Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: e7c4jpRwKKGamXUILTMoY0plSsN8FZN3AkVmGutGUKE=
Subject key identifier: 7E:F2:33:9C:9A:63:CB:9C:44:45:67:AC:88:78:5F:4F:8E:F2:0A:A7
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019A722658A251E8E70A3438FD33ED43B0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 13DF
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: kgx5N6br4j8JdPV0K5t4gSM6jwKsZXcHKRBd7WQT3t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:58:a2:51:e8:e7:0a:34:38:fd:33:ed:43:b0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=7ef2339c9a63cb9c444567ac88785f4f8ef20aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:ed:25:10:13:8e:79:89:d7:40:6f:b6:8d:
73:df:84:ba:22:db:fb:7e:01:15:80:56:f3:df:58:
0f:0e:8e:37:3a:b2:28:77:05:b5:96:bf:b2:6f:c8:
65:33:d9:2e:01:5e:3d:4a:8b:2f:50:34:df:56:71:
bd:18:42:c4:5e:67:ab:71:1e:a5:9e:f5:e5:2e:d3:
41:4a:f2:52:38:88:60:c1:df:d5:2d:ed:64:c7:54:
a4:a8:a7:f5:b4:ac:ee:70:ea:b6:95:cd:17:d7:a9:
7f:8b:53:4b:b4:53:38:43:50:a8:20:70:24:4f:fd:
e4:93:a0:e7:42:56:a2:2e:e8:fd:3d:2d:f9:f5:6f:
e2:be:9f:cd:2b:df:29:97:bc:41:21:3b:f3:f7:db:
d5:55:a8:c3:a9:c1:0a:6e:dd:da:a0:10:17:b3:19:
df:4e:62:0f:49:f5:36:ab:f3:23:ee:f9:10:df:a6:
65:41:af:72:69:df:83:47:fe:e7:21:be:24:1e:42:
75:10:a0:4a:ff:b5:58:6c:6d:27:d1:2d:0d:24:38:
c9:da:6f:1d:a4:73:15:3e:a7:2c:11:fc:a7:f0:97:
be:ae:bb:b8:cd:15:6e:47:3c:9b:2a:04:45:a1:f8:
89:bf:14:89:a7:2b:8d:a4:f1:9f:5a:df:c0:8d:8a:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:33:9C:9A:63:CB:9C:44:45:67:AC:88:78:5F:4F:8E:F2:0A:A7
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:08:94:21:36:4c:6c:ee:d6:9a:d9:6e:a4:c3:45:57:8e:83:
7f:10:40:c9:b5:a7:d7:a0:55:ed:a6:59:b8:39:54:ea:7d:a6:
73:8d:53:64:7d:58:02:c6:d0:92:f5:3c:0e:82:39:e0:7b:78:
4c:47:d8:bf:f8:04:12:43:74:b7:6d:e4:2e:40:92:ae:f1:bb:
c4:d0:ca:76:c2:5b:1b:ef:35:69:4a:8d:e3:71:46:a4:91:05:
e6:c2:eb:bc:87:4d:58:54:5f:53:5d:fc:15:00:a0:52:23:5f:
4d:d7:0c:ae:9e:ae:b2:ff:8e:49:50:58:a9:82:87:cd:3d:60:
f2:dc:c5:5c:57:72:fd:25:6b:57:45:ac:c1:d2:ec:bb:79:1a:
90:ec:2a:9a:d1:85:18:a9:d1:63:86:fc:4d:d3:43:3e:17:45:
23:32:2f:9a:fd:2d:4a:9c:45:cb:2b:58:51:3c:84:09:1d:1a:
1e:db:94:aa:d2:1c:9b:94:78:49:2a:78:a5:8d:61:a7:f1:ff:
cc:bd:ca:5b:db:d8:54:1d:e0:fd:be:38:a1:c5:03:ea:cc:a6:
b1:aa:ab:d1:f1:e4:b2:ad:12:2b:11:51:98:bf:13:8b:8d:27:
0c:25:9b:eb:37:0e:cc:a5:65:b3:06:3d:a3:10:c3:3f:f5:6d:
fa:1d:94:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:04 2025 by rpki-client