Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: YBqNcZL+gyXDa81mtBZAhF27jrQwTOyGieWf7ACdIaI=
Subject key identifier: 44:D8:28:82:3B:0F:41:5B:89:EC:3A:FC:6A:17:F1:F2:38:D2:A4:46
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 0199C4C56E79ED2F78269C61E1BCA5DAF0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 113D
Signing time: Wed 08 Oct 2025 17:01:37 +0000
Manifest this update: Wed 08 Oct 2025 17:01:37 +0000
Manifest next update: Thu 09 Oct 2025 17:01:37 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: oik+iv2UQd7goQQitbBbMJhKS6sKgG6/x62tf1vO8yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:6e:79:ed:2f:78:26:9c:61:e1:bc:a5:da:f0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Oct 8 17:01:37 2025 GMT
Not After : Oct 9 17:01:37 2025 GMT
Subject: CN=44d828823b0f415b89ec3afc6a17f1f238d2a446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:9d:5e:00:bc:af:be:a9:8a:dd:84:43:3c:
64:c6:69:1f:6a:31:58:4c:ac:0e:64:d8:44:31:85:
16:95:ef:87:3e:c6:70:c5:03:aa:0f:c2:5b:08:d6:
09:58:17:68:00:ce:f0:d5:c4:50:8f:1c:12:0b:2d:
1e:8c:eb:12:3e:2c:e0:0d:b2:a1:75:bf:d7:54:bf:
2f:8f:5e:27:af:31:42:81:fc:f2:47:49:15:3a:af:
5e:5e:81:05:40:e7:1c:fc:6f:10:a0:95:8c:e5:85:
a7:98:08:18:12:ec:47:cb:e0:df:24:74:44:8e:8b:
b5:4b:6f:c7:91:85:f0:ea:e9:69:e8:31:6d:1d:f1:
07:08:f3:91:5b:76:86:ce:6e:88:b2:0a:d7:86:35:
48:ca:2b:a2:98:23:7c:0f:96:8a:32:a0:a6:e6:ce:
ed:ac:3d:75:0c:2b:8f:72:d4:a8:86:8a:64:e8:94:
8e:df:11:c6:ec:e3:b9:71:aa:1a:5a:27:ea:4a:76:
73:fe:d7:b9:23:5e:4d:5c:5d:4b:d2:28:5c:51:95:
34:e2:67:f8:20:20:c3:42:95:5a:0f:5f:d4:6c:c0:
e5:ef:c9:b4:21:82:54:a5:73:00:f5:b5:c0:a1:64:
ee:28:47:10:d0:47:26:7b:3b:73:9c:36:04:5f:3b:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D8:28:82:3B:0F:41:5B:89:EC:3A:FC:6A:17:F1:F2:38:D2:A4:46
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:05:2d:94:dc:6c:af:8b:f2:93:15:68:e4:2d:5c:28:a9:85:
37:05:05:d9:62:4f:64:28:56:11:47:50:c3:99:39:b8:6e:1b:
20:3f:ae:df:cb:86:6a:c0:d4:cf:43:6c:05:f3:87:e7:50:06:
e5:dd:b8:48:15:27:99:11:f0:80:c9:70:a9:fb:6f:1b:5d:0a:
00:9a:a5:af:44:af:d2:1d:08:e8:7c:39:53:94:c0:c2:0f:61:
26:65:ae:c5:0d:29:f8:2c:2b:83:47:81:a7:4b:e6:02:8b:a0:
c0:43:0f:a9:f9:7c:09:ce:10:ac:3a:65:f9:da:18:d8:15:9a:
88:1c:ae:1b:4a:53:3a:33:9c:f9:ca:29:12:b6:18:84:82:96:
29:d2:19:16:68:8f:dd:99:3b:c6:be:b7:0d:65:67:47:1c:80:
bf:66:c4:fa:ab:b2:1e:97:c9:3e:cb:d9:4c:48:e5:c0:fc:f2:
7c:de:fc:88:42:4e:45:76:82:13:01:ab:c5:fc:36:b9:60:a6:
a0:5d:7f:4b:e6:35:3f:03:2c:b6:9f:8f:21:bd:a4:ef:83:8f:
c8:ad:39:be:bd:b5:58:6d:77:73:92:d8:03:5e:dc:5c:ae:2c:
ed:46:28:d2:4e:53:f6:3d:ac:48:7b:44:f5:06:bf:01:c3:bf:
fd:74:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:36 2025 by rpki-client