Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: jDpOpTjmKVgiPMXb7jftY7AFG2/HaDsixkqaqBmoI0E=
Subject key identifier: 0D:35:05:62:A3:2A:56:DE:71:17:FB:6C:1D:2B:32:4E:96:C0:F9:4C
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 019A7180943AAF7EF6002E46F6865B5E0E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: uT295n4sSh3wttQ8IByS9FJfbwnmOB6003C63H5V4ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:94:3a:af:7e:f6:00:2e:46:f6:86:5b:5e:0e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=0d350562a32a56de7117fb6c1d2b324e96c0f94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:85:f7:b4:91:4a:48:47:f4:4b:64:14:e7:
43:a3:d0:d2:8d:80:50:7e:a8:90:55:b3:07:d2:1f:
2d:4b:b9:e2:12:00:82:20:0a:de:61:b5:63:a2:50:
61:e4:de:ef:d0:9f:d0:0a:d6:69:31:e7:7d:35:db:
4b:09:b2:45:ad:51:7f:4e:f9:bd:3c:36:23:57:6d:
95:f1:17:54:59:ab:17:3f:42:30:79:cc:75:89:39:
78:79:01:92:f7:f8:dc:ce:e9:ef:39:d4:56:00:8f:
78:ae:31:ee:3f:dd:31:99:93:62:86:cd:67:e1:ff:
a7:ff:5a:56:eb:7b:54:85:13:48:c0:7e:a4:32:24:
5d:1c:44:af:f7:34:0f:c6:63:35:ad:0b:6d:c0:90:
f8:b5:12:3e:0c:34:dd:ef:3f:29:d5:7a:d6:e0:2c:
47:99:67:69:23:46:af:96:c9:e4:ee:60:c7:3d:ae:
a1:ee:d2:f8:7d:52:4f:23:2d:e1:b7:7e:6e:62:23:
91:5e:3a:2e:9d:1f:44:a4:f3:f3:14:52:32:e6:61:
97:a1:79:cc:c3:81:2c:a7:2c:87:e5:59:6b:40:b4:
72:24:5b:6d:84:5a:83:39:f0:e2:d0:a2:d7:8d:60:
f4:5f:98:8d:b1:c9:3f:62:52:c4:5a:66:e7:db:fa:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:05:62:A3:2A:56:DE:71:17:FB:6C:1D:2B:32:4E:96:C0:F9:4C
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:23:61:fd:14:fd:72:9e:7f:93:fe:19:e6:f9:cc:0c:3b:a9:
84:e3:39:de:8c:56:c1:00:ae:58:2a:9c:d4:72:0a:ca:ee:ef:
2d:89:c8:57:9a:32:82:a2:02:ac:28:42:72:b5:26:1f:4f:30:
b1:75:b4:84:4d:2b:94:11:50:09:35:4a:60:3c:34:63:95:95:
e2:4a:b7:bc:a4:d5:5e:97:11:fd:5a:8b:77:b2:7d:47:b6:89:
bb:fc:59:01:e0:11:12:2c:4c:1a:78:76:63:57:5b:42:62:91:
ee:9c:02:00:42:89:93:c5:1b:b3:67:d7:27:63:61:85:8d:3b:
2c:93:e6:1e:39:89:0d:78:09:9c:91:07:bb:22:b2:86:e4:68:
51:ad:54:00:0a:5f:48:54:35:c0:a6:19:f9:6e:f0:62:b6:1d:
db:12:1f:c3:fc:a1:5c:83:c0:1f:3d:e8:d3:bc:91:77:c0:e0:
dc:3d:c7:ea:c6:42:02:4c:93:92:3a:f9:30:14:b0:f0:ba:3f:
2b:a0:c5:09:ff:b1:19:99:a0:1e:2e:84:93:7a:48:65:83:6a:
22:05:eb:9e:8a:a8:ea:6d:d1:93:ae:02:7f:f0:79:b1:e1:56:
f3:43:47:77:b7:e3:0e:e4:2b:a3:c8:03:c4:02:7e:8d:30:be:
c2:ba:89:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJQ6r372AC5G9oZbXg4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1
NzA1NDAwHhcNMjUxMTExMDYwMDQzWhcNMjUxMTEyMDYwMDQzWjAzMTEwLwYDVQQD
EygwZDM1MDU2MmEzMmE1NmRlNzExN2ZiNmMxZDJiMzI0ZTk2YzBmOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowGF97SRSkhH9EtkFOdDo9DSjYBQ
fqiQVbMH0h8tS7niEgCCIAreYbVjolBh5N7v0J/QCtZpMed9NdtLCbJFrVF/Tvm9
PDYjV22V8RdUWasXP0Iwecx1iTl4eQGS9/jczunvOdRWAI94rjHuP90xmZNihs1n
4f+n/1pW63tUhRNIwH6kMiRdHESv9zQPxmM1rQttwJD4tRI+DDTd7z8p1XrW4CxH
mWdpI0avlsnk7mDHPa6h7tL4fVJPIy3ht35uYiORXjounR9EpPPzFFIy5mGXoXnM
w4EspyyH5VlrQLRyJFtthFqDOfDi0KLXjWD0X5iNsck/YlLEWmbn2/qD9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA01BWKjKlbecRf7bB0rMk6WwPlMMB8GA1UdIwQY
MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt
NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2
LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiNh/RT9
cp5/k/4Z5vnMDDuphOM53oxWwQCuWCqc1HIKyu7vLYnIV5oygqICrChCcrUmH08w
sXW0hE0rlBFQCTVKYDw0Y5WV4kq3vKTVXpcR/VqLd7J9R7aJu/xZAeAREixMGnh2
Y1dbQmKR7pwCAEKJk8Ubs2fXJ2NhhY07LJPmHjmJDXgJnJEHuyKyhuRoUa1UAApf
SFQ1wKYZ+W7wYrYd2xIfw/yhXIPAHz3o07yRd8Dg3D3H6sZCAkyTkjr5MBSw8Lo/
K6DFCf+xGZmgHi6Ek3pIZYNqIgXrnoqo6m3Rk64Cf/B5seFW80NHd7fjDuQro8gD
xAJ+jTC+wrqJmg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:21 2025 by rpki-client