Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: E9zLXzkzsNhmpJtpOEn8BxFRcxCaq39t/I8uRxM2fKI=
Subject key identifier: 5E:6C:8F:AB:BB:F0:04:9C:87:D4:9F:39:D6:84:E9:92:50:85:57:4B
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 019A23650B89FBCC362F43CD3E5EB419519A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0AF2
Signing time: Mon 27 Oct 2025 02:00:15 +0000
Manifest this update: Mon 27 Oct 2025 02:00:15 +0000
Manifest next update: Tue 28 Oct 2025 02:00:15 +0000
Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: e2oXtnrHofDO5tdsuscyCYoE3r8Suq29jga4hj2VGy4=)
2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:0b:89:fb:cc:36:2f:43:cd:3e:5e:b4:19:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Oct 27 02:00:15 2025 GMT
Not After : Oct 28 02:00:15 2025 GMT
Subject: CN=5e6c8fabbbf0049c87d49f39d684e9925085574b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:c9:13:1b:a2:1c:35:f4:8f:30:59:e4:ed:
02:21:af:dd:cb:e3:12:aa:ad:4c:6f:39:f0:a9:25:
a5:14:54:bb:21:2b:fc:35:08:42:0c:89:16:c7:7d:
a2:19:e0:08:41:47:a7:15:60:1c:c2:f5:34:fc:de:
ba:84:21:8a:05:2b:0e:26:f1:bd:30:40:ae:20:47:
c4:7a:5b:c2:45:76:32:da:8c:f3:6f:44:a0:f2:25:
8e:0a:31:fe:17:55:98:b1:2b:ea:82:b4:2b:e3:67:
42:3e:1c:e2:a4:73:31:37:9f:73:56:cc:fe:86:a9:
a9:cd:b1:59:c3:62:01:92:5f:19:7d:ca:19:d8:d0:
5c:5d:6d:47:af:51:87:50:a9:0e:62:a5:9b:f8:1a:
7a:ad:d2:62:71:05:25:37:10:ea:50:58:dc:df:26:
7b:28:32:ce:7e:a4:0d:c6:ab:65:db:3e:1b:a6:96:
94:37:b3:7f:12:15:f0:5f:79:ae:b3:07:a6:22:1e:
08:57:54:d0:df:71:54:b0:cf:c2:4d:4c:cf:43:ea:
42:bc:b1:0d:b1:ec:f6:3b:2d:91:79:5f:6b:ac:dc:
c5:56:2d:fd:59:2b:33:59:85:62:5f:7c:fd:fa:c7:
d6:33:c2:22:5e:80:10:bc:fa:60:23:e3:98:93:de:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:8F:AB:BB:F0:04:9C:87:D4:9F:39:D6:84:E9:92:50:85:57:4B
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:db:3e:5d:08:eb:e1:b4:03:aa:11:95:6c:d6:f6:6c:70:50:
77:2b:a7:df:3f:32:1a:ff:08:22:66:31:08:b7:f4:17:7e:15:
61:58:20:bb:8d:e8:88:18:4d:e6:1a:73:cc:19:85:03:92:53:
71:73:60:47:a5:c7:cf:50:b3:80:53:45:3e:89:52:3f:ce:8b:
89:42:b3:18:6c:fe:9b:21:77:70:36:52:f2:b4:52:4c:87:06:
1b:42:de:d0:7a:2e:98:03:b4:eb:d9:4b:63:ac:8a:88:b1:69:
8a:a3:bc:e4:72:46:0c:72:49:2a:73:c9:f8:19:30:6c:b4:7d:
df:a3:97:ec:6f:68:cf:64:ea:65:95:83:c3:15:88:bb:b9:7a:
09:61:38:db:da:f6:cf:13:77:78:8d:97:75:43:b5:7e:f4:09:
a2:a5:0f:03:a8:5f:dc:18:1a:c1:1e:1e:de:37:5f:29:0f:65:
6d:e6:76:98:4f:30:4f:8c:15:40:ea:1a:2a:c0:f5:63:38:1f:
66:00:e6:b4:63:65:4d:61:76:45:2d:19:a5:c1:f2:c5:31:9b:
b1:70:c3:36:da:d3:6f:35:87:2a:1e:eb:58:67:be:79:4e:b1:
d5:c6:a6:b1:c4:0b:02:8c:1e:fb:5e:2a:47:8a:1f:68:c2:d6:
cc:0e:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:51 2025 by rpki-client