Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: v3Kh+KQFlNgfFaNiJ2aTrg8zEX6xu1aWYsRC9L9AnyQ=
Subject key identifier: 25:E9:DD:74:2E:A8:CE:F9:EB:9A:EE:E2:58:18:4A:0D:4A:06:BC:14
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 019A71B90A02C70978FD4E9720A8E71B6924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 1076
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: 9kqF3LACUv/euFT2QHXHzimxFr8RQbFySVtAaKH4dlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0a:02:c7:09:78:fd:4e:97:20:a8:e7:1b:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=25e9dd742ea8cef9eb9aeee258184a0d4a06bc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:a9:af:0c:6a:8a:db:97:bb:b1:9b:5b:80:
2e:68:3a:e1:e3:55:13:1d:80:fc:48:d5:0a:d1:0e:
fc:f6:8d:1a:94:45:95:91:6a:f1:56:80:59:cc:6f:
fb:d5:45:03:b0:ce:2a:9b:1f:6e:37:0b:ed:00:76:
5a:5f:e6:c3:ed:d5:10:f1:81:76:d4:e8:39:53:46:
73:33:59:f9:96:c8:21:32:d9:1d:15:39:21:a5:30:
1d:49:8b:9e:56:e9:a1:dc:1e:d4:c9:1e:22:75:f6:
a2:d0:bc:41:4c:1b:59:00:30:54:9f:62:d9:f7:4b:
10:10:67:1a:b5:b3:b2:f5:50:5d:a1:7b:53:7d:cc:
23:d3:e0:9e:44:5e:21:4e:bf:c7:9f:99:52:f5:4b:
fa:b1:00:a8:36:18:6e:8f:00:fd:f6:33:3d:c1:4e:
0c:d0:30:bd:c8:36:c6:9d:1d:c3:db:a0:2d:8b:0e:
09:14:81:83:2b:28:ef:31:d6:17:52:79:6a:51:ea:
20:d7:94:cb:ad:88:2e:b6:e4:41:3a:1d:ec:a1:ef:
d1:35:70:9f:ca:47:6c:c0:70:19:18:78:53:61:f7:
66:87:ed:b9:7a:38:1a:23:69:6a:e9:44:81:53:48:
07:a7:39:ca:f0:be:1e:e8:03:bc:02:36:16:4c:40:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:DD:74:2E:A8:CE:F9:EB:9A:EE:E2:58:18:4A:0D:4A:06:BC:14
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d1:11:0a:c5:fe:fd:28:05:5c:22:c4:44:99:1c:73:25:d2:
82:07:c0:f3:f0:2a:86:4b:c2:09:a0:77:28:0a:cf:1b:bc:34:
e8:26:2a:14:16:6c:52:cc:89:3f:af:a7:8b:46:6f:39:64:d9:
09:5e:0c:45:49:35:5c:a6:14:de:8c:14:78:b9:79:cd:de:31:
11:a2:de:ac:99:ca:9f:20:f2:76:32:9a:10:1a:a6:0b:92:32:
b2:40:a2:75:28:03:21:54:5b:52:5b:52:5d:46:4b:e8:35:d5:
2b:8b:fd:74:a2:45:dd:e4:c7:f1:89:af:48:cb:f1:2d:56:67:
03:97:a2:cf:bd:95:df:31:f8:0a:d0:5e:19:ad:23:81:f1:4a:
b4:75:e9:9c:3b:db:50:ed:b7:7f:6a:35:c6:c2:85:0f:07:a6:
5b:d4:14:09:fc:ac:57:22:d3:63:39:cc:3f:bc:4a:01:1f:ea:
27:95:16:cf:30:f9:88:b4:28:6e:d0:48:63:b4:b2:31:2e:ad:
33:d6:6c:36:bd:7c:6b:0f:23:93:d8:b5:37:fa:30:35:5d:99:
3e:65:a5:0c:ef:82:d3:34:9a:07:33:4e:f3:c2:12:31:49:5e:
8c:37:ee:e2:1c:59:04:33:b6:f4:f5:fd:f3:7a:47:98:bf:81:
21:67:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:37 2025 by rpki-client