Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: tyy5UNKkZ5tHItexSQwt/khV9VME6XKptkID2aoJMlE=
Subject key identifier: 7A:74:75:D0:7D:9B:FC:92:3B:04:30:02:36:AD:E4:95:AD:37:C9:37
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 019A71B8E3F561500951479E9406FBD1C9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0D15
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: aMm0Ctlrbi6yqjZPsjsJA5XT9AHgxfxn9fOkshXV478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e3:f5:61:50:09:51:47:9e:94:06:fb:d1:c9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=7a7475d07d9bfc923b04300236ade495ad37c937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:60:67:de:48:76:84:38:db:28:6e:57:90:
ea:85:5a:5c:72:52:99:e7:9a:ff:81:36:57:56:b2:
58:f0:73:6a:07:d4:1d:d7:23:0e:f8:60:d7:ba:23:
fa:22:8c:46:f1:b8:77:a7:0e:a2:a4:2b:98:48:af:
8f:db:6a:86:cd:e4:60:cf:a3:f2:83:8a:e2:4a:77:
78:91:f4:33:fc:e8:0d:eb:22:ca:f0:ce:ed:2c:89:
67:9c:10:c0:c0:d8:90:d9:0e:f2:c3:02:46:bf:6b:
4a:35:03:94:50:c7:2b:89:fa:e9:fd:6b:fb:7e:be:
a6:d9:8e:3b:31:73:cd:57:18:00:f5:23:bb:64:e4:
4f:46:4a:be:31:f7:2d:74:df:b2:a2:5b:db:fd:c8:
b3:23:5e:da:b2:fe:90:2b:ff:b7:99:02:60:7b:67:
20:c9:c4:b6:53:1b:6e:9f:5b:aa:85:fb:1b:f8:f6:
5b:53:02:54:40:cb:b8:f4:17:3d:94:2a:5a:d5:de:
11:5e:8e:72:12:7b:e0:bb:87:60:a5:e5:be:f0:29:
d3:00:d8:77:6a:7c:0d:9b:0e:21:ed:b5:56:a6:61:
bb:1f:16:12:94:a5:0e:4b:25:6c:ad:e5:fb:d7:bd:
a4:07:9a:e4:2f:66:f0:40:4d:b7:5c:e2:9c:96:b9:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:75:D0:7D:9B:FC:92:3B:04:30:02:36:AD:E4:95:AD:37:C9:37
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:9a:e6:08:f1:94:88:05:1e:e1:57:a8:e4:fe:89:e4:7d:
72:d2:98:e7:47:8f:65:a1:d9:31:cd:6e:02:90:44:6c:98:99:
1b:7f:24:92:bf:7b:3e:81:2b:db:c7:a9:fd:db:0a:ca:f1:a0:
db:1d:12:21:c9:51:4c:7d:98:b4:0b:dc:98:25:70:f5:79:8c:
f8:7a:ec:10:8f:a4:8c:43:78:8f:67:b7:4d:5d:96:8b:1c:bc:
d6:d3:43:06:83:80:63:df:2b:94:85:b7:7c:1c:e7:87:1b:94:
ec:36:3c:fb:b3:81:02:1b:d1:b5:fa:3f:fc:b6:2e:95:76:aa:
6b:4d:93:f4:8f:1d:5d:f7:37:57:3d:2f:88:a7:13:9d:8d:05:
0f:e9:ba:60:ea:8e:dc:8a:02:55:29:f0:0d:a8:d4:6c:30:03:
ee:60:88:e6:8f:21:ea:c5:d3:fd:a9:3c:5e:ee:cc:9f:02:72:
b4:6f:18:60:7e:98:f5:9b:9d:a0:4e:bb:57:dc:fa:cb:fd:95:
14:fc:3f:c1:a6:d1:38:ca:c5:14:b9:38:34:2d:af:e9:29:c0:
5c:56:30:73:27:9f:03:24:1e:41:5c:61:55:13:29:63:75:7c:
e8:e7:fa:5c:27:d5:40:e7:6d:77:80:74:c0:59:e6:cf:a2:d7:
a7:25:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:41 2025 by rpki-client