Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
File: ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json)
Hash identifier: VNY129joVdEMKja7OCb4oztn9VimplmMuFCKdyameQk=
Subject key identifier: 75:B4:54:D1:4F:5F:3A:4E:B0:8E:42:54:52:18:3A:3A:8F:EA:A8:0C
Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
Certificate issuer: /CN=658cd1491fa84d48218d3860f3323dc9b868578c
Certificate serial: 019A71B81F5C6BBEF91C919C4DCFCE873930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
Manifest number: 0F87
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: Ab5qLy13jOtv+QdqHsKnjh4ONuuMXMtY3XUjGq1AXh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1f:5c:6b:be:f9:1c:91:9c:4d:cf:ce:87:39:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=75b454d14f5f3a4eb08e425452183a3a8feaa80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:08:de:8f:81:6d:53:09:ab:5d:6e:2a:d2:
b0:d8:88:0e:85:2f:cd:d2:2a:bc:12:b1:58:23:10:
7e:49:b5:47:94:4b:7d:ac:ff:d9:e9:ee:7a:47:fb:
56:62:65:99:e5:95:60:80:40:89:4f:f9:8a:3a:e8:
46:0f:e7:9a:da:67:a4:d6:1c:65:35:0f:42:be:2f:
21:fd:e2:72:b0:35:f4:99:47:8c:97:41:a4:40:70:
90:fd:82:0d:31:0c:29:d6:3c:83:5f:28:81:aa:a7:
d9:8b:83:53:7d:1d:e7:31:1e:05:18:cb:7c:31:c7:
c5:52:ce:eb:fa:cc:be:12:40:5a:62:c5:22:58:a9:
84:97:f2:60:15:c7:de:4b:95:50:de:b8:5d:bd:b8:
5a:11:41:ca:1f:dd:70:98:6e:2d:92:6b:3a:0d:fc:
ac:c0:bb:ba:c5:77:f9:9a:17:b2:21:01:f2:0c:14:
14:b5:9b:db:35:42:1d:f8:70:2c:c6:d2:c4:b7:d4:
37:4a:b3:4e:42:61:17:ff:f8:73:94:a1:50:b0:49:
a6:58:71:7b:2e:07:79:98:fe:cd:48:06:e8:24:3a:
2b:87:14:db:33:9a:cb:96:8c:ca:d9:50:bc:65:db:
c2:29:65:0f:75:2f:28:db:94:97:6b:d6:55:5c:7f:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B4:54:D1:4F:5F:3A:4E:B0:8E:42:54:52:18:3A:3A:8F:EA:A8:0C
X509v3 Authority Key Identifier:
keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c5:5c:e3:bd:a3:83:c2:ff:64:82:29:dc:cb:bd:77:b9:30:
db:72:c9:5c:57:cd:58:e7:e5:c2:90:88:e9:8f:3d:f8:a6:1a:
9d:c7:52:bd:d5:eb:c9:23:f5:45:c7:31:2e:67:40:f7:27:8b:
26:51:bd:b1:8b:75:05:32:12:98:7a:e7:19:54:27:79:6b:0d:
31:b7:b5:a9:6c:a1:20:1d:58:fb:b8:c0:7f:1d:b3:1a:57:cd:
c9:46:c4:40:dd:63:19:0a:e4:5b:bb:8b:e7:0c:81:17:0f:10:
f9:1a:41:1b:ca:e7:cf:37:23:f5:fb:73:73:65:f8:8c:65:e4:
35:20:f3:fb:fb:a3:4b:93:f5:fc:31:f4:f6:50:f6:2e:33:fa:
40:bf:e4:82:8a:e1:4d:5d:1f:27:d5:5d:ec:dc:10:28:a3:d4:
71:2e:66:a5:f7:32:dc:fd:2a:8e:2e:f6:37:cd:cf:b5:ce:8a:
1c:5a:68:88:80:9e:0d:97:b8:c8:5f:db:98:3c:e7:50:28:6a:
a5:c4:7b:05:dc:9c:bf:05:22:2d:9a:4b:46:55:e9:2a:4b:60:
17:e4:e0:03:a9:91:e2:ac:75:1a:c7:e8:ef:8d:49:16:2f:03:
72:97:70:2d:17:ac:65:70:1b:2b:00:ea:98:b7:db:fe:c0:1e:
cb:aa:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:47 2025 by rpki-client