Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: ZFj7J6HVY1rk4SQqDT6XNYCvR9iOJ7TNyfEtKx2ViUE=
Subject key identifier: 08:49:6D:4D:96:09:58:5C:8C:37:F3:D5:1D:64:0F:2A:DB:B5:D7:18
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 0199FC8F9E0AD19B9019A144E8C78567BC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0B9C
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: gE72a1hI3+0JcKehXS/NVNKwhaRTpZ5b3LY2ddfrfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9e:0a:d1:9b:90:19:a1:44:e8:c7:85:67:bc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=08496d4d9609585c8c37f3d51d640f2adbb5d718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:2e:b1:f9:c8:da:cc:9f:69:78:d0:20:1a:
b2:52:48:24:73:18:27:91:3b:ad:27:d8:ac:9a:49:
85:bc:20:97:21:81:53:94:f0:0b:40:37:c6:86:d6:
aa:92:1b:57:5c:38:b4:ec:aa:af:8a:76:7d:56:2a:
3a:de:9f:a7:14:b0:52:ca:fa:26:27:aa:55:2a:56:
a3:e3:17:b9:64:dc:20:83:1a:40:10:44:6f:83:e8:
e3:50:32:ff:28:93:21:ec:5f:54:6e:6d:2e:db:e7:
7d:13:e9:90:4c:c3:f1:6e:3a:c9:77:72:92:07:b5:
02:89:45:ad:47:b1:ec:12:5a:9a:b9:50:da:39:90:
a1:9b:b6:28:b9:21:aa:b7:ab:cb:26:35:fe:07:17:
23:e6:2e:c8:c6:37:49:27:e3:dc:c4:e9:54:fd:7b:
ac:cc:e8:fd:1e:31:c2:e9:a1:27:37:41:ca:c3:72:
6a:c0:fb:96:bd:6d:98:88:68:2d:a4:4a:ec:92:4d:
6a:42:e9:33:f1:f6:79:c4:8a:d2:84:08:31:ba:e3:
d5:43:b7:72:35:8d:f7:e3:f0:96:67:6a:c4:db:f1:
15:4c:bc:fd:d8:2c:e9:b3:dd:b3:e6:eb:e7:3a:22:
d2:c7:ca:1d:20:50:cc:47:2f:62:9e:e5:20:7c:28:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:6D:4D:96:09:58:5C:8C:37:F3:D5:1D:64:0F:2A:DB:B5:D7:18
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:53:cb:e0:1d:e3:2d:91:32:b1:76:96:34:60:ba:94:f9:
90:b3:b2:31:4f:e0:62:12:3b:f0:96:38:3e:03:3f:ef:95:e2:
93:59:3d:ba:76:f0:dd:69:e7:13:1c:dd:cd:4b:ba:10:b1:92:
67:6f:fc:d4:39:d2:4a:1f:47:47:83:8c:c4:99:a3:e9:d6:44:
ea:76:88:46:43:6e:bc:56:a8:90:dc:02:4f:cc:bc:da:13:d6:
6c:4a:ba:86:32:98:92:67:ca:8d:10:a3:7e:2f:30:53:f1:31:
5d:e9:22:b4:84:fa:d9:74:79:2d:a9:67:52:42:48:94:95:10:
ab:c5:08:2b:7c:9d:75:4d:6c:85:31:8e:2c:fa:89:13:93:fb:
cc:ab:3e:6e:3d:8d:bd:71:5b:ab:48:4b:81:c2:bb:11:41:56:
b8:7b:a8:0e:11:28:4d:8b:8c:a6:a3:8d:6c:73:0a:9d:f2:d2:
96:6f:09:95:3f:ac:0c:f3:aa:a6:d6:7f:2d:22:48:f7:0c:2a:
41:d6:b5:01:39:77:38:4b:7c:94:6a:9e:d4:26:34:27:7f:f6:
fa:a0:40:40:e2:99:f0:64:31:de:43:30:63:c5:6c:93:9f:4a:
a6:95:0d:90:a7:dd:3f:98:2e:6e:bb:25:1e:b9:9a:38:c1:dc:
43:b8:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:25 2025 by rpki-client