Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier: +ICMiZktvF51WBotK5wucBSZfFFXZxVFlEZZPVnK7N8=
Subject key identifier: A2:82:CC:5C:E4:99:E9:F1:B4:A1:57:3D:81:2E:4F:DB:65:00:C5:2D
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial: 019A722670632D38184D51C9BE4A69B1B242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: dc6M1leRmRKT5Ft4AMBY1pl3r8sNUeuYWwqPYS236vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:70:63:2d:38:18:4d:51:c9:be:4a:69:b1:b2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=a282cc5ce499e9f1b4a1573d812e4fdb6500c52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:f9:7a:42:1f:e5:76:80:31:a0:73:21:a8:
2f:fa:ce:77:5d:bd:9a:43:d0:94:6f:8d:db:49:13:
b6:44:35:8a:ac:8b:ee:c6:9c:64:78:a8:a3:0f:0a:
27:24:bf:11:cf:af:e5:45:34:f7:e3:bb:b3:29:ee:
8d:bc:bb:34:e0:90:65:7b:da:04:a7:d4:20:05:55:
18:ea:a9:28:eb:0a:c8:08:23:e5:32:46:0f:f3:7c:
0d:ee:62:3c:db:c6:1b:5a:da:a5:65:c0:8c:ff:65:
ae:72:a5:ea:3e:ce:3b:30:5f:f7:88:a4:f1:af:e7:
54:38:68:56:0c:7c:fd:20:4c:a2:66:b4:3c:1e:3f:
05:b6:fc:80:a8:b9:ce:df:dd:4a:9d:65:1f:cb:98:
e8:ec:08:3c:40:e1:ad:d6:50:ef:33:68:51:bc:f1:
81:67:ea:20:cb:b4:4e:cf:98:e3:96:1b:54:d3:9b:
6e:28:dd:a4:7c:92:7e:9b:c1:ba:4c:10:e4:05:cc:
40:7c:41:21:e9:b5:2c:9e:ad:31:a8:09:61:88:54:
40:f2:e6:35:e0:3b:9a:44:b2:61:70:5e:d4:79:d8:
cb:6a:4c:bd:1c:5d:39:29:35:9f:6d:c0:54:0b:90:
2e:60:e9:cf:9b:c6:b6:77:74:82:e9:fe:70:c3:54:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:CC:5C:E4:99:E9:F1:B4:A1:57:3D:81:2E:4F:DB:65:00:C5:2D
X509v3 Authority Key Identifier:
keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:52:a1:a6:99:1c:1b:d0:89:09:10:1f:e7:c3:ac:e7:66:
f8:da:68:91:2f:02:e2:4e:8b:6a:2b:91:83:a6:b4:8b:77:b9:
28:3e:39:87:32:97:4c:a1:46:ea:20:17:18:a0:3c:a6:e1:8f:
b2:f5:8b:f6:8f:48:dc:c2:b1:94:97:9d:de:a4:18:41:ca:c4:
8b:1e:a8:99:dc:cb:a7:c6:7d:d0:c1:60:60:df:32:56:42:87:
d7:4b:70:00:6e:a4:d0:83:71:8e:84:4f:e6:6e:2e:15:e1:fb:
1d:fd:71:d4:ec:70:23:ad:6d:1e:2c:94:d0:ee:be:61:80:ad:
11:bd:9f:ac:22:c7:6b:bb:18:84:c9:3e:de:27:83:67:66:3d:
53:99:2f:a7:d6:1c:a1:4b:3f:de:ff:ff:3e:96:6e:ed:e9:50:
d6:bb:3e:dc:6e:e8:c1:aa:6b:58:e9:33:91:87:cf:40:d2:39:
cd:19:0d:d4:ff:03:35:48:0a:1c:3b:e1:0a:8a:26:5b:9b:fb:
30:49:f0:01:db:61:7b:74:74:ad:7c:02:bc:fb:5f:36:cd:2f:
86:76:48:c5:fe:76:88:68:14:4e:5f:3d:fa:af:75:f4:ca:a6:
bc:cc:b0:b2:cf:66:36:73:d1:14:93:05:73:fc:d4:47:a1:fb:
f6:28:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:17 2025 by rpki-client