Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier: TDXtB6QffKzm9wqTLWoenDs1pMLYFCGtKLXi2zRv+CM=
Subject key identifier: 49:75:95:49:D8:03:26:DD:0E:4D:4D:F0:87:6A:4A:63:6D:A6:33:57
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial: 019A71B9214F42A71A49434E3B9BF6C7AC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number: 11CD
Signing time: Tue 11 Nov 2025 07:02:29 +0000
Manifest this update: Tue 11 Nov 2025 07:02:29 +0000
Manifest next update: Wed 12 Nov 2025 07:02:29 +0000
Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: qa3Y8Fw+6ZnF28pzIlSJ5o7/ktgkqmQZsibTJoKpEsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:21:4f:42:a7:1a:49:43:4e:3b:9b:f6:c7:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Validity
Not Before: Nov 11 07:02:29 2025 GMT
Not After : Nov 12 07:02:29 2025 GMT
Subject: CN=49759549d80326dd0e4d4df0876a4a636da63357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:be:8b:6c:d1:41:7d:43:7c:06:1f:3c:67:
5b:63:51:c0:84:e2:8f:0d:5d:12:19:2a:8b:ac:78:
12:06:22:68:64:31:a8:b8:e1:e2:bb:25:92:aa:2b:
3d:40:14:4f:1a:35:12:d5:6a:e0:a2:02:9c:c6:49:
35:95:0d:be:db:f3:25:fb:04:6c:5e:bd:10:97:d6:
a2:36:09:0a:7d:a7:ad:1f:19:76:13:46:13:4e:46:
41:01:e9:b4:40:c3:57:82:c2:9a:f2:e0:12:b2:e3:
fc:89:78:e6:d0:6a:f4:70:41:26:ab:36:75:f7:d9:
2b:f9:05:80:2b:05:cc:df:fe:f2:bd:8d:43:63:01:
af:e3:a0:b6:3c:9f:a5:7b:6b:16:36:21:41:67:b7:
fe:fb:ed:d8:74:3b:8f:47:e5:00:3a:b6:23:db:59:
a6:51:0c:8f:bf:cf:ce:94:93:43:c6:a2:12:e1:69:
01:8a:1e:56:02:cb:b2:e4:b1:27:9f:e3:85:80:19:
74:3b:7e:1d:b3:fc:ee:83:1d:c2:9e:17:a1:3a:f7:
40:e9:a9:eb:73:b5:a4:e0:f6:96:00:2b:1f:ba:c8:
03:54:f3:22:c1:a8:e3:b7:0e:b8:14:e0:46:8e:1c:
cd:82:53:f1:1c:02:96:5b:e2:20:97:5b:07:0c:be:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:95:49:D8:03:26:DD:0E:4D:4D:F0:87:6A:4A:63:6D:A6:33:57
X509v3 Authority Key Identifier:
keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:1d:4d:79:7f:3d:27:62:f6:3d:d5:7d:58:b0:ae:45:77:
ac:ae:5f:56:0f:94:71:79:00:71:d2:d7:01:4a:f2:97:50:58:
bf:b6:33:da:52:8f:4d:66:74:29:96:12:4d:36:46:aa:99:7d:
22:98:88:1e:bb:98:78:c6:cc:cb:d8:15:68:1e:19:d8:b4:77:
6b:5f:b5:1c:16:9c:8a:85:f7:a1:05:10:fe:eb:9e:ca:ef:00:
75:a2:83:9c:35:9f:3c:23:57:5f:b2:5f:43:fa:2e:06:78:b7:
e1:53:97:e7:bf:62:72:26:79:fb:fe:70:0c:db:ad:e6:03:d9:
ba:0d:d4:dd:aa:4d:1b:e8:40:02:61:a3:84:2e:a4:e0:0f:4c:
66:3e:af:bf:d1:64:05:8a:30:b0:34:2f:35:6a:43:5d:02:28:
e4:f9:e3:00:02:f7:4e:ea:f5:36:ee:a8:c7:7c:93:17:8b:0c:
6b:b3:5b:f8:9f:ff:4a:f6:9f:70:e0:01:ab:cb:c7:c0:0e:ff:
e8:c4:2b:9e:c1:0a:b8:7c:92:d5:16:b1:33:62:b8:58:83:47:
bf:b7:e5:99:88:77:ce:e7:ca:cf:ec:97:5a:7e:87:22:f9:ce:
9e:84:a8:cc:4b:14:08:33:08:1e:e9:0f:ad:2b:c4:ad:fc:93:
67:f1:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:31 2025 by rpki-client