Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: 33KU8NZdw4AX1ax9/ToeHbEQYuaVDR6RiUypoJSkl+g=
Subject key identifier: C6:76:18:E9:16:29:D1:8D:18:65:EF:04:43:2C:90:23:6E:2A:2B:D8
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019A72937123A65952809A335C0EB755C07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 14A4
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: aoUHRui5xC3MiM9BMTJvmu9kAFfGIUuRK0r8iomRFgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:71:23:a6:59:52:80:9a:33:5c:0e:b7:55:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=c67618e91629d18d1865ef04432c90236e2a2bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:56:3d:da:f4:c4:ef:aa:70:82:d5:49:c1:
31:66:9d:94:42:7f:f7:5f:3a:58:e7:f3:df:38:eb:
3c:e2:6a:b8:d5:f5:87:56:fd:bf:3b:39:e1:5f:3a:
50:29:e0:ed:2b:63:7f:e3:15:78:52:fd:60:06:41:
a1:3b:dd:35:10:0e:b6:51:e7:f6:09:8a:1e:11:ba:
24:e4:e4:9f:97:f5:a2:fe:ee:21:85:5a:90:16:34:
b6:a6:23:63:69:8d:7f:0d:47:92:bf:18:26:d9:2b:
9e:85:59:24:00:15:41:ac:92:f6:d6:97:92:39:ec:
49:7e:66:5c:80:d5:a6:2a:12:1e:57:a3:3a:59:7d:
26:1d:1c:eb:8f:68:fd:e4:e2:a7:ae:0d:c9:30:b9:
e3:22:3f:8a:4c:78:1f:7b:08:66:60:89:03:f9:bf:
0c:81:87:0a:bf:07:53:39:15:8a:62:a3:ac:2b:3f:
aa:d5:b0:60:f4:c1:3c:c7:a9:0d:79:46:4b:17:fa:
5d:20:57:a2:fa:31:6e:d4:53:11:88:a0:29:54:0b:
03:ec:b5:f6:4a:b6:18:e6:8b:89:60:2a:3b:b1:39:
d2:a7:21:c0:fd:ef:94:e4:10:85:99:3e:65:2f:3e:
f9:2b:8e:f4:35:a2:26:10:e5:55:5c:b7:d3:4a:59:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:76:18:E9:16:29:D1:8D:18:65:EF:04:43:2C:90:23:6E:2A:2B:D8
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:89:6f:21:8d:13:ed:38:00:5c:60:ed:33:18:7b:de:24:
35:bb:40:d2:1a:0c:25:9f:df:5b:ad:77:60:b3:2a:a4:74:c4:
46:b0:96:1c:b1:62:17:cc:9e:62:fa:f7:36:72:1e:b2:5f:e1:
a0:a2:60:27:75:09:41:a1:d1:8b:a8:28:01:aa:1a:98:02:65:
c6:93:cc:05:92:59:51:fc:75:ee:02:62:75:97:11:1c:92:a6:
23:5b:48:e7:66:e4:3e:05:85:2d:ae:7b:74:94:91:a9:58:22:
13:81:3b:ac:ff:47:b3:90:d0:b2:31:21:b7:4e:7d:1b:77:5a:
5c:19:5c:d5:e9:b5:5c:aa:7e:a1:f9:6c:0a:e2:72:f0:f6:fc:
33:ab:a4:ed:c1:5f:10:26:e9:be:48:bf:2c:af:d8:70:95:3c:
08:ec:80:fc:6c:cb:ce:42:74:90:ef:f8:44:7a:c8:90:6b:c3:
33:11:06:32:be:70:96:3a:68:2c:b3:aa:c1:ca:02:c8:fd:26:
92:81:00:5a:85:25:b1:a6:85:a2:15:ad:b0:f9:5a:09:a7:a1:
8d:55:bf:2f:4f:74:cc:b7:28:e3:76:58:b5:d4:bc:4d:33:5e:
a8:b8:9b:04:61:3e:9a:f7:0f:ec:b5:42:9e:b2:3e:d3:56:3a:
58:e5:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:12 2025 by rpki-client