Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: 44UUptZWWwvWRL2IYEpLwgOS5JW4JmqgGLe4iWFFFWs=
Subject key identifier: 0F:3B:BA:8F:C1:97:82:63:A8:7A:65:43:BE:48:19:D0:ED:25:30:2C
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 019A4D06A4C92DE360916A41F7A567DF0743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 0417
Signing time: Tue 04 Nov 2025 04:01:12 +0000
Manifest this update: Tue 04 Nov 2025 04:01:12 +0000
Manifest next update: Wed 05 Nov 2025 04:01:12 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: TdFQI5M/MahVE8l4GpAD0OMhJb7fS8JdbuseP+OxHKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:a4:c9:2d:e3:60:91:6a:41:f7:a5:67:df:07:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Nov 4 04:01:12 2025 GMT
Not After : Nov 5 04:01:12 2025 GMT
Subject: CN=0f3bba8fc1978263a87a6543be4819d0ed25302c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:47:da:7c:35:53:8d:ea:28:08:76:f2:73:
b2:25:0d:ff:52:b5:ce:01:c6:d6:3a:35:c2:9b:12:
11:38:57:9f:78:de:69:c9:9e:cc:a5:d1:ae:da:c6:
63:70:8a:64:34:a2:4a:ea:85:3e:3b:8b:c7:e0:72:
7a:e3:0e:ac:b9:af:20:f1:92:7b:5c:b4:d9:e5:cd:
c9:24:98:5a:30:41:3a:7f:05:e9:3a:eb:b8:bb:78:
1f:e5:5e:46:52:e0:80:20:60:d1:88:71:d9:02:a8:
be:fe:77:2e:67:bc:e8:b3:0f:ca:f6:ce:89:0e:74:
0f:f9:d2:c0:51:2d:e5:ba:05:63:80:69:b5:e3:05:
27:4a:a1:d4:a1:30:b4:05:78:57:d6:a7:b3:2d:25:
9c:34:6c:cd:e7:e4:63:3b:5c:f1:16:09:4f:99:50:
c2:67:0c:12:8e:8f:60:b7:33:f4:96:37:90:90:76:
34:af:d6:83:82:6b:a3:5c:49:ae:28:7c:fd:17:fd:
b4:3b:90:5c:c2:2e:ea:d3:b5:87:41:85:35:d6:44:
a0:fb:9f:e5:dc:a0:b3:a0:dd:e9:3c:33:59:2c:78:
81:99:a5:61:ab:bb:3d:6a:e0:85:3a:b4:97:cb:ef:
f4:50:02:36:a4:bf:cf:43:26:24:e0:c6:eb:48:19:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:BA:8F:C1:97:82:63:A8:7A:65:43:BE:48:19:D0:ED:25:30:2C
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:e9:5c:31:7b:5c:1a:8e:b4:5a:99:c6:d0:e4:c6:02:5c:
03:ef:4c:7e:b6:82:c1:99:98:48:d1:f3:16:f2:12:4e:50:40:
dc:30:2c:11:6c:8b:93:03:7b:ae:98:48:44:24:02:c2:9e:5b:
1e:96:09:d5:bc:5e:52:c9:16:11:5e:a6:bf:01:c6:3a:2f:21:
e5:9f:68:e8:05:0d:3f:fa:36:d6:aa:34:bf:b3:6f:27:9b:2a:
c4:26:8e:f3:63:95:a4:73:f5:52:1a:24:66:dc:4b:1f:10:46:
cc:0c:c3:99:e6:a1:7b:f3:fa:5d:e2:63:a8:85:d9:2f:a0:f8:
22:4f:5c:9a:aa:e2:ca:79:c3:bc:f9:ec:c2:50:c1:2a:16:a7:
d5:14:05:68:df:bd:f9:ad:dd:ed:ef:c8:0e:66:71:23:45:13:
90:01:0e:7f:96:a5:ea:7c:71:66:15:cc:3f:c1:4c:a6:f9:a0:
fb:8f:57:fc:7a:5d:19:00:63:c9:04:c3:a9:e2:9b:3e:f4:26:
d0:a3:cb:de:a4:db:45:d3:1a:30:b3:29:cd:d8:c2:7f:e3:07:
ac:aa:f8:10:df:80:11:0c:a2:96:68:ef:4d:59:89:b0:31:e7:
f0:77:e3:29:5f:01:5c:e1:9a:b3:84:8b:b3:c9:42:20:35:ad:
21:e9:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:38 2025 by rpki-client