Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: Tcovraw2eGhZQKi8M6nlPsHyvps+5K2B8UC6jvEHvbM=
Subject key identifier: 6D:C1:F4:03:66:42:6C:55:16:A8:30:65:D1:0A:D1:C8:0A:03:BE:C1
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 019A52D2C8CC88CB796D86643B293A66C500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 144F
Signing time: Wed 05 Nov 2025 07:02:16 +0000
Manifest this update: Wed 05 Nov 2025 07:02:16 +0000
Manifest next update: Thu 06 Nov 2025 07:02:16 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: 2HDaYM903XUpkZOkHUJTlVdLxG7gLGQOhHM1sqr2tfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:c8:cc:88:cb:79:6d:86:64:3b:29:3a:66:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Nov 5 07:02:16 2025 GMT
Not After : Nov 6 07:02:16 2025 GMT
Subject: CN=6dc1f40366426c5516a83065d10ad1c80a03bec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:ba:03:61:ea:e6:25:0a:f6:58:7f:bf:48:
03:a9:d7:b1:93:71:d8:a7:26:7d:e2:89:fd:ad:b1:
aa:15:88:c1:16:49:e0:de:b4:d9:57:71:b4:f2:ec:
33:e7:64:98:3b:98:87:be:69:b1:b2:52:7d:5f:f2:
11:08:31:e8:b4:2e:24:54:d0:be:99:97:d3:dd:d5:
63:a9:26:9f:51:a1:2c:5e:61:1a:9d:a0:5c:e9:6d:
96:76:5d:f1:df:34:52:e1:d9:fa:58:f9:0b:be:15:
e2:f3:15:71:35:b8:37:d6:15:7f:74:aa:e3:e0:73:
8d:75:08:36:e6:12:47:ef:50:24:87:bf:9a:78:4f:
81:64:b8:6e:99:9c:b0:64:9c:f6:07:8a:57:d1:40:
9d:88:41:38:69:98:e0:0f:ec:84:ce:69:92:13:f3:
7e:39:d8:a7:c6:24:7e:d2:ff:cd:40:1f:4d:cb:3d:
52:fd:d2:bc:26:c2:de:6e:8a:c8:5c:65:1d:62:ba:
0e:66:2d:5f:12:0f:64:d6:25:0a:f3:9d:6e:ae:98:
70:e6:ae:a5:65:a7:00:8f:7b:30:dd:44:3e:86:76:
2e:36:a3:48:d3:d4:93:2c:7a:37:b8:3e:04:d9:8a:
99:f1:2b:20:aa:49:e7:3a:d7:55:4d:ea:dd:cc:cb:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C1:F4:03:66:42:6C:55:16:A8:30:65:D1:0A:D1:C8:0A:03:BE:C1
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ba:4d:cf:92:8c:97:8f:61:f5:04:0f:53:9c:86:33:28:70:
c3:fd:e5:7b:1e:a9:a1:11:4a:a8:d8:18:e0:7a:2c:78:13:3d:
01:9d:4c:8b:87:08:11:47:1d:a0:5d:f1:2f:5d:e7:85:1e:e0:
bf:80:eb:7a:b5:f7:15:78:3e:38:c5:50:a0:66:59:2b:d4:3f:
cf:f2:fa:38:3d:32:04:b8:9d:fc:b1:d4:1a:ec:51:34:a8:10:
0b:43:e8:0d:e5:62:9b:bc:2a:7e:20:7f:eb:61:52:b1:94:6b:
39:a2:0e:11:1c:09:ca:7f:a0:4f:29:5b:dd:e0:a2:14:64:4d:
cd:a9:b8:b2:86:21:d5:a8:de:03:e5:7c:99:a5:3b:c9:53:ec:
ec:58:8a:a1:c3:be:b5:47:f4:04:26:73:e6:a5:01:b7:ea:88:
7c:10:a4:0b:22:b1:60:d8:ef:ff:c2:69:b7:90:88:e5:6b:1c:
3a:78:d7:f1:a0:f7:53:39:34:e3:5a:c0:58:ca:8e:69:76:4c:
b0:02:73:d5:58:88:05:ab:ec:c2:6e:25:69:69:a5:58:89:9c:
13:2c:2d:63:04:ea:65:78:29:2d:85:42:c5:3f:ff:25:00:e0:
c9:30:12:f3:45:42:7b:fd:5b:35:59:4b:b7:bb:5a:c3:ca:98:
f7:07:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:42 2025 by rpki-client