Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: GZ7R7tEhueCpE+S1zvUI332JJ13KyxMpqU+97EL3vA8=
Subject key identifier: B7:C6:36:C3:0A:92:47:C5:0C:4F:57:91:0F:4B:76:58:B8:B9:13:CD
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 01987450A41C58DA7710E714BFCC856FBE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 132C
Signing time: Mon 04 Aug 2025 09:01:38 +0000
Manifest this update: Mon 04 Aug 2025 09:01:38 +0000
Manifest next update: Tue 05 Aug 2025 09:01:38 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: aMrCMOhcpxg6hzJipbq5P2T/aGWec4iXlKeNz3UoghI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a4:1c:58:da:77:10:e7:14:bf:cc:85:6f:be:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Aug 4 09:01:38 2025 GMT
Not After : Aug 5 09:01:38 2025 GMT
Subject: CN=b7c636c30a9247c50c4f57910f4b7658b8b913cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:ad:2d:ec:f4:f8:0f:25:d9:cd:23:03:79:
fb:a3:7c:90:9b:61:33:c1:05:e7:ee:cb:0e:1f:2d:
f0:e9:85:81:43:51:1b:2a:c7:ea:82:ab:12:01:14:
10:5f:54:4b:f6:43:8b:27:a9:82:1a:d2:7b:17:86:
8b:52:1a:66:6b:99:cc:51:d7:37:fc:33:a4:b3:5a:
d5:99:f9:0b:52:0d:65:f7:97:61:ee:d8:7b:b8:14:
4c:5a:ae:28:40:44:0a:df:e4:53:6b:bf:3d:d8:3e:
1e:80:cc:a6:29:4c:bd:6c:e6:49:e9:05:3f:08:d8:
61:39:2c:d9:ab:2b:09:dd:6e:0d:24:4c:ba:ed:65:
a4:6c:f8:0b:6c:c0:54:7d:4e:cb:2b:0a:10:1d:e3:
79:3c:b8:80:24:ba:48:be:37:35:d4:55:f9:4f:c2:
31:e4:6d:5c:73:90:52:ee:66:84:bc:09:b3:f7:2e:
05:d6:44:16:5b:ab:5b:31:21:c3:dc:a8:eb:fb:e9:
37:d9:9f:80:52:6d:3f:5a:15:c0:ff:6a:5e:9b:75:
d0:31:53:d9:ba:69:ba:45:b0:ef:77:5b:ae:84:b0:
2d:8b:27:f4:78:35:d0:eb:b8:88:0f:3f:1c:cd:13:
45:12:69:b5:ca:dc:b5:56:8e:1f:4b:2f:8c:17:b1:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:36:C3:0A:92:47:C5:0C:4F:57:91:0F:4B:76:58:B8:B9:13:CD
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:6a:e4:d0:27:8e:c4:51:e2:a6:fb:b3:10:8b:24:6f:c9:
36:f9:a2:fd:d1:f4:83:43:13:b4:34:71:f7:37:a3:fe:a4:2f:
73:ec:9c:9d:ae:18:e3:f9:6d:52:75:db:1a:69:21:7e:93:d0:
1a:39:63:c0:3e:d7:13:af:49:32:75:ce:f5:5a:82:a9:6c:cb:
06:73:e1:ec:c6:4f:4e:4c:98:61:ef:f1:88:26:50:a8:b2:dc:
6c:da:24:1b:c2:60:26:5f:34:a4:8f:0a:d0:d1:c5:f0:e6:f1:
d1:be:dc:f2:4a:97:27:bf:9e:05:96:c1:8d:b3:7e:00:e0:d5:
8e:15:b2:c2:1e:7b:16:76:e4:bb:24:84:08:26:19:ba:ad:dc:
c4:d9:29:a1:57:3f:3a:e4:08:84:eb:2b:21:b6:00:58:4b:4a:
19:d5:3f:ad:1c:ee:0a:51:22:a6:62:45:2d:7c:3f:6e:e9:ab:
69:52:df:df:ea:50:7d:a9:b8:49:b1:01:0b:86:f7:a5:07:c6:
e4:e8:e2:a6:5d:49:9b:52:3b:01:8a:06:84:74:a1:3e:63:61:
33:fc:14:91:5b:c7:31:56:55:bb:82:96:73:3f:71:42:1f:90:
ec:b2:7f:ee:ab:09:57:83:d6:03:0f:71:87:f2:a3:d3:c1:f8:
32:f9:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:30 2025 by rpki-client