Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: X168d8yhLN3EfMCJemDkuORn+tsWsYarx55WaILZXuo=
Subject key identifier: 2C:63:BB:93:9C:34:0D:59:31:6E:ED:80:C6:50:30:CE:F1:AD:6B:B6
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 019A236553611F62DE7D4344FC38ED6FE77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 129A
Signing time: Mon 27 Oct 2025 02:00:34 +0000
Manifest this update: Mon 27 Oct 2025 02:00:34 +0000
Manifest next update: Tue 28 Oct 2025 02:00:34 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: DmdEmZm8Y0C84EgXQBDwqwvTm7OXOJOAgmrQHjGqyP4=)
2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:53:61:1f:62:de:7d:43:44:fc:38:ed:6f:e7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Oct 27 02:00:34 2025 GMT
Not After : Oct 28 02:00:34 2025 GMT
Subject: CN=2c63bb939c340d59316eed80c65030cef1ad6bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:c2:e3:14:76:8c:89:01:6e:f4:89:48:90:
5b:a4:db:6a:fd:7f:55:68:b0:ef:c5:71:7d:33:9c:
df:e2:51:78:f6:d5:8c:8a:66:06:73:13:f4:57:10:
9e:98:e2:99:ea:62:80:9f:7b:53:a2:46:f0:02:01:
c7:81:d3:86:21:4a:f1:fe:1b:b7:4c:9e:da:40:1c:
90:3c:e7:b4:cc:75:ef:c0:a4:41:71:e9:09:2d:3e:
a2:c4:d4:26:84:50:c1:a2:2f:4d:32:23:91:cd:05:
5b:f3:4e:a3:9e:09:3e:80:8b:cb:6e:75:39:ca:48:
cf:d8:0e:8c:17:62:ec:77:e7:65:67:c8:b5:5a:87:
01:ed:7c:ef:58:6f:94:1a:e7:0a:08:53:aa:62:e2:
57:67:64:01:e3:ed:e8:48:db:c0:b3:41:0d:c6:59:
9d:8d:13:9f:d8:51:1f:d2:20:54:7d:85:81:c0:f7:
49:1c:2d:5b:10:47:c4:5d:34:14:63:16:5a:78:53:
9d:d1:c6:54:5a:4a:84:c2:b2:a7:99:01:3c:8e:21:
71:ae:ba:c3:8e:f2:ff:69:f5:40:c6:a4:00:d6:29:
e9:6a:77:8f:76:e3:60:2a:13:c7:2e:db:c8:c0:f1:
84:4f:f9:82:94:3a:81:35:be:76:f4:c0:d8:a8:4f:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:63:BB:93:9C:34:0D:59:31:6E:ED:80:C6:50:30:CE:F1:AD:6B:B6
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2b:5a:df:b6:e2:db:a3:9b:5e:4c:6e:3a:4a:f5:03:08:bb:
d5:f0:d8:52:2d:88:65:81:68:76:02:fa:88:03:dc:c9:cd:80:
fc:c3:c2:06:a1:f0:26:05:63:c4:58:70:e7:aa:fc:d1:f6:94:
42:19:27:2f:3e:ca:d4:9c:4b:51:45:8c:ef:7d:e8:57:19:a3:
c2:6d:f1:7d:5e:65:f9:ef:03:e1:30:59:32:47:92:57:44:9a:
48:b6:21:a3:36:b1:8a:b3:08:b2:26:06:46:8e:71:83:ba:19:
b1:e9:1f:5b:fb:9e:63:71:72:85:d0:96:f9:92:a7:5f:47:53:
bb:0b:eb:32:2a:38:27:e8:9f:c2:0e:28:1d:9f:d1:f7:75:00:
8b:09:e6:74:b2:9c:8f:5f:83:04:ea:56:bd:74:51:ba:28:fc:
59:f2:61:ed:ef:d0:5a:cb:05:6d:ca:3b:6a:c3:a1:2e:d8:55:
96:cc:9d:9d:73:8e:12:ba:50:1a:e1:f9:88:82:b2:cb:fb:c7:
7d:c2:80:97:8e:09:af:d5:db:5d:63:74:b2:c3:a5:87:17:86:
54:aa:7e:b3:ed:50:33:64:c4:ac:03:fc:30:f2:20:9d:cc:b6:
8d:ed:25:4c:73:3e:c6:2f:7c:f1:fd:94:2d:1b:c4:d1:5d:ba:
9a:16:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:49:06 2025 by rpki-client