
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: BmYfX2a7GRmAXwBwER9w4YWV4vWPyofW2ayVwgrF49g=
Subject key identifier: 47:BB:09:24:5E:E0:EA:DE:41:A5:12:00:9E:AA:A7:85:9F:34:1C:3E
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019A0593099C554CAE35C09ECB20112897AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 02DD
Signing time: Tue 21 Oct 2025 07:01:53 +0000
Manifest this update: Tue 21 Oct 2025 07:01:53 +0000
Manifest next update: Wed 22 Oct 2025 07:01:53 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: iab50fFPfDklIxM6BsQ3gyHACi53MVAEeTZ5EO440A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:93:09:9c:55:4c:ae:35:c0:9e:cb:20:11:28:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Oct 21 07:01:53 2025 GMT
Not After : Oct 22 07:01:53 2025 GMT
Subject: CN=47bb09245ee0eade41a512009eaaa7859f341c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:a7:3d:9e:5b:1c:c1:11:5f:8b:de:9d:3a:
0f:a9:6f:fc:15:d4:94:18:a3:38:a2:ea:89:27:f9:
36:32:02:5b:67:35:cb:23:e5:1d:15:0e:0d:31:b9:
4f:ea:3c:c3:c1:78:d0:4c:a0:ca:5a:34:6e:74:d5:
7a:28:2a:93:17:85:bd:cb:58:a3:c9:66:08:ca:58:
17:73:22:65:c5:25:21:f1:23:5f:62:37:ca:a1:e5:
91:33:3e:cc:c2:55:01:4d:01:07:27:ee:7a:5f:03:
4e:56:49:18:8b:8d:82:24:0f:6e:cb:ac:b5:2e:65:
e6:81:3f:22:08:b1:59:82:8d:fe:9a:90:46:93:5b:
1d:36:a6:fc:6d:8b:21:ab:24:de:48:c6:3c:0e:aa:
16:4f:26:c6:b3:50:aa:4c:c1:e2:fd:27:33:5e:dc:
93:e6:2c:91:24:1b:34:fd:32:fb:17:58:9e:d0:8c:
82:29:64:5d:b7:52:81:e8:f6:c4:44:51:fb:72:ac:
c3:d1:7e:8e:fe:7a:0b:23:c0:16:48:1d:66:4e:22:
9e:eb:07:8b:c1:1a:de:48:1f:5b:2b:c2:c6:4e:d7:
2f:00:73:ca:11:ba:2c:05:3b:19:e5:43:a9:da:b9:
c9:8c:ce:e1:2d:bb:fa:dc:d9:f7:a3:8c:51:ef:08:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:09:24:5E:E0:EA:DE:41:A5:12:00:9E:AA:A7:85:9F:34:1C:3E
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:df:19:58:5f:14:2b:25:24:5e:8f:78:31:b1:34:06:b7:53:
8d:e2:d1:a3:ec:16:2b:91:af:6f:ee:1a:73:f9:79:fa:8c:25:
4d:36:42:1e:d7:f9:f4:67:39:f1:5d:0c:e0:3e:4f:1e:a1:6e:
2f:f8:2b:0e:e4:ae:cf:03:eb:66:74:27:fe:9f:59:09:01:b9:
5f:2c:6c:cb:b1:e9:15:08:f3:d0:11:a4:83:e7:ab:55:f4:0e:
86:8b:73:22:fc:17:00:a3:5b:89:98:59:15:24:e9:f7:44:79:
4c:56:0f:46:e7:e2:d7:4f:d0:8c:ca:7f:d1:8a:09:82:36:2e:
c0:fb:4c:03:5a:8a:8c:d7:46:2f:c0:60:29:7f:fc:44:6c:bc:
32:31:04:c0:3c:13:f3:88:09:be:58:f6:3b:36:0c:9c:49:fd:
fa:59:61:f9:30:18:d1:0c:8a:68:68:3b:44:58:e5:4f:ec:51:
aa:5a:5c:ee:b5:25:00:21:37:76:42:f0:12:f0:7d:67:b9:eb:
76:05:3e:88:17:fd:e5:ac:dc:db:8a:67:8a:4b:4b:d3:e8:66:
0b:93:15:54:b0:16:52:c7:be:77:b5:c0:e8:75:96:a6:30:70:
eb:d2:90:c2:65:8f:8a:40:55:b2:4d:ea:e0:14:b8:38:ad:ce:
5f:ca:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:27:01 2025 by rpki-client