Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: j6DEFwVwLPjjrfIhWjfbIWcPFRPGZTtq+j3jXfA7vZk=
Subject key identifier: F9:E1:C3:1C:5A:9C:75:50:B3:91:B9:57:A2:94:E7:15:D2:0D:58:7A
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 019A71B944C383617C93D6569941BCD2A1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: q3TOqJzeU4H9qr2vfsDsHrX+y0Ie+BX0+2laqn3BTQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:44:c3:83:61:7c:93:d6:56:99:41:bc:d2:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=f9e1c31c5a9c7550b391b957a294e715d20d587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:ab:cc:74:a2:f3:71:9f:5b:21:be:df:b1:
23:fb:45:b7:64:4c:b2:38:c5:aa:51:d7:fc:e7:a4:
92:a5:b6:24:e4:fa:33:91:e1:c2:95:07:3f:8f:dc:
4d:59:c0:9d:c0:82:cc:90:e8:37:ab:88:1e:58:e9:
92:52:96:27:35:4e:49:53:11:7a:50:45:83:fd:72:
94:19:0d:5f:45:cc:d6:e1:0c:1b:6a:3a:45:9d:80:
e2:a0:ee:3e:13:59:28:2c:9d:6e:a8:c4:59:96:6d:
53:87:ae:f0:a4:4b:5d:4c:d5:4e:54:54:dc:79:46:
ef:56:70:bb:19:82:06:34:a6:62:29:93:2f:0e:e5:
6c:72:52:22:35:6d:3c:32:91:48:ee:89:6f:ef:f9:
53:9d:5d:b3:20:09:17:dd:5d:33:74:56:2b:81:9c:
1a:7f:f0:03:25:83:6c:28:75:30:d6:22:ee:84:9a:
3c:46:96:47:ba:36:13:2b:37:7e:24:59:56:02:31:
4b:bd:41:91:7d:92:b8:c8:a5:a0:ef:d1:c5:08:b8:
ad:7a:ec:de:d4:7d:1b:7e:48:74:c6:5c:f1:db:f8:
87:e2:d3:83:ea:32:f1:28:94:ee:1e:13:4a:39:2c:
00:7e:48:9e:d9:c6:be:83:ce:2b:b4:a2:fc:67:5a:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:C3:1C:5A:9C:75:50:B3:91:B9:57:A2:94:E7:15:D2:0D:58:7A
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7c:16:9d:55:3f:8d:de:e5:79:6b:e2:9a:87:87:90:5e:10:
09:8f:68:b2:55:e4:43:2b:9e:6c:52:40:7f:ec:9f:ac:32:de:
2f:7f:af:84:13:2a:7f:81:94:3d:28:d8:3f:4b:57:6f:6a:a4:
52:bc:e0:c4:fa:9f:05:68:d3:13:18:c8:06:f7:46:0a:bd:c3:
6f:96:a2:70:d9:ca:a7:d1:c6:1e:5e:55:17:7e:36:1a:35:31:
33:b5:81:a9:95:00:1c:50:90:b6:aa:d6:9b:07:83:bc:a7:59:
dd:f5:74:13:bc:9d:85:d3:7e:24:20:5f:5c:ff:94:53:a8:f4:
3f:6c:56:f1:72:43:21:fd:65:d0:33:d9:c2:46:0d:7b:81:6b:
25:99:19:84:91:b4:b5:77:aa:2a:9e:92:6f:ec:86:44:62:0a:
3c:9b:de:c6:3c:75:d8:73:53:aa:41:89:92:a4:6d:f8:08:8e:
d5:f6:0c:75:a3:a8:e6:b3:a2:5a:32:8e:6e:c2:74:c8:f5:f3:
8c:8a:83:2a:a7:8a:21:1f:be:53:0b:0c:ce:c7:3a:3f:74:23:
7d:e3:ec:a1:34:df:63:56:a5:fa:ea:96:47:e2:14:08:ed:7f:
69:c2:a0:39:9c:f2:40:fe:ec:1f:48:a3:6a:d9:0f:54:50:d8:
f3:58:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:59 2025 by rpki-client