Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: zQL53X9aR7AmS3GTrYrsUrVvPad4p/YtI4K+EXLaKz0=
Subject key identifier: 07:C7:B7:7B:AC:2D:FF:54:00:84:73:D7:C0:2B:2B:F3:62:F6:89:E8
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019A50E3568F9EF1390D5CAA11D72425775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0D6C
Signing time: Tue 04 Nov 2025 22:01:07 +0000
Manifest this update: Tue 04 Nov 2025 22:01:07 +0000
Manifest next update: Wed 05 Nov 2025 22:01:07 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: 2OLc15YgpSWyQcnIqXmUIO6Do9B5FiWgyBRwaPsCTwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:56:8f:9e:f1:39:0d:5c:aa:11:d7:24:25:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Nov 4 22:01:07 2025 GMT
Not After : Nov 5 22:01:07 2025 GMT
Subject: CN=07c7b77bac2dff54008473d7c02b2bf362f689e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:df:d6:56:81:f8:9d:7a:65:e5:68:06:eb:
f7:ad:60:46:6f:22:31:03:01:14:96:d3:22:09:e1:
92:33:eb:ac:bf:be:c9:2c:3d:06:4b:91:a8:35:1b:
bc:34:7b:6b:a2:44:80:8c:38:71:73:dd:20:8f:b5:
b5:f7:97:3c:ab:fb:1a:d0:02:66:e4:e5:5a:71:46:
fd:a4:3f:62:f7:2b:a1:0a:40:d8:02:56:ac:e2:80:
8e:52:52:3a:21:48:25:d7:4a:69:46:bf:05:0f:6a:
8b:b3:62:62:5f:e0:0a:47:72:88:c9:dd:f6:90:0a:
5f:03:5e:c8:e8:ca:06:28:79:29:1a:b7:9d:40:dd:
83:5e:34:fb:e7:b3:85:84:ba:9e:4b:11:76:04:de:
9f:fc:00:45:40:d8:41:6d:92:cd:9f:90:51:39:40:
a3:2a:c3:ff:55:eb:c1:fc:d2:fc:e2:92:68:cd:5a:
be:76:2a:5d:c2:51:6e:b9:c7:eb:83:99:c2:7f:1a:
7a:93:74:f5:c0:11:1a:35:e2:61:b3:c7:bd:fa:b2:
38:f8:ce:78:69:b7:d5:7c:b2:2b:8f:cb:27:7e:ed:
38:4e:7f:bd:0b:01:a8:d4:31:1d:42:fd:2b:11:e5:
c7:28:5f:17:c1:c2:a0:26:53:47:27:1d:d0:62:c5:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C7:B7:7B:AC:2D:FF:54:00:84:73:D7:C0:2B:2B:F3:62:F6:89:E8
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5e:1a:75:a7:8b:d6:e5:3f:31:95:35:4c:93:91:d2:71:31:
1d:50:78:df:d6:63:eb:b2:0b:b4:4d:6a:fb:12:e4:17:1f:e7:
75:7b:aa:c9:1d:b3:63:b1:82:38:4c:29:06:86:19:a8:af:7c:
ff:16:d4:f8:00:06:e1:5d:f3:5d:18:3f:71:2d:2d:97:54:6c:
e8:3d:1b:8d:8b:9a:bd:c0:d6:f8:f6:ab:ac:bb:c3:60:a4:f7:
60:a1:16:d5:4d:ea:b2:d6:20:3d:dc:80:05:0c:ee:1a:a1:58:
2f:39:4d:cb:20:1b:27:88:6e:8c:e7:e7:26:64:29:e0:64:13:
ce:e7:b3:f1:74:e8:2c:dd:7c:25:e9:6d:ea:0d:5e:5a:b2:55:
77:53:af:8a:a0:70:55:71:6e:e5:2b:b7:ff:29:26:c3:ac:90:
f5:af:39:49:ba:6b:98:96:5a:97:42:ca:30:bc:6c:61:9b:9d:
2b:3e:b9:75:be:36:ae:14:02:9d:d2:3e:c1:fa:97:ef:54:e6:
87:ef:ac:6f:fc:4a:9e:3d:a6:28:67:d9:72:24:d9:57:a7:8d:
ba:f9:13:ec:94:71:ae:30:65:22:64:a9:8e:5e:ff:ea:45:8e:
24:93:98:1a:8b:58:9a:a4:57:f0:69:4a:98:8b:bb:6c:8f:4e:
11:69:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:18:54 2025 by rpki-client