Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: cf2kVsRsudisJ5x/rE+jj8lkqm4YvAqL+CT8O7v1rdY=
Subject key identifier: AF:A7:6A:F1:C9:04:93:C8:28:D9:44:3F:6B:49:58:26:B4:91:E7:6E
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 019A71B8F59CC613A513305353C8F6D709AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 16AC
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: i+565/DwzygDvsedmkG9jiRBdsIefggzeUvoe0AiNk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f5:9c:c6:13:a5:13:30:53:53:c8:f6:d7:09:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=afa76af1c90493c828d9443f6b495826b491e76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:f1:f1:9d:84:6a:4c:d7:16:a9:c9:6e:fa:
2b:c6:b5:08:a5:60:75:c7:4b:b7:06:38:69:51:66:
0a:8f:90:cc:e6:e6:a8:6a:f6:f6:95:da:a8:11:5d:
05:fa:12:18:0f:85:ba:61:aa:12:c7:24:ff:c6:20:
78:7b:b8:21:05:95:d8:1b:cd:c5:87:c9:84:65:cd:
36:cd:ea:37:d6:67:07:ad:af:11:27:7e:d5:8d:74:
69:62:6c:42:af:41:59:dd:ed:f2:73:3e:9c:81:a6:
b3:51:fe:a3:5b:b1:94:5f:9b:e6:cb:7e:5b:c2:d3:
49:61:cf:10:d9:98:1e:eb:25:c7:57:36:2e:df:02:
4b:f0:f5:1a:88:13:37:e1:e1:cb:92:f0:3a:b3:74:
0d:27:68:ef:2e:b7:e0:eb:86:02:e3:b2:ae:0e:cb:
a1:47:14:89:a8:ba:c1:2c:11:05:d6:15:44:67:7c:
e3:3b:fd:18:c8:a5:fa:3a:2b:58:63:0b:1e:11:d1:
92:b5:22:94:43:8a:54:96:9a:0a:d7:5b:d7:47:63:
7d:09:e8:58:c8:30:c0:1b:66:55:8c:c3:75:2a:2b:
c5:ec:5f:7e:fe:90:49:07:e0:16:19:1e:0f:f0:48:
24:b8:4e:99:9b:cf:f9:84:e9:6d:5d:8f:0d:8e:9a:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:6A:F1:C9:04:93:C8:28:D9:44:3F:6B:49:58:26:B4:91:E7:6E
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f4:5c:78:16:26:ac:91:af:30:35:df:9d:ee:66:65:78:63:
17:8b:0a:2e:06:3d:a1:bf:dc:c9:ad:c4:6c:f7:91:95:57:51:
ae:a9:0a:11:be:2e:ad:cd:c0:43:9e:1b:4c:3d:37:f2:f9:c5:
b7:cd:5a:de:ef:7e:d0:67:02:62:95:98:0c:91:0c:85:49:f5:
0c:65:b6:e0:dd:17:30:23:ef:2b:d5:1e:89:c2:eb:24:db:b9:
e4:9c:23:4d:5b:7a:7d:5a:2b:d5:7b:89:76:cc:48:3b:05:20:
32:b4:07:e9:8b:d3:e3:67:d8:bd:1f:91:f1:f0:7f:3f:72:4e:
d4:e3:78:8a:de:3d:43:96:ae:9f:c0:67:f4:76:46:59:1c:70:
dc:b5:1b:32:b8:0a:a3:1c:68:09:64:b4:19:91:24:89:b4:21:
76:87:d0:3a:d9:4f:3d:4c:35:67:85:a1:83:32:07:7d:09:69:
fb:f6:60:47:fc:6f:7d:19:60:e0:cb:9a:64:18:5b:62:27:6e:
38:ea:e0:88:81:32:54:4f:5c:49:1c:98:3f:65:70:1f:2c:41:
d6:ba:ba:92:e7:48:e9:d2:94:87:e1:4a:6f:4c:d5:90:4c:fd:
d2:57:ab:cb:06:fe:2a:7c:ac:82:92:ed:02:5b:42:8b:e8:a7:
82:cd:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:21 2025 by rpki-client