Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
File: ZmW8l5kwxe64oYSlqQOei5nuMK8.mft (raw, json)
Hash identifier: 8vBNd9cbC1vkUfuLtcc+rbrE2AwxtdylWeAqfuZ0woo=
Subject key identifier: 4E:9A:57:9A:36:9D:59:F9:B7:C7:E6:DD:C6:B1:29:30:9D:06:CC:5E
Authority key identifier: 66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
Certificate issuer: /CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Certificate serial: 019A71B8283744A18251431027937F27CEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: ZmW8l5kwxe64oYSlqQOei5nuMK8.crl (hash: p6swiY59LYiOVFBg1YtRB6b8Vs64On1YY3vA0JLMI3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:28:37:44:a1:82:51:43:10:27:93:7f:27:ce:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=4e9a579a369d59f9b7c7e6ddc6b129309d06cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:4f:5b:bf:e7:b1:1b:29:b8:16:95:f7:10:
a1:2d:2c:fa:4f:46:01:0a:ac:6b:36:b5:98:2a:57:
e1:06:5d:14:04:09:1a:a2:d3:52:23:80:dd:17:97:
fc:c0:f1:8c:fc:63:e2:96:f3:7c:ab:c2:3d:8a:1f:
27:12:c5:60:63:0e:52:ee:26:c4:30:01:b5:ca:fa:
3b:e9:6a:bc:e6:69:d8:4f:26:35:9b:9d:5d:39:83:
37:45:63:0f:1c:ea:35:2f:86:1f:f6:d7:ee:77:2b:
c7:be:6a:36:f2:04:64:4a:bc:fa:87:8b:15:42:7d:
38:f4:a0:01:b4:07:82:b2:be:4b:ed:80:6b:00:8b:
e0:71:b9:a6:27:e4:9c:13:8c:60:1d:1a:41:2f:09:
4e:d2:ee:5d:fb:b0:da:5a:18:62:5a:be:4c:33:43:
8a:89:2d:3b:bd:08:e2:04:1d:ce:02:26:f5:f5:95:
0d:bb:0e:be:94:1f:e5:b9:de:8c:f6:b0:11:fa:fe:
f3:a3:e1:47:9a:41:89:c5:b6:a5:d9:06:a4:b6:7a:
4d:be:1c:a0:be:4d:2e:4f:84:1e:12:ce:54:5e:ab:
52:f0:b5:83:a7:08:14:63:09:e4:0c:8d:cf:91:d5:
b5:b3:ee:3d:52:60:02:36:ba:6b:79:e8:35:44:47:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:57:9A:36:9D:59:F9:B7:C7:E6:DD:C6:B1:29:30:9D:06:CC:5E
X509v3 Authority Key Identifier:
keyid:66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:58:60:6f:d9:83:5a:03:1a:fd:ee:2d:d9:46:95:6c:f8:bf:
af:de:4c:b5:14:8d:05:77:63:a5:35:46:33:75:b1:71:d0:82:
de:62:2f:89:15:11:7e:ee:7c:f6:00:ae:fc:c2:29:20:f1:b8:
e5:1b:26:95:ae:f7:a2:fa:a5:13:55:6a:ea:28:1a:81:6e:51:
bf:fd:cb:bc:39:d1:c2:70:f0:ee:74:a7:8d:91:58:f7:57:74:
65:f9:df:4f:fc:04:b6:d1:e9:d4:07:a2:f2:a8:ee:57:c2:a1:
93:38:e0:3a:18:60:19:57:6e:5b:6a:2a:7e:8f:24:76:97:6d:
a4:b1:7c:14:8a:1a:0d:5c:8f:bb:b7:00:ac:bf:5b:dc:97:63:
d4:74:cf:79:40:9d:d1:32:8a:7c:16:fc:35:87:7c:07:fe:91:
0b:59:75:9f:60:34:e7:ac:fe:72:f2:cc:2b:cb:83:c1:b3:7d:
6e:93:30:ca:37:61:a8:82:67:d4:16:2e:2e:46:f9:e0:35:3e:
30:9a:68:b2:c7:22:4b:ec:fe:43:fd:5d:07:9f:72:cc:0c:9c:
6c:dd:e9:0d:8c:88:bf:92:2c:28:13:02:0c:27:f6:e0:e0:ef:
cd:8c:83:2d:d8:fa:07:9c:4e:83:fc:e5:46:e3:78:68:3c:28:
55:cb:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client