Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: 14UTR3M/vArDlQrB27QwYjc4LjOtEGowSTKC3ph0RJU=
Subject key identifier: 7F:C7:BE:DE:73:85:A6:ED:7D:81:16:BD:85:BC:C4:46:9F:7B:11:44
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 0199FFFEB61A1454D87BFF3A13923A642E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 05:01:46 +0000
Manifest this update: Mon 20 Oct 2025 05:01:46 +0000
Manifest next update: Tue 21 Oct 2025 05:01:46 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: cZ8okJ2eCjVGcyiW/yB8IvUpFkpbYaR0flnqOv+RpPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:b6:1a:14:54:d8:7b:ff:3a:13:92:3a:64:2e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Oct 20 05:01:46 2025 GMT
Not After : Oct 21 05:01:46 2025 GMT
Subject: CN=7fc7bede7385a6ed7d8116bd85bcc4469f7b1144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:3b:44:5a:85:c9:d4:af:e6:4d:0c:0d:c4:
09:3d:f1:08:97:10:0e:3d:d4:bd:e0:ec:93:93:42:
1d:35:42:ab:41:a3:17:3d:5e:72:93:4d:fe:76:60:
fb:74:f4:99:c2:fa:a2:63:78:c3:24:f3:b6:af:d3:
8f:8c:7f:38:5d:23:b2:37:fb:5a:23:cc:42:27:9b:
c6:08:2f:c9:02:18:28:00:b7:d1:06:1f:75:ca:91:
77:bd:81:97:c4:02:4d:8d:e8:10:f4:93:b8:ff:53:
32:92:7c:6f:34:99:38:cf:8a:9f:f1:97:01:91:86:
64:20:72:d2:1f:dd:52:b9:3a:ab:cf:05:6e:60:11:
15:f8:7a:3a:87:ca:b0:9f:0b:84:d0:63:b6:78:27:
52:59:11:d0:6e:bc:d0:63:d6:34:03:ab:bd:1a:c4:
07:fd:f3:f3:a9:eb:f0:52:0c:e1:75:1a:a0:47:ab:
a2:2f:53:0f:5c:14:64:02:70:70:7e:3c:8d:15:8d:
5c:92:f1:cc:9d:73:53:26:09:de:55:97:0b:60:5a:
a5:fa:08:f0:73:38:f0:0e:17:d8:34:af:14:b8:b9:
f4:f5:ef:27:fc:83:f7:3e:27:0d:89:9e:8f:e0:e0:
38:ad:0e:af:54:b4:23:f4:35:f9:55:08:e6:27:d0:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:BE:DE:73:85:A6:ED:7D:81:16:BD:85:BC:C4:46:9F:7B:11:44
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ea:39:3c:2a:c2:e7:67:83:4f:0e:43:94:68:a8:e5:2b:90:
94:a2:00:3a:db:fb:b1:09:3b:6f:5b:88:51:b4:f1:50:2a:c1:
7c:05:b3:c8:d9:bc:e8:6e:45:84:7d:26:d7:5c:dd:6a:c3:bf:
3a:64:1b:fe:aa:0f:f6:ff:a1:35:2a:10:5b:28:57:0e:7b:28:
a0:69:bf:da:82:40:19:fa:56:2e:f3:39:d5:64:9f:7b:af:3d:
18:8f:cf:ca:7b:64:fb:02:ef:bd:91:95:8a:3c:66:77:db:bd:
5c:4c:97:d0:4e:97:20:2d:21:b6:81:8e:ed:19:4f:31:24:dd:
4e:f0:62:00:26:b2:6a:2a:5c:04:97:f6:e0:86:e0:88:eb:ea:
17:89:c3:73:46:f1:21:82:29:7f:d9:5f:ad:2a:2b:33:28:10:
da:d4:95:4f:7b:5d:ce:08:99:69:78:a0:95:ec:d1:dc:ee:4f:
ca:ea:07:a0:5b:cb:5a:33:76:cc:a5:72:23:95:4a:c4:b8:69:
dc:c3:68:1a:15:9d:e8:ab:e7:1d:46:e0:5f:15:f4:4b:e3:36:
fd:7f:c4:84:52:ff:b9:b0:fb:08:71:5d:3c:bd:4f:96:67:e8:
77:22:0b:b5:0d:7a:10:74:48:2e:de:68:d0:22:6d:9a:0f:49:
c0:87:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:15 2025 by rpki-client