Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: b5zgn7Dn/wmCjCvw/zvb35trlIpkOClQNZc27DQ+xq8=
Subject key identifier: AC:52:31:4D:38:88:1F:07:20:64:91:05:81:69:17:83:2A:8B:38:A3
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0199C60E883B8F6DBA425296D39BB580A93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0DAE
Signing time: Wed 08 Oct 2025 23:01:05 +0000
Manifest this update: Wed 08 Oct 2025 23:01:05 +0000
Manifest next update: Thu 09 Oct 2025 23:01:05 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: CkXPjvE7UXEDo1jnRXYsQP7UvGwYapd4RBJN0pKYR98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:0e:88:3b:8f:6d:ba:42:52:96:d3:9b:b5:80:a9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Oct 8 23:01:05 2025 GMT
Not After : Oct 9 23:01:05 2025 GMT
Subject: CN=ac52314d38881f0720649105816917832a8b38a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:45:be:9a:cd:33:11:aa:cc:93:fc:9b:4e:
b8:92:0c:aa:ed:39:93:63:cf:94:e3:f4:0c:1b:b5:
b6:61:fe:a6:a1:d1:46:da:a1:94:cf:ba:40:dc:95:
7d:ed:53:50:ec:82:80:d8:8c:c4:8a:df:34:8b:da:
11:dc:68:7b:17:8b:7f:1c:cc:aa:a8:df:b8:93:21:
f7:cb:16:fc:47:e8:0f:a4:23:72:da:4e:34:81:3b:
4e:71:65:6f:b6:c5:4e:45:15:30:41:05:6c:48:cd:
61:ec:2d:8c:42:20:d2:c8:e6:a7:2f:d4:78:3e:46:
0a:03:cb:c3:51:96:3e:21:cc:bc:c0:3c:b2:95:be:
f7:58:5d:80:7d:f7:91:7f:b3:18:3e:64:d0:98:30:
80:84:a5:a3:5a:c2:bd:16:8f:6e:c6:95:90:fe:0b:
e4:c3:3c:9a:a4:9a:52:ea:eb:46:8c:ce:9f:83:d4:
02:80:5d:2d:1a:a4:4a:a4:45:03:fb:a4:3b:f9:ba:
05:3b:71:5f:c5:56:b2:a9:52:b3:12:2e:e1:aa:9a:
b1:13:ec:15:b9:3f:f0:ab:e1:c8:38:65:65:2a:e0:
17:08:2d:38:9b:ac:ed:af:8e:78:61:4d:87:9b:a0:
2a:bf:38:61:90:67:2f:99:c5:1b:a7:2f:e4:ed:f0:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:31:4D:38:88:1F:07:20:64:91:05:81:69:17:83:2A:8B:38:A3
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:51:10:4e:35:b1:00:2f:bf:48:fe:9c:30:18:f3:a6:4c:74:
ad:4c:a0:55:b1:9f:ae:e1:9f:24:01:51:52:81:db:7b:c3:5d:
d8:24:b1:83:fc:67:ea:17:0c:22:db:c1:aa:85:13:d2:27:25:
af:8d:61:c8:7a:4d:9d:2a:5f:de:89:b8:c7:05:5d:3f:ed:73:
3e:bf:85:52:4c:c4:9f:cc:f6:70:02:b4:3a:ea:16:12:58:5c:
30:4e:50:36:27:7d:9d:c1:b3:96:88:e2:63:a9:14:3d:94:3b:
3e:82:a1:96:48:7a:a8:65:3c:d3:e2:dd:26:a1:2d:88:36:fe:
14:7c:e7:45:12:ae:17:b7:72:4c:6e:ea:9c:29:eb:3f:04:37:
d5:96:9d:dd:aa:f6:02:48:61:3b:c6:6b:d6:0f:e3:c8:9f:7c:
77:90:1f:25:7b:72:68:a6:31:4a:76:79:1d:5c:b8:0d:a7:c9:
e5:5d:48:e4:28:d3:78:48:79:47:18:af:3a:92:55:d2:c8:c8:
f0:ae:f4:33:2a:fe:22:e8:d8:82:30:7c:8b:05:ea:0e:fb:05:
b2:94:c1:74:34:94:4b:59:2b:bd:65:10:d5:14:cb:56:51:17:
77:61:94:d2:6a:9f:99:b0:52:e0:e6:0f:6f:d2:f7:59:46:2b:
60:32:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:55 2025 by rpki-client