Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: easp9Jq1QGkMI1RWrJjd8TdglsYbRMkuP54aD/c739k=
Subject key identifier: 74:74:98:1B:44:92:2C:37:5F:81:80:A0:E5:BB:99:C8:3E:4E:56:8D
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 019922FA2807484D07A1513B4A66148E11D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 09A7
Signing time: Sun 07 Sep 2025 07:00:43 +0000
Manifest this update: Sun 07 Sep 2025 07:00:43 +0000
Manifest next update: Mon 08 Sep 2025 07:00:43 +0000
Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: 7ujfAzSCqJNIPr3d5fb1sajE+keyelezA16BoE0uynE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:28:07:48:4d:07:a1:51:3b:4a:66:14:8e:11:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Sep 7 07:00:43 2025 GMT
Not After : Sep 8 07:00:43 2025 GMT
Subject: CN=7474981b44922c375f8180a0e5bb99c83e4e568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:94:4d:c8:79:72:7e:d5:ea:ad:11:1e:fc:
1c:e4:0a:7e:5d:48:6c:79:cd:aa:77:18:b4:71:54:
dc:f3:b1:de:88:5c:bd:67:14:a1:07:62:7d:8f:14:
53:6a:60:7c:da:55:4e:b5:e1:ce:24:7e:8e:0f:59:
22:e6:37:88:37:bd:de:69:18:07:9f:cc:40:4f:89:
4f:16:3a:18:11:e4:5b:26:5a:4d:d9:14:86:91:2c:
db:75:3a:a2:3e:97:51:ee:d5:0e:d2:25:47:26:b5:
1e:64:05:0f:13:1e:ca:7d:76:77:ba:f4:7b:8e:92:
de:67:92:e3:a3:2c:3a:91:a6:cd:43:36:85:40:76:
aa:44:c8:39:6b:03:b9:0b:4c:c1:ee:4e:59:58:71:
89:1d:d8:d6:ed:cd:61:c1:d5:78:70:41:9a:16:aa:
45:e7:00:5f:84:68:2c:d6:73:37:87:13:cd:07:3b:
29:62:ee:82:ed:0a:16:c0:37:d6:54:ba:fb:8e:be:
4e:6a:bd:de:e4:d9:48:4f:a8:15:4b:21:65:c9:c7:
02:85:66:cc:27:fc:31:d5:80:c9:06:28:06:cf:bc:
52:f6:26:35:a9:c9:d4:7c:bd:c9:93:d9:7f:fc:80:
31:5e:9b:5f:1a:af:46:ef:c4:60:85:8c:13:6b:d9:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:98:1B:44:92:2C:37:5F:81:80:A0:E5:BB:99:C8:3E:4E:56:8D
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b1:91:43:5a:bd:77:9c:35:5b:2c:d8:f7:a9:30:35:d8:14:
98:ec:69:d5:b7:b3:91:ea:95:fb:37:ab:65:8f:15:1a:bc:3c:
a5:ad:5a:4f:52:c3:9d:d1:5b:ea:a6:93:9e:b2:ff:a2:89:8b:
d6:0c:6c:d7:12:09:45:92:31:02:d1:03:39:d3:2f:f7:31:44:
d1:0b:bd:8f:75:47:d2:f4:cc:4d:03:5d:96:92:66:6e:0b:5c:
cd:cc:4f:4d:0b:25:06:d5:29:77:f2:e3:32:81:24:26:7d:26:
83:71:a4:a2:49:d1:7f:8a:e0:0b:98:cd:79:a7:7f:6b:a3:98:
9b:6a:c7:84:5c:91:98:36:38:5e:d4:f6:0c:dc:2a:e9:ab:a5:
ab:7d:9a:a7:57:62:7e:fa:af:fa:4a:6e:bb:15:76:69:b5:7d:
08:37:95:7c:e6:2d:c9:80:40:f7:3f:9c:a4:cb:9e:6f:61:99:
0a:dd:b7:c7:b2:14:d7:77:bd:ff:7d:36:c5:bb:f7:28:72:d1:
26:da:be:e9:55:e8:a9:19:fc:e6:2d:68:f6:5e:b3:cd:15:c9:
c9:e8:d6:cb:dd:13:f0:6e:87:39:8e:b4:0f:8f:9d:d5:8c:b0:
de:2d:21:d3:e0:fe:c0:b9:0f:65:87:38:7a:f8:9f:ba:d2:08:
97:b3:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:44 2025 by rpki-client