Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: HZK6U7QBjvuPR0o9gueEqQHIlYamwcz1IlhYrHPKq28=
Subject key identifier: BF:86:E3:82:70:FD:39:94:76:94:78:91:38:2A:EA:BC:0E:21:00:08
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 0199228C394C0DD59730027CE7FE20FC751E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: 5UQk+1Eui9tkd81UrpQRaopZhHtxR08ryfO5rEtQxtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:39:4c:0d:d5:97:30:02:7c:e7:fe:20:fc:75:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=bf86e38270fd399476947891382aeabc0e210008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:aa:c3:be:4e:96:b2:a3:81:37:10:11:82:
64:bd:a6:18:44:89:53:74:e4:6b:94:78:b4:d8:c8:
2b:44:f0:e8:93:ab:88:77:8c:f1:27:9b:b1:2f:84:
72:0f:5d:c2:c1:61:dc:15:80:70:72:42:dc:1a:b0:
e5:00:b5:96:68:c6:b1:d2:c3:d4:30:27:e5:74:2c:
96:21:e5:e4:16:e9:32:24:d8:60:d0:3a:2d:2d:f4:
46:70:96:2f:de:d9:bc:2e:22:10:04:aa:3f:90:33:
ac:51:66:5f:92:1e:5f:6d:ac:41:9e:a0:5c:d1:a1:
50:58:4c:4c:e4:5b:8a:57:05:0d:18:3d:c0:fe:50:
31:44:6b:e0:31:ce:bf:ea:65:84:2e:77:35:23:52:
21:4f:c4:a1:c1:fb:77:5f:b7:34:67:79:85:87:8a:
17:08:2c:b8:dc:49:1d:9c:94:14:ef:f8:a3:bd:b5:
a7:49:05:13:49:a6:9a:36:08:20:a5:29:1d:3d:02:
16:55:e3:5c:b9:77:ad:d9:0d:b5:a4:66:20:3b:e0:
f1:02:29:85:af:e5:04:9e:b4:d6:eb:08:a1:0e:0a:
4b:e5:cd:06:7c:eb:34:cb:0a:58:16:7f:63:78:57:
f4:79:72:43:79:64:55:c1:f5:32:6a:a1:b4:ec:24:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:E3:82:70:FD:39:94:76:94:78:91:38:2A:EA:BC:0E:21:00:08
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bc:2b:8c:0e:99:58:33:9f:73:14:1b:b1:d7:4a:fc:de:9e:
73:b5:e8:f5:a3:66:90:ed:b5:7b:cf:d9:2d:ee:cf:1e:71:40:
26:de:fa:9c:51:d4:d3:4e:9c:2e:6e:a9:bd:f8:6b:37:2b:1b:
26:3b:e7:72:ed:6a:57:0b:4a:a8:43:42:97:5e:f5:2c:c3:14:
6c:6b:8d:fd:c3:2f:27:ee:b5:b0:2d:18:f8:30:75:00:4f:4d:
06:50:d9:0a:77:0f:6b:0e:ad:5b:5d:50:3a:89:f3:e1:af:a9:
06:02:c0:13:06:33:53:44:9e:a9:44:2a:b9:64:d5:60:0f:8a:
98:44:df:60:14:7c:b0:a6:6a:3a:68:20:b6:f9:dc:8c:ae:ec:
3f:78:63:df:14:f8:18:5f:b8:8b:de:a0:95:1f:c0:50:bf:49:
e2:ce:7d:39:11:71:68:b1:ee:88:3b:5c:63:02:92:1b:ee:0f:
3f:88:c0:65:a3:96:77:36:25:e1:0f:29:f6:ed:dc:9d:15:24:
b2:79:5c:94:af:a5:a8:d2:61:80:df:27:29:b5:37:b7:ce:3b:
21:21:63:0c:fa:95:22:27:2c:0b:ef:08:99:c2:ef:0d:69:37:
59:17:da:b3:90:73:38:ed:3e:ab:67:36:a1:92:99:ee:02:e4:
49:80:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:26 2025 by rpki-client