Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: zBFx79I2cdUqWvKVLKOVpxoSQSF9FRy0WBURCXI/w60=
Subject key identifier: 88:10:2A:CB:AD:89:5C:28:83:A4:F0:BD:7A:2A:1F:B7:60:AC:63:77
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 019A228AC02EBF5B05A282A17690B28E5B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 0309
Signing time: Sun 26 Oct 2025 22:01:49 +0000
Manifest this update: Sun 26 Oct 2025 22:01:49 +0000
Manifest next update: Mon 27 Oct 2025 22:01:49 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: R/wA8CD7ETgou72EY9jhomK1bG5Ct8ZI0hFa7tKdxwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:c0:2e:bf:5b:05:a2:82:a1:76:90:b2:8e:5b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Oct 26 22:01:49 2025 GMT
Not After : Oct 27 22:01:49 2025 GMT
Subject: CN=88102acbad895c2883a4f0bd7a2a1fb760ac6377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:b5:02:02:13:4a:7a:92:af:ee:65:e6:31:
e2:6a:82:52:f2:19:bd:fc:22:1e:87:58:9b:5d:6e:
5b:d7:08:f4:2b:db:63:52:a9:1c:50:de:80:21:96:
0f:50:6a:7c:93:76:7b:65:2c:81:a3:a9:58:69:96:
28:5f:54:58:f4:53:70:11:dc:81:bf:54:5e:18:14:
88:f5:ce:a5:e9:1d:be:f8:f5:a0:c4:9b:94:fd:ca:
48:65:52:25:1e:c4:05:73:ad:5b:2d:46:9f:70:92:
f7:e2:5e:a6:a3:d8:81:3a:d5:62:2e:98:dd:7b:3a:
b3:04:92:c3:b6:ca:85:bb:9b:be:65:aa:53:e1:f9:
40:9b:99:e2:2b:18:4d:41:e4:a6:7c:71:58:50:ef:
4d:7d:68:02:f9:3c:0f:a1:a8:cb:22:a2:17:a6:59:
a6:b6:68:68:c5:ac:8f:36:2f:95:4f:d3:f8:10:be:
a6:b4:bd:8b:00:ec:1a:56:a0:60:59:ce:af:a7:5f:
a6:4d:0a:cc:33:dc:77:8b:30:ca:3e:9e:84:6b:d1:
99:54:1e:15:2e:88:f3:0a:1f:e1:a0:1d:be:21:0c:
3f:af:26:33:86:9b:85:17:c1:50:08:79:82:d8:86:
5e:c1:e1:35:0f:8c:36:3d:fb:2f:a7:9a:10:16:ba:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:2A:CB:AD:89:5C:28:83:A4:F0:BD:7A:2A:1F:B7:60:AC:63:77
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:06:7a:31:57:97:49:af:91:42:69:3a:94:fe:c6:f5:50:
0a:f1:ab:c1:25:e4:18:2b:b6:e9:e6:a7:83:a5:c9:a0:e6:55:
d3:00:22:e7:46:65:8c:08:ee:58:94:8a:a7:58:0a:78:9a:6a:
f1:bc:71:fe:eb:5c:86:2b:b8:98:55:f7:5c:2d:a7:9c:ab:c3:
f6:aa:43:18:1b:cc:e9:7f:d5:8e:4e:16:f1:73:b7:06:5f:e5:
84:4b:19:56:af:4b:d1:e8:42:c3:46:44:bf:52:91:57:bf:81:
ff:e0:10:3a:6f:33:71:c6:60:c2:98:06:6b:e4:fd:7e:0a:3f:
db:ae:30:55:ab:30:0d:1d:c6:17:93:12:0e:00:b6:4f:d3:f8:
a0:eb:a9:82:32:c3:cd:34:31:f4:7e:b3:f7:ec:bb:bf:56:6b:
f5:d6:37:88:9d:27:d2:01:5e:57:c4:f6:9f:37:46:03:90:8c:
36:90:31:28:26:6c:bc:2f:82:a9:67:ee:38:11:db:e8:68:31:
5f:db:2f:8a:bb:76:e9:e2:d8:d3:76:ef:49:ff:af:95:6d:bd:
ef:af:1d:ae:1a:71:e7:dd:04:e4:a3:b6:76:24:c1:8f:fb:29:
20:f7:e9:a6:21:bc:ed:95:a3:ea:10:22:fe:be:c2:5b:e7:95:
2a:d3:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:00 2025 by rpki-client