Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier: Kh73CBY0Vz0QhFs9m9El59r6VlpKE26o1ecfiGy3VQI=
Subject key identifier: 37:AD:4F:FA:D7:CE:0A:CE:B9:29:BD:CE:CC:E2:D2:8D:4E:F3:CA:DD
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial: 019A70A560C9EE882E4005E08B05E728CFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number: 117D
Signing time: Tue 11 Nov 2025 02:01:17 +0000
Manifest this update: Tue 11 Nov 2025 02:01:17 +0000
Manifest next update: Wed 12 Nov 2025 02:01:17 +0000
Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: 9iFCpHWPqrsBjbp72NshyAQxQzhyVoUEhIUobC5jYIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:60:c9:ee:88:2e:40:05:e0:8b:05:e7:28:cf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
Validity
Not Before: Nov 11 02:01:17 2025 GMT
Not After : Nov 12 02:01:17 2025 GMT
Subject: CN=37ad4ffad7ce0aceb929bdcecce2d28d4ef3cadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:58:ba:44:0a:df:a7:9d:ff:b4:82:d6:63:
15:91:19:be:bf:e2:d2:78:4c:ef:d5:e6:84:94:5e:
b4:f4:bd:1c:c8:00:0d:b5:4e:3b:68:0d:a4:d4:07:
cf:ec:60:c1:06:a0:ed:7b:ee:23:18:50:90:a7:40:
02:48:8e:3b:e5:6b:d4:7a:bb:88:ca:d0:b0:c5:eb:
aa:b0:5c:4b:2d:88:cd:03:f1:0e:66:be:c0:e9:23:
28:f3:23:12:f0:a5:3c:c6:8c:f7:55:47:69:c3:cd:
56:3e:eb:18:9d:6a:8a:d9:84:85:cc:7e:e4:3f:45:
85:fd:a3:16:6c:75:69:6b:d5:e2:e2:d8:5f:45:7f:
7f:c0:62:80:92:66:81:5e:54:76:56:76:63:05:84:
5f:f1:f1:4a:74:9f:5d:3a:72:87:f7:44:69:71:1f:
62:2e:26:94:73:bb:f7:10:2e:9d:a5:45:23:6c:e2:
9c:7f:ed:85:6f:79:3c:ea:c5:77:10:2a:10:c5:09:
77:19:ca:30:24:87:06:4d:9f:21:c6:0e:c0:5f:7e:
0d:00:2d:5a:ca:c5:5d:99:a3:3b:3b:f2:da:7a:58:
73:5e:76:55:a4:03:c9:36:18:ab:01:ad:d3:f6:96:
f7:00:0b:0f:48:4e:20:a4:fd:84:5e:05:76:00:f6:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:4F:FA:D7:CE:0A:CE:B9:29:BD:CE:CC:E2:D2:8D:4E:F3:CA:DD
X509v3 Authority Key Identifier:
keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:89:c9:5e:c3:47:61:e5:8d:d7:c8:f5:ae:7e:c4:cd:58:
8e:b0:50:08:4c:14:a7:d5:f9:59:23:34:8c:cc:f2:ac:d6:32:
c6:1d:4d:90:fa:0d:20:cb:a5:53:11:f1:50:60:cf:6f:7a:66:
ec:39:34:57:e6:5e:ee:03:e8:c7:43:bb:70:0e:24:b4:3a:43:
f0:2e:f7:de:d1:b3:8b:96:21:1c:04:94:4e:9c:45:a1:22:7e:
7f:ca:5b:e8:8e:76:e2:6b:4f:16:db:ec:d7:21:b9:72:81:a4:
15:2d:a8:48:04:a1:b0:62:f1:fa:78:d6:ce:5b:8d:b8:94:9e:
ee:c7:ea:d5:46:c6:e1:5e:ae:db:d2:eb:2f:2c:9c:7a:58:63:
2c:80:22:ff:6d:00:7b:87:4e:b8:06:c8:1c:1c:a7:66:8c:d9:
d8:53:7c:e9:63:16:30:5f:1e:8c:3a:c6:f4:1a:3d:7b:ca:6d:
9a:48:f5:45:63:c8:21:ee:94:98:e2:18:b6:9a:4b:a7:91:c3:
0f:75:09:b1:b9:d7:6c:1e:cd:7c:0b:8b:02:87:1f:85:f2:81:
e3:cd:ce:48:42:74:67:82:6d:19:a5:2b:a1:36:76:6d:bd:7b:
85:93:ea:7a:e4:30:8f:33:17:dd:c9:9f:3b:d9:29:9d:8d:33:
b2:8f:4f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpWDJ7oguQAXgiwXnKM+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OWJkNzhlMzgxOTc3MGMxMTZlNTc3YmFjZmFkMTk5MzM5
MmJkYjgwHhcNMjUxMTExMDIwMTE3WhcNMjUxMTEyMDIwMTE3WjAzMTEwLwYDVQQD
EygzN2FkNGZmYWQ3Y2UwYWNlYjkyOWJkY2VjY2UyZDI4ZDRlZjNjYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZJYukQK36ed/7SC1mMVkRm+v+LS
eEzv1eaElF609L0cyAANtU47aA2k1AfP7GDBBqDte+4jGFCQp0ACSI475WvUeruI
ytCwxeuqsFxLLYjNA/EOZr7A6SMo8yMS8KU8xoz3VUdpw81WPusYnWqK2YSFzH7k
P0WF/aMWbHVpa9Xi4thfRX9/wGKAkmaBXlR2VnZjBYRf8fFKdJ9dOnKH90RpcR9i
LiaUc7v3EC6dpUUjbOKcf+2Fb3k86sV3ECoQxQl3GcowJIcGTZ8hxg7AX34NAC1a
ysVdmaM7O/LaelhzXnZVpAPJNhirAa3T9pb3AAsPSE4gpP2EXgV2APZDxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDetT/rXzgrOuSm9zszi0o1O88rdMB8GA1UdIwQY
MBaAFGeb1444GXcMEW5Xe6z60Zkzkr24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2It
YWZiNTU4YTVlODQxLzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2ItYWZiNTU4YTVlODQx
LzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGqJyV7D
R2HljdfI9a5+xM1YjrBQCEwUp9X5WSM0jMzyrNYyxh1NkPoNIMulUxHxUGDPb3pm
7Dk0V+Ze7gPox0O7cA4ktDpD8C733tGzi5YhHASUTpxFoSJ+f8pb6I524mtPFtvs
1yG5coGkFS2oSAShsGLx+njWzluNuJSe7sfq1UbG4V6u29LrLyycelhjLIAi/20A
e4dOuAbIHBynZozZ2FN86WMWMF8ejDrG9Bo9e8ptmkj1RWPIIe6UmOIYtppLp5HD
D3UJsbnXbB7NfAuLAocfhfKB483OSEJ0Z4JtGaUroTZ2bb17hZPqeuQwjzMX3cmf
O9kpnY0zso9PWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:59 2025 by rpki-client