Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: HPaKJHJRBK/cqGxrXMNXotNVL+USNwCieUG2WNRoafY=
Subject key identifier: CE:CF:74:35:2F:10:9A:E5:94:7C:E9:44:A1:65:21:1B:6D:59:9E:F2
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 0199FE7D93BEF82EAB0FBEC471F97C3F247D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0CD1
Signing time: Sun 19 Oct 2025 22:01:06 +0000
Manifest this update: Sun 19 Oct 2025 22:01:06 +0000
Manifest next update: Mon 20 Oct 2025 22:01:06 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: e17XkFab1O6QY7CHVW+1KoBNKi+EUGhOatZ99i5AYek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:93:be:f8:2e:ab:0f:be:c4:71:f9:7c:3f:24:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Oct 19 22:01:06 2025 GMT
Not After : Oct 20 22:01:06 2025 GMT
Subject: CN=cecf74352f109ae5947ce944a165211b6d599ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:5b:b3:1a:97:03:b2:04:e4:5a:ce:0a:83:
6f:26:79:aa:a4:73:8e:27:b5:90:b6:e8:3b:71:60:
ce:71:af:08:30:70:21:9e:80:f2:b9:70:5a:ad:7b:
b2:b1:46:87:51:38:a2:aa:a0:5a:b8:4c:ee:3e:45:
a7:58:97:5d:f2:39:ad:95:37:69:41:b5:66:84:ba:
0f:69:43:8c:50:6b:85:3d:40:9a:ad:ba:51:57:55:
58:2f:04:40:96:4f:42:e7:9a:77:3f:dc:eb:ec:45:
6e:da:e0:21:9e:2e:8c:4b:e0:5b:4e:20:3b:70:41:
f6:7e:6a:59:96:8e:a8:18:af:df:e7:f9:55:94:77:
55:c5:80:bc:6d:f7:a6:ab:0c:95:4f:10:b2:97:7c:
c4:5c:be:0f:c1:97:7d:1c:71:20:2a:6a:77:f8:48:
38:7a:c6:93:5c:7c:28:d6:30:82:10:94:14:f0:51:
cc:63:5c:db:17:5a:5f:c0:b1:ad:f5:ee:b5:21:af:
0e:8b:75:4b:1b:b2:77:de:b5:26:b0:ad:b5:08:ac:
7b:60:37:52:55:f1:49:f7:62:85:49:a6:08:ff:44:
21:46:4c:21:08:94:2d:dd:48:49:65:58:50:a2:0c:
d0:29:e2:c9:c1:c6:b8:02:18:da:40:b0:20:03:fc:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:74:35:2F:10:9A:E5:94:7C:E9:44:A1:65:21:1B:6D:59:9E:F2
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1b:ef:0a:7c:df:d7:a3:d5:21:71:66:97:36:08:15:79:15:
a1:26:81:4d:71:7f:91:0b:87:3f:38:fc:b0:76:97:22:ae:74:
d3:12:7d:92:2e:fd:a4:b7:de:2f:21:9d:11:98:4a:3e:5e:fa:
f4:43:57:6b:6b:84:a4:68:4e:39:e0:47:67:ab:11:e7:87:09:
c9:55:05:24:df:e3:a8:42:85:08:85:70:53:50:96:79:0c:a6:
81:5e:63:37:cb:17:f4:8b:7c:33:1b:ef:78:6a:08:e2:33:15:
10:8c:1c:e9:ee:e1:95:72:49:92:d5:26:fd:c7:f6:9a:68:7d:
5d:99:cb:57:bd:f2:c0:4c:30:26:c7:5c:97:48:1a:8e:fb:c2:
f3:1b:18:ee:cd:58:db:b3:42:2d:21:7b:2b:fc:15:fe:f2:ae:
8b:ee:a2:df:a9:2d:71:b7:8b:1b:a3:46:c8:d4:26:6d:06:df:
44:a0:0d:03:ea:fd:0e:23:d4:f4:67:03:18:ad:8f:5f:9f:2c:
a7:d2:28:2d:fd:71:67:84:be:a9:b1:1d:62:be:34:e7:52:52:
cc:40:b1:c6:d6:04:6a:6e:ad:83:33:5a:ee:66:2d:75:47:4d:
0c:58:37:6a:f9:c4:e3:94:d2:3f:33:44:fe:6e:0d:d8:37:a9:
db:22:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:22 2025 by rpki-client