Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: I1Fnng+0qHV+174nWhcrIx8w+1Bj+PwOGO0nDnsFUUQ=
Subject key identifier: 82:1F:AA:78:7E:A5:00:74:63:70:FE:0A:35:71:DE:3F:7A:DB:57:1C
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 019A71B7B0478199D5E043CC76F59DC52AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 0EFE
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: pMv4tb96LrJFxx1bBxOGuslaAzWC09uvJaXkvQdk4cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b0:47:81:99:d5:e0:43:cc:76:f5:9d:c5:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=821faa787ea500746370fe0a3571de3f7adb571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:70:da:08:ec:a4:02:6a:9b:75:0a:09:51:
9f:31:4a:70:d8:33:c3:12:65:c4:4c:08:e9:2c:46:
30:97:47:f9:f7:cd:9b:a8:22:ae:43:90:e0:98:04:
01:77:fb:79:81:6e:db:93:2d:cc:0b:22:32:9c:2e:
96:b9:a9:73:42:57:3c:e1:3d:db:cb:9f:f9:6d:9f:
da:5e:7b:fe:1b:31:94:8d:24:82:0e:ce:43:05:d8:
49:a8:48:b0:6c:95:84:4d:50:d3:36:af:bd:58:58:
74:e1:4c:36:dc:96:c4:98:01:b2:b6:89:aa:a4:21:
fc:2c:c2:f9:63:d3:52:d6:37:cf:8c:e4:74:f7:66:
61:c3:73:d4:e0:71:c2:e0:16:9b:77:69:69:f2:47:
b5:f8:35:92:39:40:5c:fc:13:4e:c9:f3:e1:6b:41:
52:54:71:e2:8c:63:c1:08:89:a7:ff:75:3c:8d:c5:
68:d2:40:9a:8f:07:2e:d0:d3:47:b5:cc:24:dc:4c:
a3:e8:ac:49:39:27:6b:bb:7f:de:70:db:de:2e:74:
9e:da:bf:19:d9:2e:f9:10:69:0d:27:b6:cc:a1:8c:
da:a7:77:f5:11:7f:eb:f7:14:00:99:21:63:9d:d8:
e1:a0:09:e4:24:46:d2:7c:4e:15:90:57:87:a4:91:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1F:AA:78:7E:A5:00:74:63:70:FE:0A:35:71:DE:3F:7A:DB:57:1C
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c9:ff:d5:10:95:75:c1:59:1d:d9:ea:6a:35:14:3f:9a:17:
69:f0:98:b9:a7:6c:58:70:17:87:82:9f:f6:74:a9:6b:b0:21:
b8:7e:3f:28:ac:ce:c7:bc:43:38:a2:34:4f:de:7c:49:b0:99:
53:56:88:5c:88:1b:67:3f:84:32:9f:1d:d3:6f:48:f8:b0:dd:
86:ff:15:4a:c6:bc:3f:ff:68:89:cc:2a:cb:6d:f9:6c:51:91:
c1:51:b1:fd:bb:4d:ed:86:e6:95:3c:e6:c3:74:fe:be:3b:17:
83:98:7f:ac:33:f0:58:a0:c9:d1:67:f8:f4:9e:40:c4:8b:f6:
8e:ac:4c:4f:40:c6:d8:3f:56:e1:46:c0:3a:f0:ca:d4:10:56:
be:65:3f:d0:41:db:00:e3:24:f2:0a:6f:82:8e:d6:50:c3:a3:
4b:53:13:8e:22:00:65:06:a5:ba:9c:98:f4:70:75:49:85:cf:
c2:70:42:86:ba:94:26:0f:8c:27:44:e4:82:3a:9b:48:10:85:
21:19:f4:3d:a7:3a:23:30:7e:d5:29:74:45:fd:a3:5a:77:cd:
bd:27:98:fc:3d:cc:39:52:00:09:89:72:86:75:5a:3c:69:80:
aa:8f:86:87:e1:d1:98:6d:d5:d7:20:26:d4:5e:87:ce:22:29:
e5:dc:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:16 2025 by rpki-client