Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: 0gVdYwbk8h/IcQUeRuq2zbJLPXSNxzMoilxEayXtt0k=
Subject key identifier: 0B:48:8F:03:D1:A2:FF:3D:2D:C7:AC:65:BF:58:84:20:32:13:B2:A7
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 019A7225C0BA8431BF42F4AEC8E2CDABED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 1434
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: 8P/KFp1ZB+pyRm4wSteH6XHmUIO5JvccDfUhT5eJ7eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c0:ba:84:31:bf:42:f4:ae:c8:e2:cd:ab:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=0b488f03d1a2ff3d2dc7ac65bf5884203213b2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:81:1f:5c:36:e4:73:f0:45:45:6c:5a:2c:da:
7f:46:27:4d:4d:0b:80:9d:07:55:b9:5f:bb:8a:f5:
45:56:60:38:98:28:b2:57:04:2d:cc:28:9b:e3:0a:
4f:4a:e0:59:1d:6d:67:f5:8e:3d:9a:c7:df:81:28:
fb:b2:47:4a:f9:7b:92:ec:16:4a:53:eb:74:20:7d:
df:15:19:59:60:7c:61:bb:66:39:5c:4a:70:6c:92:
66:57:fa:d5:e0:81:03:c6:08:d6:2f:a6:e0:41:38:
e1:ae:55:90:c1:1c:63:32:b4:4e:7f:46:d9:3b:5f:
25:71:86:c6:f9:d2:b3:8c:bf:dc:74:46:39:24:e6:
b6:0d:a9:e3:eb:4a:eb:29:fe:d5:f6:ec:f6:9f:22:
05:e9:cb:41:30:3c:60:0c:f1:6c:f2:fe:d2:6d:34:
0c:b3:c4:07:d0:b6:9a:6d:68:50:9b:60:e7:fc:b9:
4d:a6:d5:d0:5e:22:4a:7b:99:10:2b:aa:39:7b:6a:
18:29:7a:f4:dd:23:d4:91:ff:1c:17:01:0b:3f:e5:
66:ba:2d:d5:2f:a7:33:1b:38:98:17:50:66:88:96:
17:88:f1:88:a7:3a:c3:12:55:89:c6:fb:c9:05:bd:
de:16:ce:7e:5d:6f:ed:d8:f2:ad:df:04:90:f8:e3:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:8F:03:D1:A2:FF:3D:2D:C7:AC:65:BF:58:84:20:32:13:B2:A7
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7c:90:a9:4d:9f:14:74:70:b3:36:26:26:4a:57:a6:b2:b5:
e1:c0:8d:1d:ce:fd:ef:b6:b0:fd:88:81:47:af:3f:1b:dd:c3:
d2:9e:cc:83:34:4e:05:c7:a0:c6:69:e8:16:e0:ba:03:bc:6b:
70:72:1d:d6:f4:8e:92:d2:67:c0:da:b7:7f:08:04:61:10:14:
da:73:75:86:1a:b9:28:63:d5:3c:9f:24:da:85:29:9e:3c:5c:
cd:27:37:b9:96:d6:7e:47:6e:80:83:42:1d:31:6d:4e:8b:23:
65:a1:b9:91:eb:ad:67:bf:96:bf:2d:b1:e0:66:c9:41:9c:16:
7f:c0:4d:3e:13:33:e3:37:a7:2e:ed:61:a7:16:4f:cc:f2:cd:
21:13:8a:57:dc:04:88:26:52:50:57:2b:23:af:b7:2f:90:5c:
92:ae:dc:24:a9:92:e4:be:3f:72:8f:3a:46:27:31:52:61:cb:
96:2f:11:30:0d:7f:03:85:e9:e3:ba:47:eb:8e:c8:17:17:0d:
79:24:2f:5b:62:d6:11:f1:b8:2c:6f:6d:bd:63:33:94:8c:fb:
ed:39:d6:ce:0d:b5:ef:be:69:3e:ef:af:be:71:6a:f6:13:0e:
d5:85:f9:6b:b7:26:63:98:69:8f:2a:dc:9a:6e:41:71:ec:51:
1c:76:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client