Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: rc213loYZpUqWW4Ome7PLFLbjMiijdeqW8jLRF/dlTM=
Subject key identifier: 8B:43:BA:3A:11:DB:2F:00:17:D0:34:8C:87:B3:52:FC:91:F8:AC:37
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 019A71EEDC1ECAA63F6F1FDB7EE8402AF656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 109C
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: SGjKZhnEphyvjA/ltmWANX6tVJfXH+MnnJlq2lZ+dpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:dc:1e:ca:a6:3f:6f:1f:db:7e:e8:40:2a:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=8b43ba3a11db2f0017d0348c87b352fc91f8ac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:e7:c1:ad:da:e9:02:fc:c4:1e:8a:ce:0e:
81:2e:82:52:88:b4:1f:dd:a2:09:9c:84:00:58:55:
60:d1:01:2b:e9:02:4c:65:54:5d:a8:8d:d9:ff:ea:
fc:cf:67:c0:f9:d8:64:b9:bb:44:5b:f7:f2:db:dd:
b4:0f:69:15:5c:5a:45:ef:03:ac:21:2e:23:24:b9:
2f:6e:72:32:db:45:4f:b7:4a:63:c9:3f:e2:fb:45:
d5:48:c7:20:21:57:5b:96:d5:09:28:6b:1a:6e:6e:
67:11:60:81:d0:58:1e:93:da:8f:fe:b9:9e:e1:e7:
86:52:9f:28:0f:76:1a:7e:28:6e:40:43:fa:99:f0:
2b:4d:ea:23:72:3c:4a:37:ab:67:52:60:79:24:76:
7f:56:cd:1d:a9:af:e7:cc:20:f3:48:69:dd:29:c3:
2d:f3:35:1a:75:a5:84:88:8b:01:ea:91:14:95:76:
4a:5b:0a:eb:95:00:fd:71:a7:6f:b5:46:6f:51:e7:
7d:c8:ac:bf:f4:ce:bc:a2:bd:e0:3e:b4:61:32:3c:
f7:c4:3e:17:9a:81:87:84:fe:94:f6:fc:81:58:e1:
d6:a0:3e:95:01:fc:57:3d:01:c7:95:07:6d:e2:54:
34:e1:55:e2:19:95:7e:15:81:2e:74:50:93:9a:73:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:BA:3A:11:DB:2F:00:17:D0:34:8C:87:B3:52:FC:91:F8:AC:37
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:10:27:cc:9f:a3:3d:64:e6:54:1c:c1:76:aa:a8:4f:03:12:
6c:10:9e:fb:80:36:33:fb:7c:40:b3:cc:55:24:7f:8f:e6:d3:
84:ea:f5:37:a7:fe:ca:81:c5:5b:e3:7f:e9:58:90:bf:64:13:
9c:0f:d4:d8:eb:fc:6b:2f:d3:1f:d5:d9:64:be:4d:fb:16:ac:
09:e1:e5:84:cc:9c:75:58:38:de:5c:3c:85:05:50:ff:ff:ec:
98:8c:49:5f:94:79:41:be:f8:49:55:51:d4:ab:0d:26:a4:51:
c8:dc:c2:c5:7d:e1:25:44:49:2f:36:66:53:42:8b:10:22:64:
02:b9:5c:7e:41:a6:f8:00:d0:06:8f:1b:fd:b9:7f:1e:3c:09:
69:32:97:0d:b0:07:1f:ae:fa:72:21:9c:02:d9:76:3a:ae:f5:
58:1e:d7:c1:17:dc:4f:5a:ab:d7:cb:5c:af:02:f1:fd:d1:95:
32:31:a4:e8:22:b8:ff:90:cd:a0:80:81:de:8d:7d:6f:6b:03:
5e:57:61:67:e2:44:d9:64:f3:78:d3:a3:42:03:29:98:d1:88:
aa:02:cc:16:f4:e1:05:37:00:6f:bf:d8:40:cf:64:54:a1:cb:
86:77:46:55:be:c6:25:db:9d:a1:86:a7:af:67:92:81:2e:3c:
0f:f0:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:04 2025 by rpki-client