Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: vyvjoK04gm6a6hAHPUgw3MYIX5wRIHEDAZUMvy6uC7o=
Subject key identifier: 10:A0:B0:F1:4E:D5:D8:67:C9:AA:BF:37:95:96:6A:B3:BC:AB:3E:6E
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 0199C48DE6BC8DF67D4AA91A453A84242BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 06FD
Signing time: Wed 08 Oct 2025 16:00:57 +0000
Manifest this update: Wed 08 Oct 2025 16:00:57 +0000
Manifest next update: Thu 09 Oct 2025 16:00:57 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: Vo9dot4LZFqjFiS8q6afCxu4ztML9BJysU3j01kZuuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8d:e6:bc:8d:f6:7d:4a:a9:1a:45:3a:84:24:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Oct 8 16:00:57 2025 GMT
Not After : Oct 9 16:00:57 2025 GMT
Subject: CN=10a0b0f14ed5d867c9aabf3795966ab3bcab3e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:80:8a:5f:6b:38:b1:cc:be:5b:f8:58:7b:
8d:e7:15:c9:1e:69:b4:66:67:2e:6d:bf:ea:59:17:
02:9f:6e:4c:da:89:23:b3:5c:fa:52:7b:17:e3:69:
a0:11:f0:64:81:fb:a2:90:71:06:32:fa:0d:0a:50:
4b:b6:f2:f7:72:3b:e8:32:cb:b3:a5:c3:9f:f6:f4:
05:d8:8e:a1:24:41:e4:7e:fa:67:fa:44:74:66:a8:
e5:dc:1a:d4:a6:a6:39:e0:7e:5e:69:9f:db:05:e0:
71:34:0d:2f:20:e0:1b:9e:af:0a:c1:95:98:61:8c:
4c:d6:ef:60:04:04:41:2e:d7:e4:8d:9c:70:17:f4:
2a:12:50:f8:56:8f:c8:3b:f1:c7:af:55:c0:83:40:
c0:d2:5a:36:f2:3b:1e:9c:3b:a7:a9:f1:11:31:06:
80:b0:d2:3c:5b:fa:a1:7a:6b:e4:12:44:68:4e:13:
05:31:a2:02:af:8c:a2:60:6c:82:48:91:2a:9f:61:
01:9d:33:b1:d1:02:ce:ce:fd:d6:3b:fc:9f:2f:22:
9f:cd:66:80:7a:bc:c0:ef:9d:71:c8:96:4a:dc:b1:
76:67:0b:a3:43:96:d0:e6:3b:53:89:b6:d0:87:73:
aa:9e:67:4f:35:04:59:2b:60:31:49:8a:a3:17:e8:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:B0:F1:4E:D5:D8:67:C9:AA:BF:37:95:96:6A:B3:BC:AB:3E:6E
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:4a:ab:b9:07:f7:c9:c4:7f:8c:f5:bc:2f:21:8b:07:0a:
ee:fa:12:da:96:cf:b2:bc:39:49:06:0d:0e:85:48:6a:b7:6b:
c7:6b:d1:84:43:ff:46:d4:02:6d:da:8b:54:4d:8e:a5:6b:77:
e9:a1:34:f8:3e:7d:f5:2f:cb:d9:59:78:cc:3d:23:57:b5:ab:
72:ca:01:55:63:0d:c6:96:66:74:bc:77:4f:53:8b:c8:ce:36:
88:3f:59:f0:42:1f:d7:02:e4:98:df:35:f3:92:03:84:71:de:
e9:69:75:46:9b:9f:2f:7c:05:70:c8:92:8a:f2:89:fd:38:4c:
0e:92:51:d9:00:4b:71:49:e9:64:01:4f:06:07:8f:a6:a6:dc:
e0:bb:3e:a9:1d:3d:69:4f:f9:5b:60:0a:5e:a8:dc:6a:a5:41:
47:8f:66:9c:d1:f6:c0:29:21:ee:e3:45:ef:fc:df:81:e8:8c:
4d:d8:8f:dc:f0:39:91:2e:a1:e6:44:01:f9:14:6a:b0:e2:c9:
62:b8:fa:44:6c:5d:20:e7:bd:e6:42:04:d7:f5:4b:02:69:ee:
1f:47:9f:47:23:7d:4c:b2:64:d7:34:23:e1:55:de:39:85:b7:
6e:d8:d6:ff:6c:af:92:a0:7f:bc:58:fd:82:75:05:6a:72:a6:
d1:5c:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:14:49 2025 by rpki-client