Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: Ad7TSo3iNBIpHf+crngtZJhprlRVqqjnF9hi8LEZJ7U=
Subject key identifier: 6F:12:A4:DF:0C:2A:21:6F:DD:BB:31:85:AF:13:27:0A:50:2B:5E:F4
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 019A71B8A5470D970866DE136DC12152C286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: FpRbMWP8Q8NLuCRiuu3RkxvyRqL86TWkhkjvWCbUyLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a5:47:0d:97:08:66:de:13:6d:c1:21:52:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=6f12a4df0c2a216fddbb3185af13270a502b5ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:69:bc:c6:20:27:c6:f2:4a:08:b8:13:0b:
e9:4a:cb:22:9c:d7:35:13:49:25:ce:88:91:55:29:
27:a6:59:26:41:6f:8f:e0:0f:62:12:9f:32:55:92:
23:9b:5e:65:92:5f:02:dc:0c:ac:1b:2f:ca:56:92:
96:55:cf:31:e7:d4:94:b2:a0:db:44:40:47:ea:11:
62:65:e5:66:97:6c:4d:d0:2b:08:65:8d:03:7f:31:
4a:44:d7:46:fe:4c:8a:ec:08:6c:75:ce:cb:df:b5:
5d:97:fd:8a:60:3d:d6:3d:13:f2:ba:42:52:1f:ba:
43:46:2b:ec:8b:a3:45:6b:90:93:7c:4b:17:c6:bc:
63:18:5e:5e:1a:bd:9e:5b:4b:bf:8a:62:aa:c6:91:
f5:01:58:91:4a:27:ff:61:cc:6b:82:42:12:63:4f:
4a:6e:14:ff:a8:d7:7b:18:9e:8c:57:68:63:27:ab:
dc:98:d2:87:f6:ab:b0:09:3d:76:fb:f2:94:90:af:
98:29:8a:e5:8b:42:98:f8:19:16:fd:03:7f:c0:cf:
fe:aa:8e:c9:c4:c3:21:79:f0:39:86:1f:ec:17:a8:
a9:f5:c4:3a:9c:a1:e1:cc:7d:31:5b:d7:1f:25:48:
0c:94:31:c5:4a:01:82:24:a8:8b:2c:1f:00:f5:6d:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:A4:DF:0C:2A:21:6F:DD:BB:31:85:AF:13:27:0A:50:2B:5E:F4
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:5f:b3:98:63:9d:48:63:10:53:68:46:3f:e1:3b:ca:d6:
20:a2:44:fc:e8:7f:e8:ed:4e:bd:3f:41:7e:68:5c:4a:6d:c9:
18:f8:0f:e0:b8:d0:35:f4:8a:9c:9b:85:9b:ce:85:7f:0c:80:
5f:eb:1b:e9:9f:0e:24:37:80:56:b9:f1:d6:cb:44:a0:b6:69:
8e:98:9b:10:62:44:16:f5:3c:03:d9:92:af:70:98:41:0d:01:
fe:4b:1f:c8:6e:a6:bd:37:8d:d5:44:34:fe:a7:f9:d6:fa:35:
38:31:9f:85:36:13:28:21:d6:da:09:d5:63:46:2f:6d:d0:87:
fc:c6:26:54:40:6c:64:ec:a0:0b:55:ea:8c:6b:e1:0e:c4:dd:
8b:b9:84:8a:40:69:60:5d:75:75:e1:d6:cd:c3:99:3b:e7:e2:
7a:ef:ba:48:ac:fd:e6:02:9f:fb:27:60:25:5c:e0:a9:f7:71:
fb:d1:3c:ae:ed:68:59:68:4d:3e:c9:a4:0f:71:e0:ee:18:98:
83:22:dd:0c:b5:64:d4:03:67:ab:64:c2:49:3b:64:d2:18:32:
85:7f:fd:f2:ed:3b:e2:f8:76:df:42:8b:0d:20:b1:72:50:33:
45:72:14:0c:15:8f:af:79:ec:b0:91:73:27:a4:c4:39:cf:bd:
63:85:99:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKVHDZcIZt4TbcEhUsKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2VmZGI4OGQwNjEyYzUwYmQ1ZDdlMTY1YWY3ODM0ZjBk
ZDNmMDQwHhcNMjUxMTExMDcwMTU3WhcNMjUxMTEyMDcwMTU3WjAzMTEwLwYDVQQD
Eyg2ZjEyYTRkZjBjMmEyMTZmZGRiYjMxODVhZjEzMjcwYTUwMmI1ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdpvMYgJ8bySgi4EwvpSssinNc1
E0klzoiRVSknplkmQW+P4A9iEp8yVZIjm15lkl8C3AysGy/KVpKWVc8x59SUsqDb
REBH6hFiZeVml2xN0CsIZY0DfzFKRNdG/kyK7Ahsdc7L37Vdl/2KYD3WPRPyukJS
H7pDRivsi6NFa5CTfEsXxrxjGF5eGr2eW0u/imKqxpH1AViRSif/YcxrgkISY09K
bhT/qNd7GJ6MV2hjJ6vcmNKH9quwCT12+/KUkK+YKYrli0KY+BkW/QN/wM/+qo7J
xMMhefA5hh/sF6ip9cQ6nKHhzH0xW9cfJUgMlDHFSgGCJKiLLB8A9W1SlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8SpN8MKiFv3bsxha8TJwpQK170MB8GA1UdIwQY
MBaAFM9+/biNBhLFC9XX4WWveDTw3T8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYt
N2JjZWEzZDM4NDUwLzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYtN2JjZWEzZDM4NDUw
LzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdZfs5hj
nUhjEFNoRj/hO8rWIKJE/Oh/6O1OvT9BfmhcSm3JGPgP4LjQNfSKnJuFm86FfwyA
X+sb6Z8OJDeAVrnx1stEoLZpjpibEGJEFvU8A9mSr3CYQQ0B/ksfyG6mvTeN1UQ0
/qf51vo1ODGfhTYTKCHW2gnVY0YvbdCH/MYmVEBsZOygC1XqjGvhDsTdi7mEikBp
YF11deHWzcOZO+fieu+6SKz95gKf+ydgJVzgqfdx+9E8ru1oWWhNPsmkD3Hg7hiY
gyLdDLVk1ANnq2TCSTtk0hgyhX/98u074vh230KLDSCxclAzRXIUDBWPr3nssJFz
J6TEOc+9Y4WZrA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:15 2025 by rpki-client