Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: o4L68sEqXXA6qgBL9F0Fw/TBz3yLEbsydg00uEOt/WY=
Subject key identifier: AB:0C:1C:0B:97:A6:48:A3:B2:C0:D1:E1:30:45:D6:34:50:A3:37:7A
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 019A4D73E07155E74FF8850728EDD973B748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 1421
Signing time: Tue 04 Nov 2025 06:00:30 +0000
Manifest this update: Tue 04 Nov 2025 06:00:30 +0000
Manifest next update: Wed 05 Nov 2025 06:00:30 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: 0rmPfkr0dsNtSkekWe9A8tbu0RRj1rtIoqFhhhaU5fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e0:71:55:e7:4f:f8:85:07:28:ed:d9:73:b7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Nov 4 06:00:30 2025 GMT
Not After : Nov 5 06:00:30 2025 GMT
Subject: CN=ab0c1c0b97a648a3b2c0d1e13045d63450a3377a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:05:07:8a:c4:79:d8:e1:1a:84:df:7f:f6:12:
8a:07:45:6b:9d:b6:8a:01:26:f3:b0:d9:2d:f7:91:
8d:f5:64:77:27:3b:c2:52:8d:b7:4d:99:85:43:bd:
d4:db:53:96:02:8e:16:3c:e8:03:89:84:10:2d:61:
d3:5b:5d:e1:8b:b8:f0:85:b2:b1:f7:2d:03:5e:06:
3a:6b:0b:25:f5:6c:53:1f:7f:18:d6:99:5d:37:e0:
3e:d2:49:69:a7:a9:13:8d:4e:0c:2e:b5:25:06:c6:
03:43:5a:ba:61:45:14:0f:bd:91:fd:c8:e9:38:72:
67:81:94:56:06:64:e4:37:21:77:af:a6:b3:be:30:
37:e9:ca:5d:6d:9b:7d:a7:4e:ff:e5:6e:ca:ec:b7:
e0:df:d9:f3:e0:e4:6f:b4:8e:33:2a:a4:09:b5:13:
bc:3c:4e:c0:75:2a:29:76:67:09:60:30:40:97:eb:
5b:c0:01:4b:8a:ff:66:09:84:72:b5:ce:ea:e9:fb:
9f:48:14:41:37:3d:71:30:b6:12:f5:32:37:4e:4d:
61:d5:72:06:76:c8:fe:dd:35:7a:11:fb:88:02:14:
44:77:0d:48:cc:e4:10:be:ed:5a:c9:74:57:b5:56:
73:42:76:13:b9:a1:49:d5:27:25:cf:ae:37:2b:9d:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:1C:0B:97:A6:48:A3:B2:C0:D1:E1:30:45:D6:34:50:A3:37:7A
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:f3:48:c7:39:f7:27:67:80:f4:96:1d:22:79:c3:70:f1:
2c:53:23:63:b9:e9:57:fe:a6:d1:a7:9f:b6:82:2a:2b:ca:98:
9e:5d:b9:f4:9c:dc:b1:22:53:85:b9:fa:a6:5b:8c:29:93:37:
0d:c3:ea:db:58:6e:e2:19:26:89:66:fa:f8:9a:11:88:c8:d0:
45:36:01:b1:26:44:22:69:03:15:e1:0a:b3:93:4b:01:2a:f8:
cd:83:8d:b0:1f:1a:3e:e2:02:68:f6:77:13:f7:06:c9:39:54:
7a:e0:2a:69:a7:de:c8:11:5e:67:39:14:61:f1:ad:a7:4c:da:
d8:53:02:1b:1c:e9:5f:31:0e:3b:88:b8:8a:e2:9f:0c:25:5d:
52:ff:51:be:6f:3b:a6:03:d1:17:9a:50:a3:71:99:35:85:1e:
b0:00:d2:ee:8f:7f:8a:cf:b0:ab:58:18:99:ca:15:62:b8:53:
ef:0c:28:d7:4f:b2:43:76:83:b7:a9:e9:3f:81:c1:9c:bf:52:
28:97:ce:ef:19:b5:b6:d1:01:34:71:21:b9:60:ee:1a:c5:30:
77:34:6c:fc:3c:7d:91:ce:79:b9:c6:bd:23:b5:3e:76:75:89:
2c:47:47:e8:72:e5:dd:a3:c3:73:49:7e:13:61:54:c3:8e:dc:
ab:7a:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:59 2025 by rpki-client