Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: 9lQv7EpEVkadvFyF+7N5l4vRdBlXfjFcXFVHeS7AXW4=
Subject key identifier: 1B:C5:5F:C3:FF:05:DB:97:A4:98:03:00:6E:A8:EF:61:A2:5F:DC:43
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 019A725C80BBC24BF4D4C4A17A20B42D7B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0D0D
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: 79s34EL/nLOuhbG/UIq+S96e9yzvPnIyrwEiAPx1g1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:80:bb:c2:4b:f4:d4:c4:a1:7a:20:b4:2d:7b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=1bc55fc3ff05db97a49803006ea8ef61a25fdc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:bf:f9:3b:a8:cf:01:6f:2e:8f:52:c5:1d:
8d:e5:28:f4:71:74:d3:70:65:45:e0:44:c1:f7:91:
bd:cc:f0:53:40:01:46:76:70:8a:f3:5d:8d:c7:9a:
2e:9b:e9:df:12:d4:54:7f:ae:13:3b:85:58:37:30:
af:c0:78:34:e9:62:25:1e:f8:00:a6:3d:9a:aa:a5:
13:ca:15:c6:94:ca:3d:68:14:48:1a:e0:53:8f:a9:
71:6c:80:da:c7:a9:58:e0:9a:a3:6a:e5:0d:3b:da:
85:56:39:dd:6d:3e:7a:2c:4f:8f:57:5a:f4:e3:68:
4d:11:c0:2a:7a:9a:d5:9c:c8:a3:bd:d9:78:ad:a8:
d3:4a:77:11:28:3d:a4:85:7b:89:6f:73:9c:0e:d8:
9a:b3:b6:87:5b:bc:68:a1:28:d4:6a:90:aa:80:3c:
bb:cf:bc:ae:6e:03:8e:0e:fc:f6:5e:5a:48:a3:6d:
8a:62:c8:f9:45:8d:e9:3a:cf:d6:58:48:74:8d:68:
40:ff:9e:7d:18:00:7f:1a:e0:92:2c:96:86:bd:88:
22:03:28:09:e8:12:cd:b0:21:5f:7d:71:8f:a1:79:
48:3e:77:ce:54:ac:95:cf:19:8f:f0:b0:9f:5c:2d:
02:aa:76:66:c6:1d:9d:77:9a:fc:e8:e4:5e:7f:2d:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:5F:C3:FF:05:DB:97:A4:98:03:00:6E:A8:EF:61:A2:5F:DC:43
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:bd:00:38:0c:57:63:2b:cb:c9:3a:c5:d1:8f:1c:20:c0:
f4:01:24:4d:fb:a6:63:d9:ec:e7:25:97:7d:de:b5:4c:c9:31:
57:b5:f0:b9:8b:42:65:6c:04:db:fd:6c:46:43:4d:d1:6f:c1:
f3:88:81:d6:7f:7d:8d:92:d8:1e:42:d8:e4:c5:87:da:6d:a2:
ad:b5:fa:f8:6e:52:56:9a:ab:84:57:e8:bd:52:b8:5a:d4:81:
b3:a6:ed:26:ff:35:e2:dc:7e:5e:5f:2f:05:05:fd:74:d3:9f:
1f:59:f7:c5:3b:77:e7:a5:99:f1:3a:7e:9f:c6:96:b2:4e:38:
1d:36:e4:2c:a4:aa:f3:8c:56:72:ef:4b:9f:ac:6c:0b:95:83:
b8:9d:4d:d5:25:42:0f:20:0e:fd:d2:ed:df:bc:b1:72:aa:2a:
6c:73:28:5c:b1:13:f4:6c:3d:52:74:c3:8e:94:e1:18:b4:25:
b8:89:2f:2b:fb:14:09:02:c1:26:24:11:85:c2:80:b1:d2:44:
94:6c:cd:36:b8:2d:68:37:ad:ef:05:bf:a0:14:34:71:7f:6e:
9c:c7:bb:d0:b6:7a:0d:af:49:3c:7f:ce:57:44:50:35:5e:26:
dc:0f:69:e1:6a:cb:4e:0a:5a:27:a4:53:e5:a4:82:2b:16:70:
4d:eb:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:07 2025 by rpki-client