Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json)
Hash identifier: vIQX1Yx2Ljo9Mc4XK2rD6RMo60qTddJkgDMQ4pvziSw=
Subject key identifier: A9:41:9C:3B:33:C4:CB:77:34:4B:CE:51:9F:DD:E5:D8:E4:46:97:6A
Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Certificate serial: 019A228935E4BA48EA5A5C8E4B788CDBEFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
Manifest number: 0109
Signing time: Sun 26 Oct 2025 22:00:08 +0000
Manifest this update: Sun 26 Oct 2025 22:00:08 +0000
Manifest next update: Mon 27 Oct 2025 22:00:08 +0000
Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=)
2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: l7rWSlIsOLu4Nlh/3JtsV+xgzwuALjfTk8uo2NKXC4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:35:e4:ba:48:ea:5a:5c:8e:4b:78:8c:db:ef:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Validity
Not Before: Oct 26 22:00:08 2025 GMT
Not After : Oct 27 22:00:08 2025 GMT
Subject: CN=a9419c3b33c4cb77344bce519fdde5d8e446976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:73:6c:05:e9:66:8c:ff:73:ee:59:80:e9:
3c:ef:94:1c:20:e1:c0:e2:d6:d1:bd:76:29:81:bd:
64:91:69:c8:3a:ab:50:79:d3:ba:c5:b6:ed:b6:18:
22:ac:f9:fa:b6:66:27:e9:fe:d4:24:88:c2:55:08:
23:2d:90:03:4e:10:5c:c0:0c:d2:0f:d0:67:bc:53:
42:13:10:0f:3f:0f:e2:f6:8f:e1:88:33:37:40:96:
9d:f6:49:b1:14:9b:2d:f0:fb:b6:d8:f3:db:66:1b:
34:4d:62:6b:70:bb:01:ff:5d:11:54:11:13:1c:63:
fc:93:d8:71:b0:e3:64:8f:e2:59:84:63:f0:d9:72:
51:f7:00:03:f3:00:69:80:ca:31:98:e8:76:54:69:
07:f4:39:0d:71:dd:0e:44:cc:df:6e:f4:e0:b6:36:
1d:5c:30:4e:5a:01:ff:02:35:ca:98:23:d0:9c:4b:
d3:fe:3d:84:3a:89:5e:1e:f1:d1:05:0d:79:85:5e:
44:4e:eb:37:bd:71:2e:a7:99:48:aa:91:25:6e:16:
01:92:90:26:75:48:77:2a:c4:a0:02:97:be:53:4a:
66:05:9c:a9:d0:36:e7:92:e7:44:14:79:0d:c2:3a:
04:cd:8f:15:d6:c9:e7:05:f1:3c:9d:c3:53:c5:26:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:9C:3B:33:C4:CB:77:34:4B:CE:51:9F:DD:E5:D8:E4:46:97:6A
X509v3 Authority Key Identifier:
keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ed:7a:2b:e9:d8:88:db:37:3c:79:f5:8a:de:c8:c5:81:11:
33:6b:38:98:8d:f9:69:92:c5:f8:fb:d1:b3:0c:48:67:57:65:
7a:fa:e2:ac:13:3f:82:64:e0:f4:8b:60:d5:b4:20:a4:99:89:
3c:a9:63:fd:0a:ad:75:d6:b4:65:bc:24:fb:70:e8:64:ca:64:
74:98:6b:87:1e:18:32:cb:93:dc:f2:48:e9:d7:bb:15:7e:56:
ae:a9:4c:f1:5d:b6:22:2d:e9:f6:b8:d1:47:94:d5:13:45:31:
84:0d:a9:ad:e8:78:00:4c:9b:1d:61:c1:12:97:d1:01:b1:22:
8c:76:3c:e4:cb:d3:12:08:0d:e9:be:71:42:85:da:29:00:81:
f9:f2:d5:96:37:af:2e:6e:7c:16:90:65:fa:00:e1:19:b5:c7:
2b:e1:ad:c7:77:1e:cd:e9:fc:64:d1:75:55:f2:4f:e5:b1:e4:
3c:b0:53:7e:ac:04:f6:91:b8:d5:b6:15:5e:97:8a:d3:04:9f:
98:80:a2:4a:d3:49:19:08:c5:95:d1:cb:82:5d:ee:fb:4d:a8:
08:ba:1c:d2:3a:50:13:1d:74:d3:dd:33:68:24:04:68:90:2a:
28:61:ba:b7:cb:44:c0:40:2d:d4:e3:11:17:b2:0a:3c:9f:9e:
63:c8:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 08:28:45 2025 by rpki-client