Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: /d7czv81vWqcG1qkhDIP/FgTt++iqTWMxrr8dRrn150=
Subject key identifier: DF:9C:2C:A6:F2:59:DC:BC:13:E0:45:AD:25:FF:42:9E:23:7D:E8:2E
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 019A515119D2473BFB579B5C8799AFC2E382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0E2F
Signing time: Wed 05 Nov 2025 00:01:00 +0000
Manifest this update: Wed 05 Nov 2025 00:01:00 +0000
Manifest next update: Thu 06 Nov 2025 00:01:00 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: wmgIx154aNo15vUAZCQD4Iu8rGc6tv2BfNtRnkz8PNI=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:19:d2:47:3b:fb:57:9b:5c:87:99:af:c2:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Nov 5 00:01:00 2025 GMT
Not After : Nov 6 00:01:00 2025 GMT
Subject: CN=df9c2ca6f259dcbc13e045ad25ff429e237de82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:a0:f7:21:a4:7d:1e:a3:b5:db:e9:34:2f:
71:46:20:88:e6:9f:bf:c6:e7:a9:65:8e:8c:32:46:
4c:a8:8f:15:db:e5:b1:4e:c8:5a:31:34:95:f4:7f:
27:f8:46:85:30:d0:37:35:36:6c:e3:be:28:7f:8c:
47:ad:61:14:b6:29:42:f8:7e:3c:6e:fa:84:f5:4a:
61:16:89:35:67:9e:66:b1:02:cc:1d:ab:b3:aa:20:
12:05:49:5a:99:31:16:43:7e:c2:05:3f:12:a3:fd:
9c:f6:c7:6f:8b:16:03:95:cb:de:83:37:58:81:3d:
43:4e:a3:ad:db:76:a6:38:33:2d:e4:03:a9:59:a8:
cc:38:09:48:0e:10:5e:2a:ae:2a:ac:01:e3:9d:9c:
49:31:3c:35:4b:45:04:9c:1c:b2:70:6e:97:7c:9e:
65:90:b2:9b:2b:15:1a:ea:48:e6:f9:26:82:28:c1:
42:77:25:49:5f:c7:aa:35:07:31:f2:c7:e1:2a:e6:
8f:5d:bb:ec:29:8a:2b:bf:d1:ae:69:c3:a6:8c:1b:
79:2a:35:2a:b5:b5:3d:86:75:47:51:16:7a:89:70:
1a:df:3d:1b:73:58:0f:6c:45:77:88:10:7a:b1:2f:
0e:84:de:17:be:39:3a:08:4a:80:6d:c1:88:41:e5:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:2C:A6:F2:59:DC:BC:13:E0:45:AD:25:FF:42:9E:23:7D:E8:2E
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:ec:80:44:6a:a1:46:9d:be:dc:33:a1:b5:0a:3e:53:7c:
e1:53:d4:d4:77:2c:09:fc:bc:22:96:08:e6:3c:77:ca:d5:e9:
44:0d:ae:f3:36:fd:e2:42:d5:e2:ad:bc:49:ee:33:10:c2:94:
64:19:18:c8:4f:90:74:d4:2d:1e:65:da:2f:e4:d4:15:23:cf:
b3:80:1c:af:02:6d:70:c4:9b:39:6e:a7:60:f9:14:70:74:a7:
15:79:3e:2d:9e:8c:dc:eb:26:d4:a2:51:9f:50:f6:e2:88:7f:
a8:bd:20:eb:2f:b2:dc:2d:6f:37:df:bd:5e:7c:02:a4:e9:19:
7f:b9:34:67:de:7c:91:97:b4:36:7e:6b:eb:5f:b6:83:c6:50:
34:a3:98:f2:91:d8:9d:91:30:3b:a9:67:e1:3b:dc:19:38:da:
3e:8c:ed:91:a6:96:8c:6a:37:bb:d3:59:49:ea:3a:54:e0:95:
e2:4e:dd:3c:9c:e2:ea:c0:62:6b:02:82:52:1e:85:40:86:c7:
91:27:bd:5f:89:6e:4e:66:f1:6b:4c:33:8f:8a:af:31:b6:40:
66:43:91:a3:db:0b:33:8b:2c:fd:4a:e8:f4:08:b7:4c:cb:aa:
7e:0c:8e:e5:1a:6e:f2:90:d7:ff:57:a8:b8:1f:8a:5d:00:c0:
b5:11:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:17 2025 by rpki-client