Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: lzVxOkkF7qRUIWeFcmLl3p1xA4j3NnL7OJguHyQCqFk=
Subject key identifier: 1F:E1:C6:9A:D3:59:CC:00:7C:2B:08:31:EF:F7:C6:4F:6D:F4:22:13
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 0199228C37B246FEEB2C44480BAB02802E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 0E3D
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: otFy0StbZbBhDfY+M4w31frzSKrj8tbuubikvLfmIKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:37:b2:46:fe:eb:2c:44:48:0b:ab:02:80:2e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=1fe1c69ad359cc007c2b0831eff7c64f6df42213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:5c:bd:70:91:cf:f3:44:d9:54:8a:22:12:
d0:c0:a9:b0:ee:04:26:c7:ed:f1:52:3f:2e:3d:51:
41:43:04:99:81:b5:a7:d3:e0:a8:e6:25:3b:9a:9e:
dc:db:f8:62:93:85:53:38:d0:c5:4a:13:53:25:de:
38:cf:d0:82:e2:1b:54:3e:92:c6:c8:61:cd:ad:1b:
fb:17:81:8f:04:a7:8f:80:4c:bb:fd:00:ca:82:b1:
cd:57:47:50:f4:29:a1:3e:98:c3:86:90:47:f5:16:
c0:3d:7e:cb:85:0e:66:4e:12:06:e9:dd:d4:8a:00:
5b:68:f4:2b:fd:49:fd:a6:34:5f:f7:1d:c2:52:fa:
4c:e2:50:73:e7:f0:af:ef:a6:f3:17:cc:e2:3b:a2:
6a:74:db:06:50:76:69:f6:8c:82:c1:ab:ed:a0:0c:
6e:00:b2:55:e0:88:f7:ff:60:ac:a5:02:ce:68:3d:
ff:0b:e5:2c:69:61:fd:a2:9f:81:50:26:a1:23:e9:
f1:de:d5:d4:eb:b7:05:59:21:1c:ff:b9:ec:0b:b5:
11:16:1c:eb:3e:f5:b2:f6:1a:a6:3c:cb:7d:d9:58:
54:3c:a8:84:9d:6d:e6:23:84:bf:4b:7c:cb:3a:77:
7e:70:25:3a:97:75:24:92:5e:b2:bf:81:3b:08:28:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E1:C6:9A:D3:59:CC:00:7C:2B:08:31:EF:F7:C6:4F:6D:F4:22:13
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:63:bd:84:e5:ce:2c:ab:d8:9a:c6:52:98:0b:d7:cc:40:5b:
ee:96:49:30:ea:1d:9b:5e:0a:f4:d4:77:02:0e:8a:10:e9:54:
94:28:99:d9:0b:f5:40:38:75:1b:9c:c9:3f:b9:5c:3f:e8:f5:
4e:7a:c0:38:39:c6:e1:22:74:7e:8a:9f:61:77:19:e5:30:8c:
cd:8d:48:74:6a:58:84:1c:95:65:71:64:f4:73:da:36:e2:3e:
0a:6d:16:eb:30:a4:94:b1:35:48:74:d8:68:16:24:ca:df:dc:
8a:a2:f5:0e:52:34:76:4a:a9:2b:1c:39:45:a3:5b:4d:6a:06:
0f:a9:1f:32:24:e0:95:7f:d1:ae:96:47:fd:66:5a:70:b0:61:
55:6e:0b:b3:9f:ca:85:7a:b4:49:6f:5c:20:cc:9f:da:a6:fa:
59:47:a9:d3:ba:6f:c1:d9:db:86:6d:db:b1:df:02:e2:88:16:
8f:a8:13:ee:7d:a6:95:05:79:8f:37:b1:8d:65:10:d1:9e:1f:
63:19:52:da:94:f9:42:64:41:33:39:c9:9f:1c:76:be:cc:c2:
dd:5c:b9:9f:8e:6c:04:e8:7d:1a:14:87:92:81:41:e2:db:ec:
7f:9b:e3:43:67:8a:6a:2a:b2:8e:82:a4:d9:4a:5d:89:bf:3e:
ac:54:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:33 2025 by rpki-client