 19 Oct 2025 21:00:59 +0000
Manifest this update: Sun 19 Oct 2025 21:00:59 +0000
Manifest next update: Mon 20 Oct 2025 21:00:59 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: yvChy7xeSEv9Z8mYk1TFCprLg272HppfK3PFCvuWuuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8a:07:e0:88:53:88:02:15:4b:6f:01:7f:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Oct 19 21:00:59 2025 GMT
Not After : Oct 20 21:00:59 2025 GMT
Subject: CN=572dfac4b6bcc1b21d1cf4561bdc85e7b6104517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:4e:3d:9d:ea:69:fd:83:97:b0:a5:1c:43:
19:fc:32:10:4f:c1:70:ea:c2:ad:05:dc:85:8a:3d:
ea:92:42:73:a6:86:66:1d:75:17:85:23:e5:c7:63:
28:9e:95:d6:16:9b:43:f0:4d:c1:6f:ad:4e:44:1a:
6e:03:6c:35:8c:57:7a:5a:e9:42:7a:6f:6a:a2:bb:
a9:ea:90:9b:06:17:d6:c7:b0:df:94:13:27:82:d4:
2f:43:79:76:2c:9d:c2:9f:41:bb:40:60:ed:cc:8b:
0b:ab:9e:a3:84:91:b2:1e:a4:b0:5e:5c:d2:d1:4a:
f1:8a:bd:bd:ce:58:6b:09:b1:ec:d1:16:ef:a0:66:
23:68:7d:95:51:e7:73:6d:5c:d3:d8:2e:25:15:7f:
bd:e1:cc:ce:8f:eb:af:52:29:df:f7:38:80:9b:07:
70:3e:a9:d1:c4:09:a8:2e:2f:d5:66:e9:75:c2:19:
59:42:70:3f:20:09:6e:5c:d4:f7:dc:64:91:46:e4:
eb:09:7f:51:e9:e7:45:5c:93:ae:ea:65:cd:ab:7c:
7d:ab:84:28:42:52:6e:1d:0d:67:55:1a:76:07:21:
31:be:e6:64:9b:67:d7:43:3c:34:52:0d:bf:09:0d:
8c:79:ee:8e:6b:94:37:7d:22:d5:db:1f:11:d0:a9:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2D:FA:C4:B6:BC:C1:B2:1D:1C:F4:56:1B:DC:85:E7:B6:10:45:17
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:3e:7d:4b:c7:a2:48:42:1d:01:8a:44:03:b5:2d:39:08:
2a:b3:56:04:c6:71:8f:c5:66:16:ed:e0:28:63:6b:65:ee:fb:
fe:49:04:60:0f:c1:e7:11:a9:4c:32:aa:3c:ba:cd:40:da:dd:
91:0f:6f:7c:74:46:93:15:6e:b8:03:cb:db:88:34:13:c9:08:
90:1f:a8:de:b8:38:23:40:26:47:4b:46:c8:09:3e:60:ed:cb:
59:e1:17:70:c1:58:b5:53:81:cf:08:c2:3f:49:8b:ea:0b:8b:
9e:a9:e3:2e:97:f1:eb:97:f3:10:95:aa:56:6f:b1:18:05:bb:
c4:5e:05:f3:da:5b:6a:71:26:63:e5:7c:aa:25:65:24:ac:38:
6c:0b:96:f1:48:bc:06:76:9c:8c:1e:8c:f0:32:e7:8b:24:df:
9d:3e:f0:0e:aa:64:b2:bf:c1:36:7f:89:4c:7b:35:48:f2:da:
fe:0f:1c:a9:6e:49:8c:6b:38:d1:08:b7:3c:4a:b6:29:b9:0a:
5c:d9:1e:8e:b1:f9:97:21:6e:67:0f:b6:51:b8:91:3a:5f:b7:
a7:7e:2e:92:70:c0:f1:1b:48:d9:82:5e:2b:14:aa:22:9f:72:
6b:13:88:72:83:07:17:4b:18:0e:8e:f7:d7:2d:a5:b1:19:d1:
7a:c9:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:43 2025 by rpki-client