
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier: H3mzmti2+M9NTtTsqZnnFkb7uO61XwXqA2c/injIXAs=
Subject key identifier: 9C:BC:93:75:AA:FF:6F:14:A6:91:9B:CD:8E:EC:E5:45:8C:C3:EA:81
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial: 0199FEEB94445ABE190DFAB7EAB605E68F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number: 12CC
Signing time: Mon 20 Oct 2025 00:01:15 +0000
Manifest this update: Mon 20 Oct 2025 00:01:15 +0000
Manifest next update: Tue 21 Oct 2025 00:01:15 +0000
Files and hashes: 1: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: 1Y4jIzBDJxzd1nRLg1hyLL6/zg37YBgEGqX1XhDZRro=)
2: zysotr6Zh0JowEPpxerhuN8FsPI.roa (hash: m7vcKgaxDGAMU/aHqkxYhIsxn/ZRzduC29i2UI0iCuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:94:44:5a:be:19:0d:fa:b7:ea:b6:05:e6:8f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Validity
Not Before: Oct 20 00:01:15 2025 GMT
Not After : Oct 21 00:01:15 2025 GMT
Subject: CN=9cbc9375aaff6f14a6919bcd8eece5458cc3ea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:d5:e2:82:74:19:98:75:63:0e:79:c6:df:
b2:73:17:2f:28:13:73:06:c2:14:e4:98:d5:36:2e:
03:bb:74:60:fd:b7:2f:10:34:17:15:80:2b:46:7a:
af:54:ea:f3:4d:2b:06:e3:55:59:f1:ae:da:99:dc:
ab:8c:a6:32:d5:91:53:ee:c4:c7:46:ca:15:8a:fd:
40:22:7c:f0:d1:8b:15:01:3f:f6:32:7d:8b:49:fc:
a1:f4:59:9a:a1:79:57:43:6c:8a:c8:78:07:89:68:
64:5f:f1:10:80:53:a6:6f:8b:db:07:b9:52:ad:cb:
7b:0e:82:b0:a5:dc:a5:e8:79:85:3d:38:be:10:b7:
01:23:ea:d1:ca:43:98:36:51:d5:ee:2a:1a:5e:33:
dd:bf:0a:ef:9d:f2:3b:ea:27:52:f5:da:89:c8:52:
4e:ca:2d:70:c9:c5:0f:89:13:01:55:65:fd:e4:03:
fa:4f:79:3e:de:5b:34:2f:03:5f:de:4d:90:bc:dc:
2c:e8:5f:2a:5b:6d:5f:0e:f2:84:d8:25:d6:38:71:
0c:03:d7:b5:87:fb:4e:90:73:a7:48:b8:3d:c4:a9:
f5:c3:54:be:cb:74:bc:78:fa:f1:07:ac:20:d7:71:
02:73:74:fc:db:98:e0:8a:a0:d3:84:99:43:82:c4:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BC:93:75:AA:FF:6F:14:A6:91:9B:CD:8E:EC:E5:45:8C:C3:EA:81
X509v3 Authority Key Identifier:
keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f4:e1:84:52:56:ae:1a:17:b7:d4:b4:2a:df:39:d3:5e:16:
65:e7:98:b5:08:6d:ce:e9:78:6e:a3:63:c9:33:fc:e9:8e:e6:
e0:e2:f8:db:42:c6:af:b0:80:96:7a:04:1a:fe:6d:7f:39:7b:
d9:e6:e9:15:e5:5a:c3:55:07:57:f4:ed:67:fe:d7:bd:b2:c0:
56:ac:af:bc:d1:9c:ea:c9:7e:a6:34:e2:dc:59:b5:c0:06:ff:
01:b1:d4:dd:cc:0b:d5:bf:c1:b3:27:8f:ba:85:bc:0d:88:73:
6a:75:8d:5d:e5:25:92:b1:9a:9e:33:aa:26:f6:30:66:41:ac:
07:8c:5c:77:6b:6f:fa:4f:2b:fb:7b:87:a2:c3:c9:7e:22:34:
d3:fe:61:ce:f9:c4:50:a2:5f:27:7c:bb:22:8f:c8:3b:93:34:
b1:77:13:4d:67:10:86:c5:b0:a6:86:4a:57:72:6b:26:eb:be:
01:21:6e:ce:02:d3:eb:b0:b2:af:9f:17:ed:f6:f2:56:b3:55:
d8:36:b8:08:d5:91:b7:38:c3:ea:5f:2a:a5:97:3d:0a:fc:9e:
47:a6:2c:d7:ce:1c:89:66:2b:f8:5f:28:4f:27:5b:76:b4:9a:
7f:32:a2:5c:71:1f:df:07:aa:11:68:ed:05:c8:95:e2:fc:5a:
7c:39:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:06 2025 by rpki-client