Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: SA7YZM/WuxwrmQLOHGILAP9MIzOv11xQxeQwA8TcTOA=
Subject key identifier: A6:F4:2E:BE:D1:ED:F1:15:F3:2A:8B:D7:B2:06:87:EA:25:8A:C3:C0
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019951F8A6B898D10C3A9D084B9A4308E98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0CE8
Signing time: Tue 16 Sep 2025 10:01:13 +0000
Manifest this update: Tue 16 Sep 2025 10:01:13 +0000
Manifest next update: Wed 17 Sep 2025 10:01:13 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: S12SCOZ+11SJBphcuK2ClBuUzb6+ed2hP7n0effIVrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:f8:a6:b8:98:d1:0c:3a:9d:08:4b:9a:43:08:e9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Sep 16 10:01:13 2025 GMT
Not After : Sep 17 10:01:13 2025 GMT
Subject: CN=a6f42ebed1edf115f32a8bd7b20687ea258ac3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:15:89:f5:f5:ae:70:30:8f:e9:27:07:d6:
5e:bf:39:b9:c3:89:2c:f3:13:6b:6b:54:09:5d:42:
d4:cf:02:0b:c2:4f:4a:56:3c:22:da:c6:21:f0:2a:
bb:e9:cc:c6:3e:62:6c:6e:8e:ad:35:ce:8e:54:a2:
98:98:f1:94:be:c4:44:4a:13:ea:e6:45:af:9e:90:
2d:c0:38:b2:a6:c8:80:55:a8:a3:73:86:b7:a2:77:
e2:9c:96:16:2e:51:9c:79:f7:ef:8f:3d:5d:0a:aa:
f8:19:5c:c1:c7:9e:9a:39:b7:8e:82:10:52:97:a8:
fd:fb:40:4b:e8:0c:e8:14:09:ab:51:3d:8f:3d:da:
9d:f7:a4:00:ce:72:3f:af:af:7e:6c:4a:f7:fc:09:
7a:02:e1:fb:79:40:86:e9:11:bc:65:6f:91:ec:25:
c1:3e:dc:17:10:8b:60:a6:34:ea:a1:11:0d:f1:0d:
c5:94:99:87:45:d8:8e:31:78:86:7e:80:52:4b:3c:
4b:9b:cf:bf:60:31:53:73:17:a3:e4:ef:d4:25:d2:
fd:7b:18:af:c7:e9:cc:60:d3:b1:72:39:cd:98:8b:
b5:dd:bf:df:f2:dd:57:da:e2:71:0f:0a:4e:fb:be:
66:e2:0b:57:db:04:68:1c:cd:87:36:e8:7f:b5:bd:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:2E:BE:D1:ED:F1:15:F3:2A:8B:D7:B2:06:87:EA:25:8A:C3:C0
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3b:ec:dc:10:53:b5:c4:5c:c7:eb:43:62:f2:ba:5d:d9:15:
4c:1b:98:30:fc:c5:be:b6:87:bf:f3:24:f4:ad:5f:6f:f3:f2:
35:57:88:18:63:f7:4a:8c:cd:e7:f4:71:dc:9d:80:8d:b1:be:
5a:11:27:50:70:b8:84:a6:a9:74:62:66:08:6f:cf:39:ee:f1:
39:0b:aa:6f:1c:ac:7e:50:ea:c2:89:96:df:b6:fa:e0:ab:de:
98:1a:aa:f7:0b:5b:d8:f9:33:2f:61:df:7b:95:73:f4:10:21:
fc:94:42:a2:5d:ff:5d:39:81:31:4f:80:02:2a:0a:0e:22:07:
f8:2d:9d:f6:58:6f:31:ce:7c:33:13:9c:ee:86:49:ef:be:46:
50:91:9a:e2:b5:68:55:5e:b9:f9:a9:0d:ff:64:f0:f8:68:68:
5f:10:7b:c1:39:f2:00:19:ee:96:27:7c:ff:93:e2:25:84:2f:
c8:2c:4c:12:11:a7:c2:fb:d0:5b:04:9d:30:9b:29:b7:0f:fc:
04:1f:0a:d3:fe:ca:5a:4d:24:f4:35:5d:0e:17:87:c2:03:e9:
25:13:36:cc:23:e6:e9:72:4f:7d:ce:b5:eb:61:58:77:73:82:
e2:5e:e8:86:c8:ca:82:92:67:85:1b:2c:79:e9:42:91:eb:60:
e4:00:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:20:42 2025 by rpki-client