Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: i+lrGWA8P4pD60A3Upwd2mr5yC6nKNCFT6LC7gxYg1A=
Subject key identifier: D6:7B:69:96:60:DA:0A:52:7D:4F:5B:17:65:05:A0:C5:B4:33:9F:7D
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 0198D4E0E10B032E4F7E72297D67F3239D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 135E
Signing time: Sat 23 Aug 2025 03:02:44 +0000
Manifest this update: Sat 23 Aug 2025 03:02:44 +0000
Manifest next update: Sun 24 Aug 2025 03:02:44 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: E/xtRhthFTRCd1Gy9nQM1PwDgc4N8j6KEc3Zk48BH64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e1:0b:03:2e:4f:7e:72:29:7d:67:f3:23:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Aug 23 03:02:44 2025 GMT
Not After : Aug 24 03:02:44 2025 GMT
Subject: CN=d67b699660da0a527d4f5b176505a0c5b4339f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:f9:69:de:8e:f8:3a:f7:0b:df:d6:62:dc:
de:6a:f6:62:3b:45:f7:5a:1b:6f:9a:27:c4:8e:03:
08:0b:8b:58:f4:93:74:3c:82:b2:12:7a:74:ab:ec:
90:ab:bf:d2:1f:fe:91:44:0f:d9:ed:f1:fb:24:2c:
f9:a7:c0:48:3c:88:6f:21:6c:04:08:10:4b:4d:e1:
82:04:93:2a:c2:65:1a:b5:83:a9:e3:12:a5:5c:95:
5d:ab:0c:29:17:bf:4d:08:1b:bc:aa:c6:e6:29:89:
f1:69:d7:ce:c8:a7:34:f5:07:91:b4:87:dc:05:58:
f5:11:d8:25:78:b1:5a:ef:e6:56:00:7f:97:e1:22:
7f:7f:16:70:86:39:d4:9c:21:a6:4b:82:70:3f:33:
50:f4:65:7b:4c:c8:95:ab:6d:df:b8:a4:23:2a:ad:
78:3d:90:88:e3:68:a3:f2:f2:19:98:c3:39:d3:d4:
a4:87:d4:79:07:47:da:cb:10:b0:97:08:9e:40:e4:
96:4c:b2:04:08:58:22:c4:2c:6b:29:70:e7:fc:13:
40:73:2d:f7:b7:0a:cc:66:51:4a:f1:84:0e:1b:74:
48:0f:68:27:44:e8:68:10:ee:85:e5:80:1a:9c:92:
91:a0:ef:5a:d8:67:0d:60:ff:43:ae:03:60:ee:05:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:69:96:60:DA:0A:52:7D:4F:5B:17:65:05:A0:C5:B4:33:9F:7D
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:8a:77:22:37:86:3a:d3:c4:5a:04:2a:80:7d:24:78:5b:
da:2c:19:7c:c8:f6:35:c3:ec:d8:47:81:ce:5f:d6:15:7a:8d:
a5:90:fa:ca:d6:25:d9:28:5d:fc:74:e1:36:04:37:df:1e:8a:
f4:05:2c:c5:68:70:db:e5:34:eb:02:22:17:fc:97:12:13:1d:
d0:75:ea:61:ca:32:42:27:ea:01:1d:3e:39:d0:a0:9b:c4:b2:
6e:c3:7b:6b:30:a4:16:84:80:b2:24:b9:c2:9f:61:39:bd:a4:
fa:74:13:73:9a:ff:02:45:17:02:50:d7:93:69:c0:6a:a5:bb:
75:96:0f:80:3e:82:63:83:ee:a2:d5:93:e6:4b:5e:29:0c:1d:
6a:f1:6f:08:4e:ac:4e:74:13:87:33:f9:c4:a0:65:02:84:43:
01:ba:80:ba:ca:32:23:ca:f6:0f:13:73:14:65:f8:e7:f4:87:
ca:82:7b:83:28:60:db:80:04:ca:dd:9b:9c:51:3a:bd:0c:8b:
bc:e8:94:ba:a9:13:13:9e:bb:e9:f9:c3:28:2d:76:80:97:14:
58:88:bb:92:22:91:8d:24:2a:a4:df:3b:51:8f:f3:06:24:8d:
64:5b:0b:66:49:10:08:9c:bb:33:e5:17:c1:d4:e4:5f:49:82:
af:81:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:59 2025 by rpki-client