Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: +2jV7uGJLjoJn3IOSVnHELbbX8kt+seqpS7KSCN8Kzw=
Subject key identifier: 3B:CF:87:2F:98:0E:9F:43:29:65:B9:C8:6F:5C:15:02:4B:AD:DC:DE
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 019A24AF14447631965EF402E6B21063766A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 15FC
Signing time: Mon 27 Oct 2025 08:00:44 +0000
Manifest this update: Mon 27 Oct 2025 08:00:44 +0000
Manifest next update: Tue 28 Oct 2025 08:00:44 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: uqSDojqaDWYIPkoB7U95xAXsibjEpnFNqx3gmAyQs1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:14:44:76:31:96:5e:f4:02:e6:b2:10:63:76:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Oct 27 08:00:44 2025 GMT
Not After : Oct 28 08:00:44 2025 GMT
Subject: CN=3bcf872f980e9f432965b9c86f5c15024baddcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:f4:fb:c5:ac:4a:c2:79:25:0e:06:c5:44:
8c:00:4c:a8:0c:55:8a:6e:98:73:ec:bc:26:2e:b9:
1d:3a:48:7c:d3:b8:35:05:c7:49:ce:58:95:ba:6d:
f5:6a:df:db:1e:2e:40:20:b8:ff:f1:94:25:6b:c6:
81:4d:b6:ba:f7:b3:88:9d:56:07:e9:63:ca:99:fa:
07:9c:c3:8c:58:ba:d6:85:6d:96:96:dd:9c:00:53:
6e:5e:6b:ab:cb:7b:af:c4:5f:20:36:8a:17:33:50:
7e:c6:3f:8e:25:cb:2d:c0:48:92:f5:b4:6a:9e:b2:
58:64:ed:b8:b5:2f:8c:94:30:ae:09:24:4d:bd:8c:
b2:ba:29:8a:a3:93:47:77:86:1b:74:41:bf:de:c1:
e6:6e:be:e7:14:19:c7:ef:b1:ee:8a:82:6d:04:2d:
8f:95:ad:78:75:f9:2e:e4:bf:8e:be:d9:95:ae:6a:
f8:db:19:10:22:5a:fa:87:05:2d:a9:99:72:cd:df:
5e:49:68:a3:01:8a:f7:d3:10:8b:21:eb:e4:93:54:
6d:85:63:af:ef:d9:1c:9a:e3:36:83:23:58:31:54:
77:a1:11:d9:b3:4f:07:0a:03:66:55:03:66:90:ea:
92:b8:f9:9d:02:0c:5d:f0:e2:84:2e:68:53:e9:5d:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:87:2F:98:0E:9F:43:29:65:B9:C8:6F:5C:15:02:4B:AD:DC:DE
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1f:1f:46:84:52:08:a8:93:d0:b2:53:a0:ec:34:d2:87:26:
23:b4:0c:40:7e:64:91:a7:bb:3b:16:4e:35:f5:eb:93:cb:62:
d6:79:90:51:5a:c2:38:9c:9e:b0:86:8c:ea:c9:59:11:2a:c0:
16:cf:34:95:c5:7a:86:05:04:55:24:fb:ed:da:87:93:df:03:
1c:5d:5f:12:4a:42:2a:62:73:18:47:e2:3a:8d:69:36:99:64:
cf:c1:7c:7a:df:ae:70:df:51:12:98:05:14:a1:34:7a:a8:84:
9b:01:b2:11:74:21:c2:a6:81:1a:a9:02:95:3e:e3:a8:f8:a4:
79:a7:79:53:7c:04:8c:b7:35:4c:cc:fa:73:a0:f9:ff:6d:4b:
66:57:8d:3d:78:bc:99:e7:77:59:f0:66:5b:53:53:3c:7a:d6:
3b:f6:b4:6c:cc:8f:e7:e4:8c:44:c6:21:c7:37:32:ee:80:52:
63:ab:d9:31:42:85:32:5a:92:6f:d7:e9:73:24:d6:16:59:f4:
17:78:5f:58:6b:45:ad:37:63:2c:dc:7b:56:6a:cb:76:ca:ca:
03:bf:ce:12:ad:f0:e6:f8:f9:0e:7b:fc:fd:26:4f:b7:96:31:
62:80:17:9b:a3:9e:18:56:4e:a4:7e:b6:54:5a:62:e5:c5:c3:
eb:77:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:39:17 2025 by rpki-client