Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: OmiJdD52ztKbZCuZgReMJUiptMztHPwN7brUdw6eth0=
Subject key identifier: 60:0D:8E:36:F3:0A:37:96:10:9E:D1:56:FC:08:DA:96:3E:C2:C2:0B
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019A52D1DEFA854CE5A38A12FA2F34F01543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 07:01:17 +0000
Manifest this update: Wed 05 Nov 2025 07:01:17 +0000
Manifest next update: Thu 06 Nov 2025 07:01:17 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: srm0HSW+Z68W5Y/ctWMJMZw5GgAwWdFbLjbJvGdAmNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:de:fa:85:4c:e5:a3:8a:12:fa:2f:34:f0:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Nov 5 07:01:17 2025 GMT
Not After : Nov 6 07:01:17 2025 GMT
Subject: CN=600d8e36f30a3796109ed156fc08da963ec2c20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:51:c9:c4:1f:c4:7e:5e:b4:e2:1b:0c:dd:
63:ae:d9:24:f4:9e:39:e5:06:81:71:51:48:0a:43:
c7:72:ce:ff:1d:7a:1e:8b:65:ad:f3:60:1b:45:64:
15:1b:97:c7:40:61:de:c6:a7:5b:c9:dd:f7:4c:5b:
8a:2b:7a:1a:bf:0c:6c:cd:95:ab:24:b0:3a:68:2f:
4a:4d:72:47:8c:68:d2:02:e0:97:e7:40:ff:03:3c:
93:32:b6:fe:e6:92:e0:41:a4:78:af:db:43:48:97:
10:f5:1f:86:eb:7b:ec:69:6e:9a:13:7b:76:59:31:
da:69:ba:4c:16:aa:60:c0:e9:ac:59:10:10:73:29:
70:9a:93:0c:77:a5:77:59:92:1b:e2:b0:5b:25:6b:
f9:60:15:89:1a:9f:b5:91:23:70:32:d2:71:93:58:
31:f0:32:85:8e:ff:a7:64:08:e9:f2:39:64:ed:d4:
a5:db:81:41:fb:59:2d:78:c7:55:4e:2e:3c:1b:57:
f3:a0:8b:e7:c9:5e:3b:18:d3:93:06:34:f4:2e:af:
db:6f:74:4a:67:a5:7c:cc:74:8e:57:35:a5:a3:94:
5c:25:d8:b7:5e:ed:35:36:19:8c:0b:30:df:4f:cc:
f3:32:1a:a3:3f:ca:85:5f:44:f5:82:f3:df:6f:fe:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0D:8E:36:F3:0A:37:96:10:9E:D1:56:FC:08:DA:96:3E:C2:C2:0B
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:bb:30:47:42:b5:75:d5:df:86:7f:f2:0f:4b:02:96:89:
1b:db:a8:19:2d:d9:aa:c3:c8:81:6e:04:49:95:d3:8d:7c:26:
33:f9:75:fc:a8:54:97:f3:3a:8d:cf:4c:4d:cf:17:22:3a:57:
1b:ed:65:47:61:cf:5d:d0:79:8f:ac:b9:08:48:61:fe:91:da:
74:44:d0:68:7b:fe:42:7a:93:58:12:3a:b8:4c:10:80:a0:73:
6d:be:c3:63:c0:1f:f9:33:ba:5b:a9:dd:5b:a9:a6:4f:35:3d:
de:2c:de:c4:fa:ea:eb:93:f1:03:da:79:9b:1e:c9:fe:10:40:
86:2e:d4:49:6f:6d:19:88:a0:9c:58:9b:9a:18:6c:20:d3:6b:
8e:45:85:07:c9:e9:26:70:d3:6e:11:c4:df:ff:fd:4c:d6:5c:
ff:d1:7e:da:ae:72:9f:f4:b0:ab:29:dc:75:96:b2:68:51:08:
81:05:fd:09:1e:4c:c1:0a:f1:fa:47:27:4e:4a:23:b6:3b:25:
8e:52:54:0b:20:e3:94:0d:40:44:ac:94:d6:c1:bb:64:ec:c7:
ef:80:7f:4d:e5:7e:ea:7b:0d:54:b8:31:68:8d:89:1f:c7:52:
01:c7:3b:82:b7:2c:be:5f:73:95:75:f5:5f:42:be:3c:c8:82:
c7:88:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:14 2025 by rpki-client