
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: +vc+1LwRj1svGoUUlROpdzKHazFSuYmkyiuXTC6/mZk=
Subject key identifier: 92:77:61:31:41:B5:AF:5C:B7:A8:97:63:5B:1B:66:D9:DC:AA:51:3C
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 019923A04DCE53F92ED0788CCFF5FA68C3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0C68
Signing time: Sun 07 Sep 2025 10:02:12 +0000
Manifest this update: Sun 07 Sep 2025 10:02:12 +0000
Manifest next update: Mon 08 Sep 2025 10:02:12 +0000
Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: nZgHau74ixI8zBDqZeLIc+UQ0cjTpMNrst4t57ScFHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:4d:ce:53:f9:2e:d0:78:8c:cf:f5:fa:68:c3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Sep 7 10:02:12 2025 GMT
Not After : Sep 8 10:02:12 2025 GMT
Subject: CN=9277613141b5af5cb7a897635b1b66d9dcaa513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:9e:f3:c7:26:07:44:d9:ee:49:ac:0c:2b:
37:29:ce:ff:4b:d0:a6:45:ed:ba:4c:c0:95:72:b9:
16:67:42:1f:70:8a:af:b7:1d:f1:86:9b:d5:99:b6:
14:60:e5:8f:14:5f:65:a9:26:b1:12:4a:25:9d:03:
b1:d0:d7:3b:61:93:90:42:93:3e:b1:31:7a:73:fa:
e1:b3:24:99:94:9d:f6:64:4a:b4:da:2f:27:8e:b3:
33:aa:5a:8a:72:00:0f:33:e5:0d:11:45:95:df:1d:
4c:b3:ef:7e:da:02:0d:28:bc:ab:72:58:19:07:a6:
fe:4a:5f:17:4c:b7:15:d5:84:36:31:42:71:12:d9:
b6:d2:f4:2d:67:66:cb:53:c9:05:00:bc:4b:57:60:
bf:c0:20:9c:ed:5e:4b:ff:92:e1:36:43:a8:c6:ee:
4b:23:ac:97:17:80:51:ba:82:af:d7:6f:93:b1:f2:
05:18:2b:14:9b:de:51:47:46:75:03:ee:fc:1d:fa:
4c:39:cc:8e:23:58:af:da:16:94:77:1e:2c:36:1e:
1a:ed:e2:57:08:31:d5:be:32:d9:61:6f:9b:1c:7b:
11:37:cb:3d:6d:6d:b1:ad:28:f1:a9:b8:7b:3c:e2:
13:2d:c3:86:ab:f6:56:55:1b:30:2f:14:80:11:51:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:77:61:31:41:B5:AF:5C:B7:A8:97:63:5B:1B:66:D9:DC:AA:51:3C
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:89:f3:b5:91:96:ef:03:c5:2e:c0:2a:c5:00:ea:a5:4c:77:
9f:20:fa:02:62:aa:5d:59:50:1c:e1:44:de:eb:95:d9:08:c1:
0b:12:1e:dc:de:b3:79:3d:cb:aa:ee:79:36:db:2f:05:06:bc:
98:f1:2d:51:4c:4d:0c:c9:07:30:3a:b7:0d:b0:12:25:33:96:
4b:63:ce:33:a8:3b:c6:6d:ac:0e:b1:87:3b:f4:07:f4:e0:36:
96:e0:8f:57:38:16:69:2d:9c:72:2f:77:9a:b3:72:d4:9a:cf:
b9:71:a9:77:68:cb:1c:20:c6:0f:ed:0c:ef:e5:6c:ab:97:13:
7d:01:c0:f4:06:b3:e0:6f:83:25:83:b0:ca:37:2f:c1:5b:3b:
14:35:31:c3:0d:5f:91:c3:1a:fb:fc:4b:6e:36:61:e3:af:73:
3f:44:28:b3:31:9e:44:58:d5:de:82:7b:82:b5:27:07:c7:c8:
19:f5:ff:de:5e:87:a4:4a:e4:9e:b8:50:9a:66:94:c9:3d:29:
7a:1f:1f:ae:d9:b7:4f:12:24:f3:96:c1:26:8d:2f:2a:ce:72:
1e:71:62:49:87:33:37:63:65:3a:46:c8:84:66:86:f9:68:73:
84:10:36:66:33:60:f7:0b:4e:a7:10:49:8a:e8:6d:f5:f8:66:
80:98:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:21 2025 by rpki-client