Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: 0QGSrl/V2pILkEI5m068jErc31BLZB7tjAbKP7YEJkI=
Subject key identifier: E4:EE:7E:0E:AC:6C:4C:44:0F:09:32:BF:2F:06:2F:E3:5E:2A:60:B6
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 019A71B781470472EAE72EA60510979A53D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 0C13
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: Qn8kJ4cCR3bzOO94hsiDtmPmiKGpwdf2w7JNzKfOJc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:81:47:04:72:ea:e7:2e:a6:05:10:97:9a:53:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=e4ee7e0eac6c4c440f0932bf2f062fe35e2a60b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:8e:59:94:cb:0b:15:9e:96:e8:30:fe:ac:
85:f3:8d:ef:1b:07:95:ef:5a:aa:b0:73:39:a7:ab:
e8:a9:68:01:ce:4a:df:53:15:d2:8f:36:70:47:3d:
84:38:06:01:02:42:83:bf:d8:a7:6f:0c:12:37:60:
6f:a0:1e:a6:e1:a2:79:a2:61:60:52:a6:92:7c:f5:
d5:e5:60:e9:56:73:43:04:95:2e:84:bf:76:ce:aa:
02:e6:40:f2:73:83:cb:77:0f:5f:32:7d:59:ae:4d:
8d:02:04:8c:c5:db:49:82:75:76:ff:89:38:96:65:
18:57:c4:52:ea:98:24:50:69:af:f0:ec:91:99:55:
38:96:94:d3:04:db:f9:e9:45:94:0e:7f:d7:7f:89:
fd:34:9e:ca:e8:ad:40:79:de:89:f6:c7:d6:3e:e0:
cd:32:0b:67:f2:f6:c0:0b:87:29:d9:a6:c7:c5:19:
2c:ef:ea:11:af:26:b9:98:1b:b3:35:68:3f:e7:bc:
03:06:7e:88:a7:b4:ba:3b:a6:23:e7:ae:d9:57:d3:
11:2c:f0:71:6f:83:6b:dd:c2:95:09:74:60:42:56:
77:31:81:8d:2c:bc:4a:86:51:ec:06:95:ef:aa:f1:
6f:b1:34:21:42:bc:82:d0:b8:11:e1:fc:c4:95:39:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:7E:0E:AC:6C:4C:44:0F:09:32:BF:2F:06:2F:E3:5E:2A:60:B6
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f0:86:0a:a6:d4:8f:c4:7e:a5:4d:df:4e:08:cb:76:54:82:
0f:36:cd:e5:f3:55:ff:c1:15:cf:74:79:dc:2d:25:b0:0e:1b:
49:a5:21:52:64:f8:58:60:50:54:de:9f:ef:3d:6d:61:c3:6c:
e5:43:3f:af:30:d6:23:ad:d7:77:6f:8d:cc:bb:f9:bb:b6:7b:
10:09:f6:b9:48:84:6d:de:74:50:48:0a:76:79:e6:12:15:ed:
78:42:00:91:bd:ed:33:4b:d5:ba:41:80:be:c3:50:6b:50:61:
49:b8:03:db:d7:87:35:47:3a:cf:be:6c:2f:50:61:41:3a:c5:
5f:5d:2a:07:24:b8:ce:4a:e4:7f:66:97:b3:07:58:65:a0:16:
e5:fe:5e:26:24:53:20:4e:90:9e:a8:ab:be:a0:b7:4c:3b:1a:
c7:d3:aa:65:af:2e:e3:49:7b:11:5e:d8:9c:7f:22:33:02:f7:
6a:54:78:27:f4:e4:56:43:9d:44:ef:ce:cc:32:20:c7:94:5b:
2d:05:3b:f9:b7:2f:f2:80:89:35:fb:2a:0d:d5:fd:50:6f:9b:
62:41:4e:16:19:a5:b0:9b:b0:e8:9b:d5:57:61:94:31:42:0a:
21:6b:a3:28:eb:af:4f:0a:3c:50:57:85:ee:1b:39:58:df:41:
3e:56:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:20 2025 by rpki-client