Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: DfJiwS+aJXymtKoD3nPK6QN9q8wmnG0QpKeBPubLfOQ=
Subject key identifier: 6C:0D:65:DD:DF:E6:58:3A:B7:39:F0:ED:4F:57:B8:B1:42:F5:2B:EC
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 0199FB7C84CD63D8C647243812DB0B1438A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0C56
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: ij7jb0jmd1J6BEtBeaTdFdAr8ZWPgBnDVA558L3jic8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:84:cd:63:d8:c6:47:24:38:12:db:0b:14:38:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=6c0d65dddfe6583ab739f0ed4f57b8b142f52bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:b4:e7:d7:71:20:69:f2:28:4e:45:2e:86:
d1:f1:31:f0:eb:80:81:3f:4c:8c:e9:76:d3:c2:8a:
fc:58:43:4f:c1:4c:e2:a6:16:c7:fe:3f:e1:13:d0:
48:6d:1b:19:94:1c:60:8f:bc:8a:75:4f:6f:e5:72:
23:ce:ff:28:27:ba:42:76:a9:8f:c9:ec:84:c9:d5:
30:71:2b:1c:58:c0:96:32:7c:fb:fe:2d:65:e5:48:
7d:b3:a7:bf:73:08:2c:21:06:9a:55:22:55:f3:4f:
ec:7f:07:f7:2f:13:9e:6a:b1:43:d0:1f:29:2d:9c:
23:23:03:8f:18:d5:48:f1:44:26:d6:38:d9:3f:80:
21:2b:b0:08:70:f1:5f:c3:66:fa:ab:66:33:55:3a:
b1:12:00:45:de:ab:be:2c:de:02:9b:be:18:d3:ef:
f4:85:cf:4f:d4:49:86:61:7f:55:2b:5e:2a:74:68:
b1:26:c3:93:8c:b2:2d:34:de:15:74:e8:dd:f6:5a:
36:5d:a6:b7:e0:46:91:47:de:27:a2:cd:df:f0:f1:
29:19:e4:13:09:98:13:15:7e:4f:24:ee:04:e6:33:
41:f6:41:7f:85:c6:be:21:08:22:0d:03:8e:57:4b:
ae:28:d4:e5:15:c6:b8:52:8a:ef:83:b0:4a:d2:24:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:65:DD:DF:E6:58:3A:B7:39:F0:ED:4F:57:B8:B1:42:F5:2B:EC
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:18:f2:bd:6c:cb:4b:63:18:7a:a3:5d:cd:57:a4:87:8c:0d:
2a:83:02:d9:53:22:f9:91:be:1f:76:5e:76:28:56:1c:73:9d:
44:12:5a:8b:64:1a:a5:7d:9f:8d:34:c2:b3:23:b2:5d:81:a0:
82:f1:b3:ad:1c:f1:25:a1:9b:c7:86:a2:90:30:d0:44:60:8c:
e2:82:d1:7a:63:80:82:88:25:7a:52:f7:b1:60:5d:68:3a:87:
65:20:01:5d:c2:aa:29:24:64:ac:a6:b0:bf:df:e5:e8:84:95:
59:0b:f8:a3:7b:d2:2b:c5:86:67:1a:d7:59:34:ea:16:e1:84:
48:d7:9e:25:69:65:e7:a0:dc:6c:5d:f6:cd:54:32:82:01:b7:
29:db:cf:e8:51:b5:9a:9d:6d:43:1f:8f:18:5e:eb:fe:25:5c:
25:84:87:2c:82:4d:08:51:10:a2:42:c1:30:a4:9c:03:14:c5:
f2:73:a6:80:78:a5:4c:6d:0d:d6:a4:61:ca:8d:0a:26:9d:6d:
f4:8b:f7:14:f7:99:7d:ec:32:b1:5d:43:16:4f:7e:d1:17:c6:
31:a7:49:e6:8a:93:20:de:eb:d9:e1:76:cf:45:e5:38:28:bd:
d2:5c:5d:04:17:20:55:e5:bc:34:32:22:c4:79:44:f7:a9:c0:
06:d9:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:41 2025 by rpki-client