Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: 50xWTzoSeliBPewQ0Ba47jgl9YhHA4JJvhd4AaeAN9A=
Subject key identifier: FD:A3:10:A1:D7:B4:5F:3F:07:3F:41:7E:82:3C:04:BA:EC:66:B0:19
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019A27E6E2838833C7EA4D0A69ACA539FA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 1117
Signing time: Mon 27 Oct 2025 23:00:33 +0000
Manifest this update: Mon 27 Oct 2025 23:00:33 +0000
Manifest next update: Tue 28 Oct 2025 23:00:33 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: SzK5sGiP06nibxI3oJi2y1o6RaRe0IQAYCi4487T78o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:e2:83:88:33:c7:ea:4d:0a:69:ac:a5:39:fa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Oct 27 23:00:33 2025 GMT
Not After : Oct 28 23:00:33 2025 GMT
Subject: CN=fda310a1d7b45f3f073f417e823c04baec66b019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:b3:25:55:ce:2d:93:e2:82:b1:9e:2e:9f:
5f:17:e8:24:35:5c:91:1e:ce:c8:97:ee:f5:9d:2f:
e6:52:d8:b8:9e:f2:c7:8d:7e:9a:8e:08:23:ca:b3:
c2:4d:d9:82:49:8c:ab:67:42:fa:f5:b4:60:e1:29:
7f:48:49:d6:e0:a3:40:c2:2e:5e:42:87:be:74:ea:
31:2c:90:70:b0:93:34:04:60:27:73:63:84:f7:3f:
c0:6c:4e:9d:2a:36:ae:97:fe:c9:c4:67:1b:76:68:
0b:0f:db:5d:70:61:3d:92:bd:fe:92:ce:b7:98:4c:
32:2f:50:39:8c:e5:3c:83:77:28:f3:95:e0:fb:27:
39:59:ad:ee:97:2f:12:25:60:8c:dc:6b:b4:eb:4b:
0f:61:c3:62:ab:d0:3a:37:c1:ff:f9:f0:84:94:76:
b7:23:d8:80:c0:bd:9b:64:e6:a2:b0:91:92:6e:6b:
1d:10:35:7c:ea:a7:e1:e9:10:5c:0f:85:52:dd:5f:
86:23:4b:ec:7c:c0:a6:94:4d:2f:82:b6:98:8e:03:
45:95:3d:38:fc:27:87:bf:3c:2c:fb:d7:3b:68:95:
12:97:e5:21:21:52:62:b2:ef:b3:c0:5d:15:56:ff:
9a:ca:36:bb:7a:6b:24:3f:52:59:59:97:fe:5b:c8:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:10:A1:D7:B4:5F:3F:07:3F:41:7E:82:3C:04:BA:EC:66:B0:19
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f3:51:35:c4:8a:d0:31:7c:90:bf:2a:12:69:5b:e3:c1:e1:
65:84:aa:4b:15:bb:ff:aa:8d:bc:98:4d:be:c5:e6:ab:57:65:
11:0f:37:67:00:3b:55:15:32:ff:21:4d:1a:df:88:b3:45:24:
16:eb:92:74:f9:bb:a2:db:44:41:e1:3a:1c:93:f9:75:96:35:
7b:cb:b3:2f:14:38:4e:57:49:d5:41:2c:86:a0:e3:c0:71:79:
03:11:a5:c1:b8:b3:fc:22:c9:bf:e6:13:6d:d7:af:f3:83:2d:
46:dc:9f:73:09:f8:6e:ee:4c:da:bd:4e:0d:b7:6a:ad:4c:0b:
b9:81:04:70:c5:31:40:56:77:b2:cc:81:4f:30:8a:e8:cc:fe:
29:21:69:95:ab:f2:a4:b7:6f:75:29:73:a3:3e:40:86:0c:ee:
39:b1:be:2f:4d:d0:24:f5:16:31:ee:8d:3d:a9:d5:96:95:96:
df:3d:3e:0a:d1:88:0d:0e:ae:1b:92:1f:ca:6d:5d:e2:db:8c:
a2:03:8e:5e:10:6b:ea:48:ca:73:b3:ab:b1:12:f5:b0:dc:9e:
e3:a0:b7:9d:9f:8b:51:aa:e5:a3:b6:ad:c0:f5:7c:06:20:99:
34:ea:28:07:20:c4:ad:16:e8:39:c8:c9:55:0d:ec:15:34:2b:
aa:e3:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:53:17 2025 by rpki-client