Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: bHHZkzehQLS2+gwkhJDzhaBQC/JjYCDZuLwBNz0boKc=
Subject key identifier: DF:FC:FE:AE:3B:9E:83:7A:7D:8D:FB:B0:60:50:B1:54:83:FC:8D:9C
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019A51F53E6D568A8D0F1631558807C0747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0BC5
Signing time: Wed 05 Nov 2025 03:00:17 +0000
Manifest this update: Wed 05 Nov 2025 03:00:17 +0000
Manifest next update: Thu 06 Nov 2025 03:00:17 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: 2/bdRqMNyZTUHbpxW+L+xojRmA+6iO1rt2R7X1o2p70=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:3e:6d:56:8a:8d:0f:16:31:55:88:07:c0:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Nov 5 03:00:17 2025 GMT
Not After : Nov 6 03:00:17 2025 GMT
Subject: CN=dffcfeae3b9e837a7d8dfbb06050b15483fc8d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:66:90:71:77:99:7b:d7:22:b1:68:e9:64:
02:ad:51:93:ea:4b:96:6d:48:e2:5e:f8:55:12:2d:
11:fc:2b:e7:ed:80:c5:12:51:6b:42:2a:e1:ef:30:
d1:2c:12:31:fe:ab:66:a2:12:20:d5:27:5a:30:26:
ee:4a:2d:2b:9a:8a:a8:e5:55:55:2d:89:16:09:ed:
0d:db:9f:2d:9e:3c:a5:1e:6f:cd:8c:be:97:8c:a2:
fd:8f:13:e1:65:a4:1a:d0:12:ef:fe:01:70:ce:c4:
73:3a:c6:41:0e:04:7a:23:1d:4e:a2:6c:e2:25:54:
5e:2a:5f:0c:63:00:cb:50:6f:b0:de:9f:6b:14:80:
88:19:a7:87:97:d6:e5:e3:c7:c6:38:25:6c:95:18:
aa:fd:90:59:7a:66:1d:22:6c:7c:3c:97:32:41:1d:
e1:70:bf:a7:75:a8:a3:42:f5:eb:4b:f6:ca:33:7c:
03:a5:9c:8f:8a:77:84:af:3c:8f:24:ee:58:5e:04:
c6:3f:4f:57:10:4e:26:51:98:b3:86:f5:63:0b:28:
b7:e4:77:a1:3f:b9:b4:41:44:62:f6:60:5f:66:ed:
45:b0:f8:93:1c:57:2c:5d:82:4e:50:b7:3f:a5:ab:
a1:cf:b0:b0:68:ef:96:26:d5:d1:57:1d:98:98:8d:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:FE:AE:3B:9E:83:7A:7D:8D:FB:B0:60:50:B1:54:83:FC:8D:9C
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d9:fd:f9:12:56:62:12:6e:67:1d:1d:8e:d5:47:b6:23:51:
75:3c:c6:28:c2:c7:e0:ed:48:3b:0b:6c:6d:54:65:49:47:9f:
72:4b:a5:db:b0:e6:bb:b4:d6:2f:89:17:65:e9:9b:f8:1a:e9:
7f:fa:59:2b:dc:10:db:bb:d7:58:db:eb:f5:09:a9:84:94:45:
a3:85:de:8d:44:07:ca:d0:1f:8c:05:bf:40:22:85:c1:58:75:
5f:d7:20:a7:b0:f0:73:be:8f:a9:c7:42:8e:43:23:ef:ed:3d:
f1:4b:99:02:46:c2:ff:c7:e4:16:08:48:a2:5b:f9:4e:a1:76:
83:69:00:a5:03:3c:b3:41:37:2d:d6:9c:67:09:55:10:76:7a:
75:0c:ce:0a:e8:8d:7b:a7:c0:4f:42:bf:b3:92:b1:9b:f8:f4:
30:fa:b3:75:ea:4f:7b:25:27:c1:49:84:8b:3b:7f:29:5e:b1:
fa:7b:37:64:3d:d1:8b:79:99:9c:f3:04:db:41:2c:9a:aa:b8:
c7:97:21:69:8f:d4:4c:ce:96:82:26:2b:d3:59:c2:4c:ba:cd:
c8:1d:fe:9f:20:80:1e:45:bb:7a:87:4e:c2:2b:24:36:39:c8:
87:32:52:28:57:04:9f:83:15:86:a3:52:39:1e:89:8d:6b:25:
51:94:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:32 2025 by rpki-client