Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: waBzYu8bSxaKQ/MFq6TDolA6+uKhwWhJRbt009NtDgY=
Subject key identifier: D4:59:9E:EB:3C:31:C4:86:11:E6:79:91:C7:F4:20:F6:ED:BF:DB:D8
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 019A71B7A506D8A08524496398D8BFF81ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 042A
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: Q8jZ4zp7KCwcge0vjl9OOJYtIruvyeGcVujEKKVtEzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:06:d8:a0:85:24:49:63:98:d8:bf:f8:1e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=d4599eeb3c31c48611e67991c7f420f6edbfdbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:35:e2:be:8e:0c:7d:63:97:2d:ba:46:c5:
ac:49:db:ac:c6:40:06:5d:2d:39:eb:5b:da:2e:a3:
8a:1a:80:b6:8a:7d:99:4c:9c:8e:b7:07:6a:fe:00:
0a:71:1e:39:68:fe:f8:26:4a:da:19:db:0b:b0:5e:
71:d5:4d:10:25:c7:3f:03:47:b9:3b:a4:c9:cc:27:
39:de:3f:47:9f:58:70:03:bf:04:7c:b1:e4:54:5c:
3a:b2:92:74:3b:7c:f3:c6:00:40:e4:55:73:d5:d7:
88:29:7c:15:db:1b:51:4e:9b:41:1f:3e:04:a9:bb:
97:51:3a:5a:a7:cb:56:5d:43:50:7a:b9:95:33:29:
8e:b8:1d:63:e0:69:60:b6:eb:9b:ef:9f:71:be:2b:
e8:2d:07:17:80:ce:ad:5e:d6:13:5f:fa:2e:94:e1:
89:6b:fb:31:5e:a3:5e:09:33:74:fe:1e:07:28:f9:
29:b4:ae:1b:a8:26:36:ba:51:1d:c5:bc:5e:c8:56:
6c:aa:4f:0c:bf:10:22:f9:c3:11:2a:2f:6f:c6:80:
fd:76:fd:a1:08:c9:94:94:48:26:09:a1:67:e6:34:
1d:38:f7:9e:2d:6a:7f:de:6a:65:30:ec:85:9e:d2:
e8:6c:95:7c:b8:73:f7:8b:e6:1f:dd:fe:c1:60:b2:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:9E:EB:3C:31:C4:86:11:E6:79:91:C7:F4:20:F6:ED:BF:DB:D8
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:93:58:af:6e:7b:2c:d1:5a:1a:25:ea:7a:63:a5:c5:20:6c:
35:03:66:9c:ff:63:4b:e8:ba:54:67:91:48:7e:74:71:7e:c3:
6e:b2:af:5a:54:35:57:78:f0:f1:b1:dc:78:af:dc:2d:e3:5d:
7f:7d:5a:a2:8b:32:01:36:90:bd:55:b7:36:c8:f0:99:ff:92:
8b:25:e1:64:ef:38:d4:cc:5a:6c:ab:12:70:58:43:3e:89:16:
54:d6:9f:dd:9c:c1:38:9b:bc:b3:c7:1a:ec:bb:64:f0:26:91:
ae:e2:87:1c:98:c9:cc:d2:1e:4d:ed:ef:ce:c3:d8:cf:9c:72:
f2:f5:e6:7e:bf:ea:8e:a7:c5:81:dc:1f:55:91:9a:8b:59:ae:
1a:39:9c:a7:4b:74:6d:02:b3:de:ae:f4:ae:69:e1:6e:d6:3e:
a4:6c:c7:7e:6f:82:85:ac:36:b3:f1:1d:57:71:e1:35:0a:d1:
82:f2:fc:85:e7:24:b6:48:bd:b5:07:c7:7c:67:bb:a0:1d:6d:
d6:58:90:57:e9:3f:7a:a3:40:22:5e:a2:69:26:39:9e:3b:e6:
a1:97:aa:10:41:6a:d8:8b:38:d4:d4:23:f6:fd:de:d0:be:ba:
20:44:14:d0:62:00:31:3d:cc:83:f7:53:f2:56:6b:a3:f3:98:
6a:e6:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client