
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier: 8VWmLrhYqEktwZ5OYe1nAMUoOhtSforkm0yORlvbjp0=
Subject key identifier: C7:07:8B:A3:2C:54:28:7C:12:F5:7C:D6:EB:D5:69:5B:13:E5:87:DA
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer: /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial: 019A71EEAEFE56BBE77498B0E15F113D1C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number: 0EE1
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: Ufy12gDZA2p4A82azXgs9Ng6fF3DyEjETBc0OP5Uq20=)
2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ae:fe:56:bb:e7:74:98:b0:e1:5f:11:3d:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=c7078ba32c54287c12f57cd6ebd5695b13e587da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:3b:8d:5e:31:da:dc:64:6b:0f:70:a4:09:
9d:7e:69:26:83:d0:74:5a:cf:ce:ef:0d:e7:a3:e6:
cb:d6:45:8e:27:90:6b:8c:b4:72:32:52:2d:a7:64:
46:57:d8:16:74:73:54:b0:af:61:fb:47:8d:6b:78:
5f:ab:17:46:5e:e6:78:17:33:b2:8a:e8:a0:6b:d3:
bc:94:67:ed:55:a0:7f:4f:01:aa:5a:6a:15:4b:ba:
82:51:ba:33:e5:3e:75:1b:d0:b0:d9:16:a1:03:23:
69:1b:7a:20:c6:39:cd:41:0b:06:6d:3a:2f:f6:ad:
2d:97:8e:63:77:e5:e2:2f:20:a2:ae:78:9d:a5:da:
69:c5:bf:54:69:82:ab:00:7d:c9:87:b6:97:d4:79:
55:17:3b:45:71:74:94:1a:ee:bd:d4:29:f5:b3:4c:
44:82:0e:c3:a7:cc:7f:e6:5b:30:2d:f9:ed:5b:97:
5e:a2:99:cb:c7:29:e6:b7:d7:b0:99:66:73:df:77:
2c:de:b4:e9:cf:e3:4d:38:fc:4f:7c:81:01:a4:a2:
94:e4:cf:1a:09:f8:b3:2e:ad:72:60:e0:c8:6c:cd:
3c:70:f7:18:d2:04:aa:6f:e1:be:b9:c8:1e:6d:63:
52:5d:9c:10:d9:19:5e:ef:1a:b8:5e:b8:9a:7c:55:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:07:8B:A3:2C:54:28:7C:12:F5:7C:D6:EB:D5:69:5B:13:E5:87:DA
X509v3 Authority Key Identifier:
keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:02:a9:e4:1c:f1:5f:ee:14:71:01:91:62:8d:62:bb:36:
b3:8a:de:a8:75:a4:80:da:23:b5:6c:0d:38:bf:e6:90:d3:b4:
ad:f2:36:84:3b:b2:bc:70:d8:00:cd:9d:a9:31:ac:c4:52:93:
2b:fb:80:f1:71:44:66:52:22:db:e0:62:d0:ba:f2:e9:c5:47:
8b:32:d2:9d:0c:ef:bb:86:33:03:ad:b9:dd:f3:96:bd:cf:f1:
08:ad:66:50:64:c4:b5:56:7b:39:83:71:3f:27:88:c5:dc:e3:
49:9a:9f:71:83:95:7f:d4:e6:b4:cf:99:87:67:6c:24:ab:6b:
31:67:84:6b:3f:d2:50:49:27:63:0f:8f:c2:16:66:31:f0:aa:
cf:16:ec:51:61:3d:52:ed:90:35:06:e6:1e:af:75:5d:2e:f5:
4a:49:2d:18:0b:b9:8f:d2:e9:51:fc:72:6c:2e:26:66:90:23:
61:62:77:65:f8:af:db:44:fd:5b:5c:52:e3:de:73:2f:2d:32:
95:87:e1:c4:7f:c4:68:56:e7:b0:c4:8e:3a:83:43:a9:e1:3f:
77:b3:58:06:8f:32:7c:53:37:5d:7f:1f:90:f9:50:4e:7f:67:
00:eb:f9:98:bf:c1:4d:a0:db:e0:e1:c5:9a:10:a5:19:fa:a2:
e9:63:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:32 2025 by rpki-client