Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: wBMvZBMvSfdN9dDdcxXarVQlR5oxShuE+7SB01NBapg=
Subject key identifier: 87:68:81:2E:71:B5:7B:B0:FF:27:3D:2B:D1:54:30:B5:52:DA:9D:FC
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 019A71B935A43FEE757B481177F1EE5173BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0F3D
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: 1laItF57+1b0m4HCi6OK3cjFiIVRl8BRRXAZpr+0T50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:35:a4:3f:ee:75:7b:48:11:77:f1:ee:51:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=8768812e71b57bb0ff273d2bd15430b552da9dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:21:d1:cc:dd:13:04:6f:07:31:83:d8:07:
e2:6b:81:46:f4:0a:d7:37:1f:14:09:20:db:06:51:
ae:a1:62:cf:f5:06:f3:b4:88:7c:e7:1d:b4:1c:d5:
13:c2:0b:21:f4:57:fd:74:83:bf:34:57:0e:73:33:
d5:4f:18:cf:ac:33:02:29:95:3b:5b:b4:f4:8a:61:
b4:23:48:48:ee:ee:8f:e6:2a:4b:aa:b6:64:15:24:
7f:75:28:8d:fd:fe:d5:17:19:e3:66:59:0c:3e:bd:
5b:61:8f:3c:94:3b:b8:2a:c0:b7:09:98:09:01:81:
32:ed:52:26:14:b3:f4:3e:90:7b:bd:a9:34:b1:83:
29:28:35:67:6b:d2:0b:d4:27:d2:07:f8:4e:2b:6e:
b1:1b:e3:82:ea:85:c4:98:b2:d5:cf:56:e5:b0:e5:
86:b8:35:f7:29:a4:e6:77:2c:e4:40:ea:32:bf:ac:
b2:ac:a9:f0:be:fa:70:65:31:97:dd:71:e7:39:ee:
87:ef:dd:15:43:5e:dc:49:72:54:fe:27:c6:c0:c4:
cb:d7:7c:98:f4:fd:13:f5:3b:69:09:5e:f5:00:c5:
47:69:1a:4d:e8:d5:11:24:d4:92:61:b7:a5:f8:51:
ed:fc:bf:6b:59:b3:1b:4c:c7:6a:39:33:9f:96:2b:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:68:81:2E:71:B5:7B:B0:FF:27:3D:2B:D1:54:30:B5:52:DA:9D:FC
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1b:e5:c3:03:70:61:19:1b:cb:15:3d:53:91:a6:58:0a:f8:
72:cb:56:1e:d9:a7:05:9c:c0:35:6e:a9:7e:d5:73:c4:f5:06:
97:d6:ca:6d:dd:21:44:68:a1:b9:a6:d0:da:56:3f:3e:34:02:
51:cb:80:c5:65:ec:4d:85:c8:30:8d:ec:07:e3:41:1f:37:69:
f5:bf:aa:c7:59:17:35:66:5c:1f:76:81:81:d3:d8:7a:20:bf:
43:b4:01:8b:17:62:55:35:51:bd:63:4a:af:f7:7d:f7:87:7c:
c8:e5:66:1e:fc:a0:bc:9b:17:2f:51:97:7a:2b:dc:18:08:65:
5a:73:f0:2e:20:40:8f:ee:14:d3:a0:d3:b8:9e:f6:19:11:b8:
ff:cf:2c:84:17:b3:96:a4:ec:e8:5c:0f:b6:63:c8:98:02:52:
8b:cf:04:b0:50:b9:5e:ba:7c:6c:db:34:06:ff:17:c7:83:5f:
8c:61:12:9a:e7:15:4c:10:75:1a:74:25:30:a8:83:90:b5:df:
cf:fb:1c:51:8d:24:05:f7:e0:a7:bc:b6:ce:66:b2:63:cb:9d:
e4:3e:ed:9d:a7:d5:69:de:27:b6:e1:fb:d9:cd:3e:b1:db:70:
02:94:cb:e5:5c:3e:7d:b0:98:ee:2a:e0:c5:a4:f9:71:e9:69:
7d:82:e5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:30 2025 by rpki-client