Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: je2wPdxSq2T3nqQkXaWLTwEFz0WPlYHwwAeuCH8Zlrc=
Subject key identifier: F0:E0:A6:AF:E9:82:AB:1D:79:8B:74:BA:4C:93:22:F2:78:D7:25:36
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019A71B7A65C2132C4DDCCC75B278AAB966F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0D7D
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: B9NUHmIg11C8A+yquCKPG9KO18nWt6nzHVkRiXJzeNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a6:5c:21:32:c4:dd:cc:c7:5b:27:8a:ab:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=f0e0a6afe982ab1d798b74ba4c9322f278d72536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:15:7f:9a:a3:4c:20:c7:ec:18:bf:9d:80:
dc:ff:8a:f9:17:2b:be:14:3a:bf:d5:bc:99:d2:5b:
89:de:16:e7:48:66:6e:11:d0:d4:7b:ca:2f:c5:de:
05:65:c9:79:0a:0d:e2:3d:6c:69:2d:e1:e9:98:50:
11:30:b2:0f:ca:d4:10:25:f0:30:80:e4:89:4c:ad:
e5:d6:90:25:cc:a7:8d:f8:be:d6:a8:5e:a0:88:ca:
5f:f5:96:02:2a:bb:39:35:61:7f:b8:f6:fc:0c:aa:
67:0c:7b:89:1d:60:36:68:d3:a2:55:a1:92:57:01:
44:70:52:00:03:77:46:2d:df:63:23:8d:76:0e:e0:
45:b0:dc:3a:b8:eb:56:5f:89:b9:1d:94:dc:84:03:
60:ec:41:8d:83:2f:57:ae:2f:30:ee:ae:15:cd:ba:
ed:2f:c5:72:8b:59:5f:68:60:fd:5f:b4:00:dd:72:
2b:91:7e:b9:46:6b:e9:38:96:ad:6a:2c:03:e2:5a:
ad:0a:da:5e:49:18:db:58:cc:79:62:9a:a5:84:75:
00:8f:b8:cb:b5:7e:26:46:20:8b:f5:be:7e:b5:19:
3f:53:d2:a6:7c:00:a4:96:b0:4e:15:bb:0a:84:d0:
19:00:9a:6f:7c:12:30:24:f3:36:a5:81:a7:a8:cf:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E0:A6:AF:E9:82:AB:1D:79:8B:74:BA:4C:93:22:F2:78:D7:25:36
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:dc:e1:09:93:57:56:ce:f5:82:0c:84:db:af:1d:25:af:
d8:f4:01:06:99:6c:55:8c:3e:81:ac:b6:eb:23:ee:ee:1b:89:
9b:d6:05:70:ee:9e:fe:30:13:58:55:40:80:c5:c6:26:11:24:
2f:53:78:00:4c:44:69:0d:2e:c1:ad:a5:7a:42:c6:aa:93:2d:
d2:b8:6d:cc:e0:b8:36:91:d1:14:8e:74:cf:a3:56:d8:7c:d6:
7b:77:58:e4:7b:32:c4:fa:8e:76:07:d0:d2:00:ba:ab:da:d5:
de:19:77:56:7d:b4:a8:32:98:43:7f:ea:88:3b:79:95:06:6c:
b9:b4:9b:6b:42:76:5c:b5:df:0e:21:23:49:ea:7a:9a:ed:de:
77:c0:a9:ef:e0:20:0c:8a:21:f5:ad:e0:db:dd:92:07:28:de:
81:6f:f0:1a:9a:a1:58:a1:2e:82:5f:83:0a:00:b3:0f:f4:74:
7e:04:e2:ca:6a:86:ca:fd:12:71:fb:22:c2:d5:37:d2:6e:5f:
d5:c2:b1:e8:5e:78:b3:29:f8:c9:8b:f7:a8:e1:a7:9a:b0:a7:
99:49:a7:51:fb:76:be:5c:9b:96:50:23:d0:a0:92:e3:32:43:
80:f3:17:4d:ef:3f:fb:25:19:b5:8b:7c:17:a3:0b:88:bc:ad:
dc:b6:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:30 2025 by rpki-client