Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier: 7PzIa9izUuZFtD/rr5Z3Pc5WoHqMZCHVwGSbk/4NihY=
Subject key identifier: 3B:2D:BB:D4:C8:97:92:A5:AF:23:A3:20:DB:8F:C4:16:35:D8:C0:5E
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial: 019A71B788264FF7C1E942D8DF7F4C2BC012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number: 0995
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: peJGzdUI0LfVLKfF9lFfg9RVvSCQ0kiKgijZNRYpOfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:88:26:4f:f7:c1:e9:42:d8:df:7f:4c:2b:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=3b2dbbd4c89792a5af23a320db8fc41635d8c05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:51:ed:f0:3a:e8:9e:18:73:c4:31:70:90:
59:95:06:77:14:fc:bd:23:d7:f8:01:60:73:46:4e:
ba:7c:bd:d6:1f:e7:e2:f7:61:d6:ab:a1:2e:90:96:
e9:b0:19:8f:53:62:2f:dd:2b:40:11:ff:c5:43:c2:
2b:4c:a4:8a:26:80:29:2a:54:73:0d:86:83:39:53:
1e:22:cf:76:ed:a6:2a:b6:3a:25:85:96:f2:f7:ee:
f7:c1:ba:48:fb:67:fd:36:5d:7d:0e:94:83:1a:9c:
d0:49:7c:5f:e4:f0:59:1f:26:33:ec:aa:d0:dc:56:
52:f0:6e:4b:16:8c:77:32:3c:a9:e8:2c:f1:d4:d9:
fc:8f:06:3e:80:87:31:e6:09:4b:4d:81:d2:57:2c:
2e:a9:08:f6:3c:34:6d:48:f7:f8:83:49:2c:d7:67:
3b:5c:6e:54:b8:02:4e:5d:c5:21:fa:fa:53:47:90:
cf:83:85:e8:ba:82:7b:b6:41:98:82:8d:6f:75:25:
b7:02:b5:5a:89:8e:80:11:19:10:9d:f0:f7:96:15:
8f:cf:d3:b7:6e:88:4c:56:04:52:66:a5:52:dc:fd:
b4:09:33:83:c1:7e:3f:7f:39:c0:11:07:86:e0:1f:
85:ed:ef:2d:55:35:6e:b9:10:b4:f6:2b:69:0e:2f:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2D:BB:D4:C8:97:92:A5:AF:23:A3:20:DB:8F:C4:16:35:D8:C0:5E
X509v3 Authority Key Identifier:
keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4a:08:e2:c6:1b:de:25:3e:1b:ff:00:dd:4d:d8:88:b3:31:
4d:8b:b0:26:3f:ca:f1:9e:9e:8f:92:01:cd:9a:7b:b7:15:32:
e1:03:f5:65:23:87:28:38:38:36:15:56:c5:51:b9:e6:f7:57:
95:9e:b3:7a:3a:64:41:70:27:de:46:79:f1:b5:84:ff:fb:02:
bd:33:d4:96:89:c7:89:e8:2c:04:f3:e5:55:e4:7c:3f:c6:d2:
02:32:1b:60:2c:86:85:c6:fc:14:bb:6e:33:85:bb:4e:d3:e0:
6f:a9:28:5b:7a:85:fe:ab:1c:a6:55:c9:54:a6:e2:7c:e6:78:
56:46:5c:95:c6:92:31:ec:8d:37:48:87:d3:3c:1d:4d:e8:1c:
28:95:53:22:4c:6a:7e:50:09:16:3e:0a:38:73:a8:b5:ae:e4:
96:ac:c5:31:94:68:36:2a:84:00:8e:1b:c8:d1:cf:6a:2c:3b:
b5:1a:c5:82:a5:0e:2e:e7:34:0c:ae:82:4e:48:87:b3:04:28:
1c:31:6a:7f:b1:ef:b8:a7:7b:01:73:0a:0b:ac:ce:9d:46:c9:
24:f7:bd:de:3d:b0:39:c0:41:f7:25:5a:19:dc:24:b0:81:b6:
92:03:6e:f8:f3:a0:31:da:dc:dc:41:45:41:1a:a3:c4:05:1a:
3b:ea:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:47 2025 by rpki-client