Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: rnU/kYy+LdC/vPSRuhPEznTf7h5ZTA58Q8XHhde7oiI=
Subject key identifier: CD:27:88:5E:6F:D0:0E:28:75:AA:2C:0A:9A:E5:EF:71:DE:12:3C:59
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019A2AB1038A58FC5010CE462C0B4549273E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 06AA
Signing time: Tue 28 Oct 2025 12:00:35 +0000
Manifest this update: Tue 28 Oct 2025 12:00:35 +0000
Manifest next update: Wed 29 Oct 2025 12:00:35 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: qecyNAdQlUp7KvRMnvWeoHmo624KBimO3p8JbCcy17k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:03:8a:58:fc:50:10:ce:46:2c:0b:45:49:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Oct 28 12:00:35 2025 GMT
Not After : Oct 29 12:00:35 2025 GMT
Subject: CN=cd27885e6fd00e2875aa2c0a9ae5ef71de123c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:7d:6b:d6:da:f0:14:66:19:c6:4c:95:da:
24:50:21:48:63:f4:d5:f1:9e:ce:c7:09:96:ed:b6:
5f:87:37:0b:99:9c:15:65:aa:f6:2b:88:4d:6d:a9:
07:73:b8:fa:1f:d4:87:d6:2b:15:75:70:b2:35:8b:
05:c0:dc:b9:7e:86:52:18:dd:ad:31:82:85:d1:d5:
f2:eb:18:92:0b:89:e5:04:4b:5e:9a:dd:73:ed:7f:
2a:34:c7:0c:f3:cf:ca:00:c4:72:08:9d:a1:26:29:
c1:bb:8a:2c:c9:2b:55:74:83:ee:ce:9a:f9:b9:70:
4c:0a:2a:c2:5f:9f:aa:86:f7:2b:dd:f9:31:42:d6:
8f:4c:8a:53:4b:ed:5d:ec:9b:cc:c1:a2:9f:bf:9b:
7d:3d:a0:39:c6:f8:b0:9f:fa:f6:bc:cd:06:ad:51:
df:55:48:c3:ac:fe:f3:07:43:82:c0:f6:c2:35:56:
df:5f:2f:37:56:68:e6:57:2c:bf:46:a5:33:ef:27:
ab:f2:36:c3:1e:39:d6:3f:f9:e9:e5:da:b4:45:72:
44:29:bd:ab:23:74:d5:94:d1:bf:50:54:31:9a:a7:
b1:29:e4:1b:ac:da:31:12:61:84:75:f8:ec:58:9a:
9e:44:83:27:1b:c4:55:18:ba:20:93:aa:56:48:16:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:88:5E:6F:D0:0E:28:75:AA:2C:0A:9A:E5:EF:71:DE:12:3C:59
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3c:67:7f:09:b3:63:a9:f2:48:5d:1c:5a:77:a9:62:b4:54:
21:23:f7:fc:22:3a:c7:57:c9:c8:8d:72:c5:e1:37:32:9c:f9:
97:c7:d1:80:ab:43:8c:cc:ce:64:a1:da:b5:a2:7e:01:5c:d9:
4e:65:c7:4e:b5:ae:71:f0:48:58:3b:14:f1:8d:04:42:84:b0:
66:f0:fe:76:a9:84:f1:0d:df:1b:25:9f:e5:cf:cf:df:63:33:
1d:48:7b:6f:ad:20:5c:3c:c3:8b:33:c6:6a:b1:b3:72:23:8d:
60:3a:43:85:06:cb:d6:19:b6:af:ca:70:b0:c4:d3:12:53:2c:
d2:62:88:67:f4:59:29:9c:76:a5:b7:95:7a:40:6c:77:1d:09:
f0:74:51:db:72:24:74:27:e5:3a:4f:bd:dc:47:8b:2e:7c:eb:
60:dc:6e:36:34:8b:30:07:b9:9c:f0:3c:1c:de:f9:7d:03:9d:
92:c7:31:0e:d7:a9:10:2b:e0:4e:35:90:bd:42:6d:0c:b0:e9:
eb:b0:8c:31:d5:66:4e:a8:36:d0:81:b2:68:b4:55:03:bb:3e:
c9:3d:8b:08:9b:27:8c:e6:24:ff:4b:5c:81:7a:3d:48:2c:2d:
81:4f:7b:df:ce:8e:31:cd:94:4b:94:7c:ec:30:a3:d5:db:4f:
69:e4:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:16:05 2025 by rpki-client