Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: wdv/euiO4uvYozBrLLRob/L1mDszs/GM1/bgjsMQLh4=
Subject key identifier: 45:EB:9A:79:C8:94:F9:65:05:5C:7E:9A:6F:5C:61:66:E7:55:F5:02
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 0199221EB10096187C8CC9B00E63F9394BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 1386
Signing time: Sun 07 Sep 2025 03:01:00 +0000
Manifest this update: Sun 07 Sep 2025 03:01:00 +0000
Manifest next update: Mon 08 Sep 2025 03:01:00 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: USfdhR4bRDLXenltySz8XDlZ9tNW5nd9nruCswc4ga4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b1:00:96:18:7c:8c:c9:b0:0e:63:f9:39:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Sep 7 03:01:00 2025 GMT
Not After : Sep 8 03:01:00 2025 GMT
Subject: CN=45eb9a79c894f965055c7e9a6f5c6166e755f502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:7e:38:dd:f2:7f:ed:7a:da:08:4c:ec:20:
b7:32:6b:6f:87:ee:1d:4c:0f:32:0c:8d:25:4e:2d:
87:7e:fd:68:00:d6:fe:00:84:30:f8:8c:96:03:fc:
90:18:31:6e:c5:c2:23:b0:22:d0:a8:67:ac:42:57:
65:16:14:d6:b0:1d:4a:f0:e9:bc:1c:d3:a3:d7:c7:
3c:79:8e:5c:e7:44:62:3c:09:9f:09:59:75:0f:62:
b8:63:f7:a4:e3:35:d3:30:54:9f:d5:df:2c:53:9d:
94:7f:86:14:99:b6:99:57:73:b5:85:77:73:7a:41:
4c:0e:d9:e3:91:f6:78:f4:be:30:51:fa:f8:7b:1e:
3c:5a:1f:be:df:65:3e:d3:12:4b:c3:66:37:24:04:
f2:3d:d0:fc:d8:03:5e:0c:2e:31:51:1e:5c:22:d0:
0b:51:0b:73:e6:2d:2b:5d:16:6e:df:14:21:ba:f9:
a6:de:c3:e3:7b:bd:00:e9:9d:c1:37:37:e2:3d:0a:
fd:85:a5:47:f6:2c:93:90:1a:cb:ec:86:cd:88:3b:
fa:a8:50:65:7a:a3:7e:17:9f:1c:ad:0b:8e:a9:41:
6b:5d:30:ee:f9:bc:48:84:91:d6:99:9c:ac:0e:fd:
27:b2:e1:d7:d7:80:b4:75:53:3c:b7:f4:ea:ab:18:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:9A:79:C8:94:F9:65:05:5C:7E:9A:6F:5C:61:66:E7:55:F5:02
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a3:1a:dd:84:40:33:59:87:82:a9:41:9c:79:8e:0c:9c:56:
ca:60:f6:66:dc:54:6e:cc:ee:14:e5:c1:1b:91:f4:18:6d:10:
00:bc:af:8f:2a:56:fb:cf:12:03:d2:e5:62:4d:f9:a0:65:14:
45:13:b9:fd:cb:1f:1c:6b:39:31:f5:56:16:73:36:4d:48:b7:
21:bb:63:ee:a3:59:1e:fc:58:60:46:40:c8:8c:68:67:dd:71:
5a:0f:be:06:2b:63:2a:21:e5:f0:ac:a9:76:d8:25:94:0c:a5:
ce:2e:12:c0:f4:b8:7d:c2:68:35:a2:7e:86:68:f7:e3:4a:f0:
6b:bb:20:41:d5:b7:31:51:39:a2:7f:52:89:b2:0f:bf:4f:ac:
cc:f5:6a:21:be:1e:d3:6b:96:86:54:6c:42:51:bd:ed:56:63:
8b:7f:05:26:1f:b2:62:c1:e4:6d:36:e1:aa:05:b1:7f:fd:62:
f0:30:07:18:09:1c:0e:ed:10:39:2e:9f:bf:0c:d1:59:a2:65:
67:15:e3:0b:fc:5a:c3:23:7d:8d:36:b8:27:3a:d1:a5:95:5c:
21:c1:d5:3b:ae:95:db:ba:54:16:43:1c:21:2b:ff:dd:d0:10:
a8:2c:7b:db:5e:cb:0e:1b:7d:8c:a9:c5:ac:5f:c5:08:09:2b:
e5:0f:62:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:17 2025 by rpki-client