Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: By1NEf/FUnZsIL/R9aytA7ioA8uw0MAF1KWaXvq+no0=
Subject key identifier: 07:7F:9F:0F:3D:16:B3:F5:48:3C:43:FA:7E:F1:F6:A4:65:89:79:F9
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 019A71B7A4732DDF9D855D44F3C390605E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 13FC
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: t5HsBx7XMznEriLYkirZDv/1hMqFuS6nnUTvvz1IN0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a4:73:2d:df:9d:85:5d:44:f3:c3:90:60:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=077f9f0f3d16b3f5483c43fa7ef1f6a4658979f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:af:8e:90:f7:f2:5b:37:33:9a:de:3a:c6:
b0:c6:a1:e9:c7:bb:f6:2c:b4:44:c6:e7:19:a3:4d:
00:33:f2:74:7b:11:56:5a:8d:bd:6b:ce:a3:91:b9:
ff:a2:18:00:4c:4a:40:be:b6:f0:8c:d8:02:52:a8:
59:f8:84:5a:86:40:02:5e:aa:bd:38:1d:d6:ce:10:
69:8b:47:78:e4:3a:dc:e5:cf:11:b4:26:61:92:22:
8a:25:99:e9:a2:c2:4c:bd:8b:a5:1a:3e:18:e7:ff:
0d:f8:88:7d:b6:2b:c6:06:af:d0:6f:18:f9:e1:f5:
9c:eb:15:6e:c4:a5:b2:f7:9d:5d:3a:4c:4e:db:4c:
03:3f:be:53:26:35:8f:88:a6:f6:bf:67:c5:89:e5:
1c:82:a2:bd:e8:5a:35:49:ec:54:78:cb:79:96:9f:
f5:d0:12:aa:42:d2:60:5d:6f:3a:f2:11:6a:8b:68:
9a:84:32:90:82:ee:66:0f:1a:a9:d7:f2:b6:34:99:
e4:53:cd:1c:25:d2:58:c9:f4:66:0e:2c:75:57:48:
b0:8a:1a:de:34:8c:93:b8:91:7c:e2:06:64:90:70:
17:c1:64:59:8a:ef:7d:04:be:cc:4c:eb:99:e4:73:
d4:39:e6:18:75:6c:32:b5:56:27:a6:95:85:02:a1:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:9F:0F:3D:16:B3:F5:48:3C:43:FA:7E:F1:F6:A4:65:89:79:F9
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9d:ff:a4:89:23:77:b8:f8:e2:44:74:62:0c:44:cf:53:dc:
4f:9f:71:e3:5d:74:ad:66:45:f1:f4:d0:c4:a6:ac:93:8c:5b:
07:ca:3c:b6:0a:4d:64:24:7a:41:89:c7:dc:a1:17:42:87:62:
80:2e:6d:29:c8:cc:d6:71:2d:72:8b:8e:40:a8:cc:fb:8a:f6:
b9:9c:42:cd:2a:3c:ca:c2:41:e5:32:e3:ed:bb:cb:ae:e0:3f:
33:11:bc:43:99:28:d5:28:39:25:f2:a9:00:c7:d4:e2:e0:1c:
b7:7d:7b:d9:4c:69:d9:45:c7:c8:ed:0c:28:35:2b:4f:c9:40:
23:80:b7:0a:fa:55:b1:8a:bf:66:f9:75:0f:4f:92:20:ac:af:
ff:7f:84:04:f5:4a:c4:9c:1a:b8:69:27:d9:1a:3b:d6:b7:c0:
1e:90:71:b6:b8:93:7e:4e:13:f6:62:96:be:3d:9c:7f:a2:a5:
09:30:b7:c7:db:e9:4a:69:c3:d2:9f:07:b1:32:c0:35:8d:7d:
b1:6a:bb:54:4d:84:af:ab:fc:d8:bc:71:a4:99:23:a3:7d:04:
25:f9:3e:7c:59:74:07:09:cb:73:bb:ac:31:21:9e:53:39:51:
fe:a7:bb:a5:c0:f3:ce:36:f7:a8:fd:c3:ca:b7:66:ad:1e:a3:
b1:a5:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:16 2025 by rpki-client