Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: g0nl1yVtZWWApQD1FA+iYHDbER6ASjmFJdojEDMpOwY=
Subject key identifier: 22:E6:FC:B5:FF:CD:75:28:F3:AF:2E:BB:EE:51:2F:E3:D7:6E:0A:3E
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019A71B90406CA5003F2785854FAA5199358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 10AC
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: 9rHQB6MHiqvdKl4inkU8Z7WZoTrvzmGhctuYTq2NkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:04:06:ca:50:03:f2:78:58:54:fa:a5:19:93:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=22e6fcb5ffcd7528f3af2ebbee512fe3d76e0a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:79:3b:66:e4:db:e1:ff:dc:ad:62:15:13:
46:f3:1b:a2:46:a4:fe:cd:7c:b4:0e:f9:3d:34:5b:
0d:48:1e:ee:ab:60:ef:0d:66:83:79:af:ee:d1:5c:
9b:26:88:8a:57:f8:db:fd:d5:cd:34:f1:95:e5:8f:
81:fa:4d:9e:1f:45:7a:d6:c8:4a:4f:fd:a8:a3:1b:
e2:2f:e9:2c:3d:04:47:44:44:58:55:39:cf:97:78:
75:38:1c:32:5d:a2:4d:da:38:2b:4d:fe:45:97:cd:
bd:8f:e9:64:d9:f0:54:3a:5b:9a:4b:d1:b3:d2:98:
19:66:58:f0:fa:72:03:fa:41:a0:d7:54:b3:13:ac:
1e:f5:34:fb:b6:e0:96:e7:a2:d8:9b:da:90:d2:01:
28:a2:b8:1f:cd:71:52:5f:cf:98:d7:4b:d9:93:69:
6d:d7:fd:d6:12:e9:13:56:ba:86:73:5f:fb:dc:ba:
9b:c4:95:d4:f8:49:2f:3e:3a:7c:26:e4:3f:e7:2f:
99:6c:07:6c:58:f5:ee:a3:d8:a8:02:3f:6c:52:c5:
79:06:ab:24:52:b4:83:18:bc:3f:f8:2f:da:19:81:
44:3c:96:48:d6:56:5d:95:9d:e9:97:12:74:c4:f5:
98:77:4c:3d:21:f4:74:f2:e6:54:e2:dd:dc:c1:2c:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E6:FC:B5:FF:CD:75:28:F3:AF:2E:BB:EE:51:2F:E3:D7:6E:0A:3E
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8a:3a:e0:ef:1a:66:db:09:bf:1b:25:78:ac:9d:98:9c:c7:
69:07:d4:42:c6:75:6c:ef:41:f8:5f:7d:1f:8e:58:d4:44:44:
cf:c4:60:68:54:0c:8e:b0:8b:3e:58:4e:43:b9:cc:d1:c2:57:
8d:4c:7f:c3:d9:00:9f:56:e8:1a:69:80:d2:1b:96:d7:67:c9:
e5:47:6f:cd:01:58:32:64:dd:34:5e:25:f4:a7:af:47:bb:44:
47:32:3a:45:23:81:de:54:11:18:19:63:c9:56:62:e9:9d:30:
38:31:48:45:ad:41:40:1b:70:ed:88:1a:38:5c:97:82:c2:c4:
8b:b9:5d:ee:a3:c7:f9:0f:df:8b:d7:22:5d:88:4b:9e:36:f5:
5f:92:cd:d6:78:d9:db:6d:06:d9:d7:75:5f:7f:92:a4:21:c2:
51:62:e3:75:fa:1a:94:3b:86:ac:7f:27:95:a8:f0:81:f9:a3:
40:8b:34:99:32:ef:98:6d:ae:15:e9:c2:ce:58:f4:88:4f:0e:
bd:48:80:87:6a:4f:9a:f0:27:14:4f:af:95:4b:8f:ea:dd:9d:
bd:06:f6:14:e0:67:af:c0:ac:9c:cb:e1:20:b2:dc:e5:80:d5:
5f:2e:6c:d0:2a:ca:4d:d6:45:56:8c:ea:3d:36:58:1b:11:7c:
df:82:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:19 2025 by rpki-client