Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: 4R+JB1E4rHAcshVPfqDx8NzBD5aw292aJF85sdkoVf8=
Subject key identifier: A4:D7:33:0A:39:57:87:F7:34:8C:44:AC:A0:C6:B3:BB:4C:DF:C3:1A
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 019A706E552F9F861D0C1AB2ABE391FF7117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0BD8
Signing time: Tue 11 Nov 2025 01:01:10 +0000
Manifest this update: Tue 11 Nov 2025 01:01:10 +0000
Manifest next update: Wed 12 Nov 2025 01:01:10 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: /eXlPrDyrr/OqP1Cgr81YXkwLFvjoTZwh+ebS+N5Xyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:55:2f:9f:86:1d:0c:1a:b2:ab:e3:91:ff:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Nov 11 01:01:10 2025 GMT
Not After : Nov 12 01:01:10 2025 GMT
Subject: CN=a4d7330a395787f7348c44aca0c6b3bb4cdfc31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:8f:66:51:ab:a3:e9:b5:66:e0:b3:4c:17:
78:50:d8:0d:89:ef:d9:96:80:2c:7f:71:2c:25:04:
03:46:22:e3:e6:59:7c:fd:1a:8c:80:c8:26:ec:2c:
b6:0a:c8:a6:14:0a:88:13:ba:b4:83:f9:1d:4c:3a:
36:5e:e9:34:93:97:e3:0a:19:d8:55:80:59:cd:90:
9d:98:87:17:5b:89:72:bc:71:f5:2a:da:99:82:f7:
9d:fc:8d:3c:f9:c4:1c:cb:92:42:63:88:7f:4f:1b:
17:11:e8:ae:c8:49:18:9e:56:1f:8a:ec:d1:17:77:
0a:c5:3d:09:4c:e8:df:49:de:e6:98:27:70:02:59:
3d:42:99:a0:18:a4:2b:5c:ff:a1:8c:70:3c:60:b3:
69:2f:d0:27:71:72:b2:c2:76:90:d9:64:bc:00:8e:
b3:24:a7:ef:22:a9:5c:47:eb:0c:b6:05:50:99:de:
33:8c:da:f8:c4:5e:13:33:d8:e7:e7:66:9c:43:ef:
7a:19:a6:9c:54:4f:0d:c2:0e:89:83:67:c0:93:ee:
35:b5:30:65:ad:85:ec:38:fe:b3:5d:b1:63:10:6f:
cb:8b:4e:f6:25:b2:1c:d3:36:b1:f8:a1:77:54:36:
c3:a8:0d:7a:10:f8:8c:c1:c5:19:d7:b2:85:42:f6:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:33:0A:39:57:87:F7:34:8C:44:AC:A0:C6:B3:BB:4C:DF:C3:1A
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:03:af:c1:4e:fe:e8:e2:8e:81:d7:ba:b0:2e:88:5b:aa:db:
ca:5b:d0:3b:76:2f:bc:b6:c5:d2:c8:11:31:2f:19:c2:b5:b2:
ae:3f:6c:b6:d1:93:60:c0:13:99:4b:88:80:2e:24:88:87:fe:
94:44:a9:92:17:85:33:b9:6b:8f:3a:5a:ec:da:f7:85:dc:0c:
71:50:7a:71:7a:e0:92:0f:f0:8c:91:58:c1:af:83:a1:33:69:
d4:a5:e2:f6:32:c3:4f:d0:45:ae:6d:e7:74:e6:bb:e1:c9:78:
80:df:73:1d:ca:45:77:f4:a8:92:f0:06:ae:40:25:d3:95:1e:
c9:89:73:de:38:02:46:23:01:72:39:ab:b9:19:51:d3:cd:ec:
f3:79:c3:4b:a3:80:52:71:ec:31:0c:7b:8f:c7:5b:92:dc:28:
fc:00:6f:cc:d1:bd:09:d6:27:b0:35:3a:ba:c8:f9:68:3b:93:
98:ec:50:d8:34:de:94:e6:68:a7:41:f4:09:8c:5b:b1:79:11:
82:f0:35:04:96:19:86:59:4b:07:3f:0f:57:ff:10:18:db:b1:
57:ed:93:c0:2f:8c:0f:c1:fb:a8:6b:82:c8:7a:97:c6:fe:b4:
9b:56:45:70:ce:85:3d:77:25:0a:b7:af:6b:49:25:7e:86:bd:
51:df:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:55 2025 by rpki-client