Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: nNQz93kCU9eVQPVh4PxeLRS8a48D7iOIrR4zlDxBebk=
Subject key identifier: 19:3D:B2:66:92:53:69:0A:B6:EC:E5:F5:D5:F4:1D:F4:6D:2F:4A:5B
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 019A7301B0BBD30B56ED85520F08C2CBBEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 153D
Signing time: Tue 11 Nov 2025 13:01:21 +0000
Manifest this update: Tue 11 Nov 2025 13:01:21 +0000
Manifest next update: Wed 12 Nov 2025 13:01:21 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: EqKuOol73Xyb9ZOztiCnO4HSLFL5oUwJdu92g//i+6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b0:bb:d3:0b:56:ed:85:52:0f:08:c2:cb:be:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Nov 11 13:01:21 2025 GMT
Not After : Nov 12 13:01:21 2025 GMT
Subject: CN=193db2669253690ab6ece5f5d5f41df46d2f4a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:38:ce:c7:62:88:90:c7:67:51:73:5c:9d:
95:7c:42:1d:a4:db:ad:a5:94:10:05:66:83:60:5c:
f8:7b:aa:bc:d4:33:ef:91:9b:eb:9f:87:be:e6:e2:
6d:bd:32:be:62:16:0e:14:15:bd:18:1d:b9:3b:00:
f2:71:cd:26:2d:b6:30:d1:09:43:b5:80:5e:c8:fa:
a4:3c:10:0b:a5:0d:ba:35:ee:fa:0b:67:be:c9:4d:
9c:4c:b6:4e:1a:83:4d:1e:ea:50:53:12:d2:a5:a4:
c4:fb:b3:e3:db:e3:e8:45:ea:2e:29:2e:cc:b5:00:
8a:de:56:c6:b8:f2:fe:15:fb:6a:29:90:2e:93:89:
86:99:4a:01:ee:d5:23:e6:8c:20:d7:30:59:18:78:
af:a8:eb:c6:d4:e7:7a:ff:87:43:83:2d:01:f4:84:
fc:32:63:c7:79:bd:5a:ef:65:14:1f:b3:cb:75:cd:
f2:0d:28:ef:c2:2d:40:3a:f4:c8:f6:20:c4:7a:6c:
79:df:a7:a4:08:3b:be:af:bd:e3:97:97:3a:4c:26:
19:fd:6c:c5:a9:fb:55:3c:3b:32:61:0e:9d:1f:53:
6e:28:5e:51:f8:c2:3a:66:09:3e:31:be:ec:e0:be:
87:bf:25:0d:e8:12:9c:08:75:cb:bc:06:e7:6f:c4:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3D:B2:66:92:53:69:0A:B6:EC:E5:F5:D5:F4:1D:F4:6D:2F:4A:5B
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:ba:0f:6e:a2:36:f2:3f:a8:5b:bb:82:9b:75:98:0a:38:
4c:d8:a8:0f:36:80:ce:1a:f6:65:bf:aa:cf:cb:2a:d4:fd:0b:
44:10:ff:9f:58:d0:d3:f7:1d:8c:03:be:52:19:a1:4b:ef:8f:
5c:bc:22:14:1f:d8:36:99:5e:1f:54:3a:7a:a9:79:8d:bd:f2:
1c:bb:17:80:eb:0e:12:db:ff:12:20:8d:3c:8c:9c:77:63:91:
1f:2c:63:de:c1:30:df:7c:db:04:36:a9:d7:4c:b9:57:fe:35:
2f:d9:63:0b:5a:39:89:a2:e9:05:4d:e1:b4:98:25:62:75:6a:
e8:d3:00:c8:26:fa:8b:76:78:3e:06:7d:e3:49:fa:83:6d:e3:
c9:93:fc:82:15:9b:ad:74:fd:d9:5f:80:ea:09:62:d5:ea:1a:
49:f1:01:d7:ed:d4:70:77:85:9f:95:01:61:8d:10:72:0a:4c:
0e:b9:65:f1:88:94:bf:65:cb:c9:a2:d5:eb:2a:04:fd:a6:fd:
c9:62:f8:b2:50:79:15:ce:d7:51:9b:ee:e3:37:4a:8b:0d:36:
ed:3f:2a:fa:2b:1e:43:23:62:89:d0:62:d8:e2:3d:c2:22:26:
70:b8:12:43:7c:33:47:61:03:12:c2:6a:b1:31:6a:f1:ea:57:
34:2d:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:38 2025 by rpki-client