Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: dTV1f5hntS1YpAzeRoRgDtFcEz9pVlaC5KvIrTYP2rI=
Subject key identifier: 2E:0C:1E:1F:02:12:B0:0B:EF:E0:46:BC:37:5F:64:2E:4E:AE:17:1F
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 0199FFC87687FA6D0F6B7710A09D5BEA048D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0CDA
Signing time: Mon 20 Oct 2025 04:02:31 +0000
Manifest this update: Mon 20 Oct 2025 04:02:31 +0000
Manifest next update: Tue 21 Oct 2025 04:02:31 +0000
Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: 9UwX9brxz9iEdJRiUAQwhy9s2BBkylA4ErrD7frKzbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:76:87:fa:6d:0f:6b:77:10:a0:9d:5b:ea:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Oct 20 04:02:31 2025 GMT
Not After : Oct 21 04:02:31 2025 GMT
Subject: CN=2e0c1e1f0212b00befe046bc375f642e4eae171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fa:29:7a:66:f4:82:0d:0e:30:29:c9:79:28:
42:28:29:3e:31:ea:1e:f5:17:87:54:1f:a6:a1:78:
4d:42:a9:24:0b:ba:fc:51:b0:9c:21:31:06:2b:a7:
b6:d5:ac:c6:e0:1c:57:c4:2e:f8:9b:91:fc:8f:74:
a9:79:59:13:68:95:04:6c:31:e1:b7:3d:22:dc:ef:
1e:43:1d:e3:d6:83:55:6d:d4:81:5f:27:4a:1a:fd:
fb:c4:15:41:95:48:05:8f:2a:b6:2e:dc:63:33:7a:
4f:db:db:6e:04:46:8b:98:61:ec:bd:f9:52:d7:ee:
e2:ff:ec:92:f9:1f:f6:b4:f8:bb:ff:ad:0e:8c:75:
a8:09:c8:5c:7a:0f:6a:1c:da:fd:c4:67:cd:c7:9d:
f5:ec:bc:63:18:73:78:72:a7:81:58:70:1f:c3:cf:
61:2f:e9:65:93:2e:8f:31:e8:86:38:6e:0b:58:d7:
f9:42:f5:f3:6e:05:e9:5f:62:95:ec:07:fe:3b:c5:
2e:a6:9a:df:4d:13:c2:43:e3:35:b2:4e:a4:3c:e4:
13:39:87:f1:48:6e:15:52:d8:42:d3:d5:99:3b:88:
8f:82:74:fd:11:8e:8d:2f:0e:c2:dc:97:6c:c5:35:
a4:fb:76:72:64:89:95:a2:16:9b:9f:82:8b:77:81:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:1E:1F:02:12:B0:0B:EF:E0:46:BC:37:5F:64:2E:4E:AE:17:1F
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:86:9c:8b:bc:7c:04:46:1f:7c:4a:7a:62:56:4f:87:b4:0d:
5d:91:60:61:f7:05:32:c9:57:d6:48:12:4b:23:b2:19:c4:93:
34:05:58:ab:7f:e7:5f:57:4f:fd:39:c5:a4:a7:85:a6:2a:86:
52:95:69:d3:d8:54:6c:88:40:67:a7:98:2c:d5:13:af:65:63:
e0:25:f5:b7:bb:e7:4e:0a:ae:7c:59:41:d5:27:c7:6f:e2:66:
eb:c4:71:f2:b8:3e:00:a1:fb:84:47:8a:9a:12:8b:40:0e:20:
e2:22:6f:b9:a6:5c:10:b0:fd:f8:92:53:6a:64:09:a0:a3:cd:
1e:90:b6:0d:ec:c0:24:7b:a1:9c:cd:32:01:40:cc:17:e2:78:
6e:85:46:ec:f5:b2:35:de:36:02:01:d4:42:1a:c6:3a:d2:46:
2a:6d:fb:0a:c6:91:b5:4f:07:89:fe:1d:aa:5f:6b:0e:6d:ee:
c4:bb:b0:ea:0b:01:8c:2b:42:59:9f:12:a9:d5:61:0e:3c:1c:
35:44:60:60:eb:15:35:9d:44:74:84:40:99:b5:21:a0:1e:92:
b7:ed:d0:67:50:44:10:87:cd:24:65:95:77:1f:b9:67:e5:e6:
93:2f:8d:cf:77:82:72:ea:a5:e4:eb:db:c9:ec:40:58:09:98:
1c:a4:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:31 2025 by rpki-client