Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: VNfPweJnAsQfIk9NYCJC8vU6FOZVeqf8XAmUD8woogI=
Subject key identifier: 39:DE:FF:ED:AC:1B:6B:53:EF:3B:76:1C:F6:75:97:50:D3:71:17:AA
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 019A7112C93FAA8B3693C02A9867ADBE9B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 03F6
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: Fp2aol3biuVOCtUtiYmv2TeLA/RuBZDRW3W9yhrWZ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c9:3f:aa:8b:36:93:c0:2a:98:67:ad:be:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=39deffedac1b6b53ef3b761cf6759750d37117aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:65:68:e3:b6:48:1b:94:86:85:af:2b:a5:f8:
ed:d8:a6:ea:6b:42:8a:23:ca:42:df:c7:01:8a:95:
19:f8:10:3b:5e:c9:d1:0d:80:3f:87:3a:55:8c:cc:
11:a9:92:5c:a3:c4:83:3d:ae:12:6e:bd:4e:7a:33:
ff:74:d5:b0:a5:d1:de:5a:e1:f1:8e:ad:52:d4:5f:
f4:a7:67:68:59:21:6c:d6:13:aa:e2:e6:03:37:83:
28:f4:8f:79:1f:7c:ad:4f:f7:3d:c7:9c:6b:c9:c2:
17:e1:f6:f7:22:e4:a4:09:48:71:2b:fd:9b:4c:78:
91:27:38:7a:77:dc:73:8a:2c:be:d8:50:c5:a0:3e:
51:83:0d:f1:77:8c:25:3d:bd:1e:5e:80:d8:d9:8c:
06:f1:63:83:50:75:87:69:93:28:59:87:dc:5b:8c:
1a:b9:ac:0c:f2:21:6e:1f:e5:2c:38:cf:8f:70:65:
a9:2b:29:d7:c5:4a:b8:94:63:82:c4:3b:3f:0b:e3:
f0:ef:63:5c:72:3b:89:5d:aa:6c:80:4c:a6:f4:bd:
b4:13:3f:64:c8:50:13:0e:14:3b:27:42:f8:37:10:
72:c0:56:d6:53:ab:ee:de:de:46:8e:06:e1:eb:da:
56:ec:47:92:29:cf:87:41:c8:3a:d6:9e:34:50:68:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:FF:ED:AC:1B:6B:53:EF:3B:76:1C:F6:75:97:50:D3:71:17:AA
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:ff:b8:40:f5:e0:60:c7:6e:7c:d7:a8:ce:fe:da:83:04:
ed:8b:5d:ea:43:06:31:e5:5d:98:88:14:ac:7a:4b:73:3a:ee:
5f:31:32:59:49:de:e4:65:99:84:1d:08:db:ee:4f:8c:50:54:
28:35:e4:76:4d:3b:73:3e:61:c5:5a:70:a8:07:b0:d4:4e:9c:
66:8a:2a:e9:fa:54:3e:73:07:4d:c4:98:13:7b:a7:91:e0:83:
e2:c7:02:38:a0:4d:74:77:c1:17:61:2d:7b:83:f7:c7:71:55:
d6:07:a1:f4:56:74:3f:da:70:d3:18:03:fa:13:d9:1f:b0:25:
82:3f:4d:a7:f4:5d:c5:af:52:3c:18:8f:2a:88:c8:c3:ca:5f:
a7:99:fb:a1:f8:e9:13:7b:7b:55:6f:2f:43:b7:de:87:2e:34:
71:fe:69:00:f2:b8:d2:a4:e8:0f:ed:59:ef:25:75:c4:8b:82:
b5:6f:6a:d2:ae:92:3d:c0:62:38:91:5e:92:af:c4:f8:4b:fc:
99:fc:24:12:8d:06:7a:c4:9a:54:f3:5f:f2:a3:74:60:ba:77:
1a:a3:dc:0a:4d:2d:a3:5d:78:33:27:2c:10:40:69:75:6f:37:
24:7f:84:9b:a3:6b:46:26:a4:13:80:39:07:7d:fb:95:8c:1c:
a8:77:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:17 2025 by rpki-client