Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: 8gRHEXe94KJPNfhaTP4hdqBwP4/fnPDGhKHpzZiq4ww=
Subject key identifier: 1D:D4:80:CF:72:E0:43:C8:64:F7:F5:91:83:E0:E8:22:4B:A9:48:89
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019A1DD0AB689525A1152BF47F001911D35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0BAA
Signing time: Sun 26 Oct 2025 00:00:04 +0000
Manifest this update: Sun 26 Oct 2025 00:00:04 +0000
Manifest next update: Mon 27 Oct 2025 00:00:04 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: u2rbvNFSwHk+5naJ6hQBB7H2b8ShuvLhKWENtLqmc3I=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d0:ab:68:95:25:a1:15:2b:f4:7f:00:19:11:d3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Oct 26 00:00:04 2025 GMT
Not After : Oct 27 00:00:04 2025 GMT
Subject: CN=1dd480cf72e043c864f7f59183e0e8224ba94889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:18:bd:93:20:25:82:c1:d7:6e:6d:46:16:
3a:81:f7:14:f2:26:72:44:32:0c:c1:a7:82:9b:cf:
a6:f1:27:f5:54:c7:de:6a:48:70:a3:88:bf:e2:06:
31:40:76:95:af:0c:f1:83:33:d8:e6:da:cb:a5:c6:
98:ee:bd:ca:cb:12:d5:91:d7:cf:ca:d0:45:ac:74:
e9:18:e6:19:db:66:d0:b4:ce:a2:25:b5:ca:b1:b3:
b8:77:b9:a1:0b:85:d9:97:39:d2:87:b6:df:c9:5b:
a6:4f:23:a4:8e:09:fe:46:ae:7b:c3:6e:69:41:cd:
6f:45:a3:e5:53:36:87:a0:de:fb:71:2d:80:91:aa:
23:12:ce:34:cd:bc:88:3b:67:00:2f:ca:e7:ba:21:
09:a2:4c:80:1b:ee:55:8e:59:9c:63:ce:cd:8f:14:
82:31:63:6a:43:55:d1:7b:6b:cd:e8:9a:c0:b0:ca:
d6:21:1a:7b:32:24:87:2a:9b:56:14:ef:ba:ff:50:
cd:18:d6:d9:86:99:48:b9:2f:ef:23:94:00:03:b8:
a2:36:67:3a:f3:b0:3e:2f:00:3c:a4:78:1e:33:c6:
ac:c8:08:7e:dc:02:9f:e6:df:71:0f:a0:9d:0b:1d:
cb:cf:91:74:9f:c5:94:3c:48:dd:15:68:c4:68:e3:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:80:CF:72:E0:43:C8:64:F7:F5:91:83:E0:E8:22:4B:A9:48:89
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:94:55:a3:45:1c:d5:5e:b3:3f:fb:ad:50:86:92:d5:fd:2e:
74:90:87:9c:ea:b1:a3:6e:72:8f:8a:45:24:aa:9b:cc:cc:6b:
10:85:31:16:a6:82:47:88:c6:82:4e:67:22:96:31:02:c3:e9:
95:23:a1:07:fc:a5:35:fe:71:6a:71:9a:8c:52:4d:72:6b:53:
70:9b:13:72:de:f5:09:3a:3a:2b:52:dd:eb:6b:6a:cb:4f:74:
8f:58:6c:e9:07:5d:78:73:d5:c9:b2:a3:ab:78:2e:da:3e:b9:
33:29:86:c6:a6:2d:04:99:ff:cf:f6:8c:d0:13:8f:24:6a:c9:
cb:b1:8a:c2:23:25:39:e1:f1:17:f1:ee:06:c4:13:d4:e2:4b:
bf:10:c2:43:5a:f3:e3:9a:7f:7b:df:95:ea:54:bd:21:95:f1:
2f:8c:f5:e5:68:bd:ad:d4:e9:61:ab:22:3f:81:ff:9f:b0:8a:
4f:3d:92:39:5a:1a:24:48:b2:56:67:54:41:af:c8:c8:2c:0c:
ca:16:e3:e3:76:19:a8:13:d8:db:96:1c:7c:6d:eb:cb:26:de:
7f:8f:42:04:c6:5c:6c:13:0e:d8:e2:61:d7:7b:dc:51:c2:e7:
0f:4e:a9:36:d2:aa:38:ff:35:96:98:d9:2b:31:1c:41:0f:59:
fb:3e:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:07 2025 by rpki-client