Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier: C50q6X28Gr9oyXQ3xa0gpEkpkd8DRI7N6YdMhrM8TAI=
Subject key identifier: 11:8F:35:BF:B6:0F:66:50:78:FA:D3:14:76:EE:58:CB:DD:97:21:72
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial: 019A70A583EE299BBD4686D6AA5012C7AC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number: 1485
Signing time: Tue 11 Nov 2025 02:01:26 +0000
Manifest this update: Tue 11 Nov 2025 02:01:26 +0000
Manifest next update: Wed 12 Nov 2025 02:01:26 +0000
Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: RzC2V68ZJn63TLv+bHvrpLHmQhXiqT1MCDtVeG1qk98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:83:ee:29:9b:bd:46:86:d6:aa:50:12:c7:ac:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Validity
Not Before: Nov 11 02:01:26 2025 GMT
Not After : Nov 12 02:01:26 2025 GMT
Subject: CN=118f35bfb60f665078fad31476ee58cbdd972172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:7f:43:e2:06:f2:f6:81:52:2a:ae:63:ea:
ae:c5:16:9a:96:dc:c7:61:75:c9:d4:f2:ff:e8:0f:
78:2b:27:0e:f3:aa:1d:28:ad:af:f0:48:00:9e:2c:
69:c3:1b:0b:3a:4b:21:39:70:39:b0:7c:89:44:40:
37:f6:2e:09:af:5f:f6:42:e1:16:83:05:46:fd:4c:
5d:b6:0a:7d:10:73:af:57:7b:58:5f:af:91:67:80:
64:fc:19:a6:6d:6e:87:d1:23:74:21:05:ad:39:74:
42:2b:0c:dd:d2:9c:6d:89:b0:98:f7:b5:b7:06:e2:
0f:31:09:e2:40:d1:8b:2d:45:45:41:2a:2b:5b:5b:
ce:ac:ff:d6:32:cd:ad:7c:21:76:53:fb:48:c5:fa:
a5:95:30:b5:d6:4a:3a:15:1f:41:82:0f:12:fc:da:
75:36:97:23:79:86:83:28:2c:c5:1f:10:7e:fa:34:
ce:e4:25:10:40:83:c8:60:53:08:f1:e8:0e:aa:1d:
ea:12:4d:19:61:de:73:aa:1c:88:f8:60:a4:dc:a5:
1d:6d:e6:66:b5:e9:98:70:87:f3:4a:72:f1:85:ef:
0a:63:10:fe:cc:06:b1:99:bc:b3:c9:4e:36:31:75:
49:59:2a:d0:5e:fc:e7:51:63:1e:f0:92:74:e6:bc:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:35:BF:B6:0F:66:50:78:FA:D3:14:76:EE:58:CB:DD:97:21:72
X509v3 Authority Key Identifier:
keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:53:de:ec:9b:33:58:79:4a:3f:a0:1f:02:eb:b6:56:85:63:
c0:c9:26:17:61:08:46:a4:59:c8:67:6e:4a:4c:b1:00:76:f2:
25:b8:4d:94:05:3b:21:7e:4d:98:e4:1a:21:6f:1b:50:5a:28:
85:fc:72:90:20:49:20:d1:11:67:bd:86:2a:c8:79:6f:ef:a6:
5d:56:04:b3:a5:b0:07:08:19:4f:36:a0:56:c7:2f:3d:84:08:
6a:4d:37:e6:10:9d:f0:05:bb:de:ff:18:42:b8:46:b2:a1:78:
fd:b0:9a:4a:64:56:90:59:36:2c:fa:8b:2f:1d:22:2c:e5:0f:
78:9a:30:94:3d:3c:a0:f1:f7:27:9c:61:d2:e3:56:80:ba:6a:
81:d3:74:5b:e1:1b:d7:19:11:9a:c8:78:d9:c0:74:0f:28:cf:
1e:71:f1:e0:a5:84:ef:f8:36:b3:17:b4:ef:20:49:97:86:0c:
8e:0a:b6:4b:31:31:ee:57:42:94:b2:aa:b3:6d:b8:77:0a:e0:
96:d4:c1:b4:7e:e7:54:3e:48:09:d1:62:94:08:f4:fa:ed:38:
c6:0b:77:db:df:e0:ca:35:1c:ce:7c:21:c5:e1:f3:e2:4f:08:
51:79:6b:ef:fd:3f:7d:c6:11:2f:7e:46:95:3d:04:c0:46:3a:
f8:b1:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:15 2025 by rpki-client