Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: RQN/d6OZ5QZ1NsaOvos1MqX3H35g+hTIoxBf7hVpfUc=
Subject key identifier: C8:98:90:FA:98:A8:89:2D:23:CC:73:42:1D:1B:4E:25:C6:1E:AB:A6
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 019A1EAD008AB0675A9F01ECD9BB08521A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 1434
Signing time: Sun 26 Oct 2025 04:00:45 +0000
Manifest this update: Sun 26 Oct 2025 04:00:45 +0000
Manifest next update: Mon 27 Oct 2025 04:00:45 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: cAa8Obb213GZs9iV96EBa8pLETexanZFqrxbog5OZxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:00:8a:b0:67:5a:9f:01:ec:d9:bb:08:52:1a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Oct 26 04:00:45 2025 GMT
Not After : Oct 27 04:00:45 2025 GMT
Subject: CN=c89890fa98a8892d23cc73421d1b4e25c61eaba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:d9:c0:39:6f:c8:0e:40:c9:01:9a:44:36:
c8:01:c5:21:76:f3:9c:8d:37:54:26:9c:3e:a4:c6:
c2:bf:3e:b6:ce:77:59:bc:6b:83:ca:b1:71:e9:3d:
2e:f1:08:fa:da:46:8e:6c:af:70:b0:0d:fc:0d:c7:
7e:05:a2:0b:a3:7e:d1:67:0a:86:ca:70:ff:f5:c1:
d4:3a:75:11:e8:ec:f3:d2:68:b8:e3:b9:a7:4f:dc:
4d:d7:34:d1:db:7c:16:d2:e3:66:44:33:0e:19:8f:
eb:22:5a:85:95:68:e7:1f:38:f8:07:bc:ca:3c:5f:
c4:bf:e5:2e:72:8e:3a:95:eb:ef:05:51:3c:b2:7f:
58:82:02:bf:55:40:3e:d9:e2:ea:5a:82:e3:cd:3d:
75:cf:0f:4b:4f:d5:ed:40:40:f3:5f:87:b7:47:e9:
83:4f:0a:33:28:19:a1:41:ad:f7:78:6f:08:40:6a:
ff:27:cf:7e:d5:ac:65:9f:9b:f7:7b:8a:6f:35:6e:
7d:72:08:1e:b2:c1:b9:83:b0:fe:92:10:b8:ef:95:
51:a1:04:df:43:2f:e8:50:cb:91:1d:9f:57:25:6f:
ec:00:c0:4c:fe:91:04:93:ff:91:82:25:93:b5:11:
60:5d:07:50:62:df:db:e4:32:3f:65:df:fc:c4:94:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:90:FA:98:A8:89:2D:23:CC:73:42:1D:1B:4E:25:C6:1E:AB:A6
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f6:ef:50:e6:da:1b:2e:d1:b0:c3:84:6d:3d:43:64:c6:5d:
19:25:71:9d:26:31:01:de:28:82:14:7b:bb:6b:9e:17:22:04:
8a:c6:69:f5:49:c3:87:5e:7b:87:f2:83:9a:d0:ef:a7:b5:e3:
17:76:3a:16:6c:a7:14:77:34:4f:48:c2:07:d2:51:aa:8f:2b:
fc:08:b2:96:d8:6d:76:37:78:73:60:8d:47:73:e3:1d:0c:74:
6c:90:42:b9:be:15:97:35:cb:e2:0c:bc:c3:87:6c:c4:34:3f:
21:6d:68:21:9a:02:8f:ec:7c:e6:9c:f0:10:f2:9e:00:7f:af:
28:2b:cc:2b:b0:c2:c8:6a:31:77:25:92:1f:16:50:7a:2a:28:
17:3f:c7:c2:62:3c:e3:2f:40:dd:0b:0c:dc:03:25:2f:7c:41:
1d:eb:ea:f2:86:29:17:28:75:a3:62:08:1d:44:74:3c:19:f1:
86:17:eb:d1:81:8c:21:3f:96:2e:06:43:d0:1f:41:4f:87:3a:
dd:a2:91:21:92:a8:e1:c9:77:42:62:6d:e8:95:34:92:60:70:
f2:2a:94:9e:ab:62:e5:29:6f:95:68:ca:f2:14:3c:41:3f:71:
5b:5f:6b:49:55:f1:7c:dd:00:05:a2:7b:ed:e6:4c:4f:79:6f:
d4:43:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 08:21:42 2025 by rpki-client