Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File: ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier: B/L43LfJZR0llX2CVikqTHiyv87j4xmHRyDECjB9k2Q=
Subject key identifier: D8:8E:31:DC:61:2F:27:91:D1:20:CA:00:D4:44:5C:A6:83:B8:69:64
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer: /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial: 019A7225B89B8CF1317488E0C8B3F8EA2961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number: 0928
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: R55waYtKUUoTl6BcvlER1UXKGopeaQmOeTnsftYSPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b8:9b:8c:f1:31:74:88:e0:c8:b3:f8:ea:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=d88e31dc612f2791d120ca00d4445ca683b86964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:3b:2b:2c:31:c8:f0:b2:77:ff:ef:4a:88:
bd:97:47:69:2a:d5:c9:11:80:ac:6a:53:bc:65:3f:
d5:4e:0e:0c:94:41:66:d0:1d:17:5d:8e:13:cc:a1:
ce:49:90:b8:5b:11:c7:15:cc:df:7d:61:94:e2:72:
df:a0:6c:98:86:9e:c3:7d:ac:5b:db:27:0f:41:67:
07:77:f2:18:2c:de:8b:f1:78:92:3b:e2:16:48:5f:
a3:2c:5c:32:d6:0f:0f:ac:21:f3:45:53:0b:c7:3f:
3a:8a:c8:58:b0:a7:44:ce:b6:1b:5f:01:9d:01:39:
6b:fd:c6:36:05:00:7d:03:55:0c:61:46:42:f0:01:
f3:d9:7c:04:ee:9b:85:52:29:2a:1b:be:3c:3d:a8:
b2:e5:1a:83:ae:81:61:07:a4:d9:42:d5:39:7a:1c:
c2:03:fb:15:42:4c:10:ab:b8:56:60:33:9a:fb:43:
ee:bf:dc:ba:e0:c0:80:96:96:96:aa:ea:f6:40:6e:
41:80:ef:06:11:cd:ea:23:83:9a:37:20:ae:56:5e:
a3:a0:97:0f:4c:32:27:e3:df:38:9a:47:dd:f6:77:
f2:f8:ac:10:b8:29:57:de:7d:9c:1d:a4:58:b0:84:
75:74:70:e8:bf:4e:c5:20:ae:77:56:7f:70:e5:63:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:31:DC:61:2F:27:91:D1:20:CA:00:D4:44:5C:A6:83:B8:69:64
X509v3 Authority Key Identifier:
keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e2:d1:58:f8:e3:63:66:a7:2f:8f:8c:c6:13:40:32:49:8c:
f1:ff:f6:f0:e4:85:c5:c9:bf:ea:2e:63:d6:30:b4:7b:1e:d8:
1f:33:e6:5d:0e:6b:00:d9:73:15:b1:a1:cd:a3:72:1f:bb:74:
50:9a:00:e7:e7:ec:89:ab:6f:2d:ad:a9:58:4e:ad:4e:3c:79:
3b:d8:b6:62:1a:5d:1b:46:51:ad:54:42:16:a2:06:d4:e5:26:
d2:16:17:83:90:6a:58:5a:57:c2:00:50:df:3e:90:48:44:ac:
f5:f0:4f:ec:c9:62:4a:16:12:d5:8e:41:6e:a1:a9:61:11:de:
49:15:47:9e:31:7a:7c:84:7a:17:6a:a3:2c:ee:07:c1:28:70:
a9:b5:2e:87:b1:55:39:cf:2f:39:24:7f:6d:ff:8a:65:25:b2:
38:3c:f5:16:7c:47:3e:c8:b1:30:a6:20:ac:aa:2f:94:43:f3:
37:9a:7e:16:7d:de:79:93:6b:e5:23:45:23:09:f0:33:bb:c6:
13:e2:c6:47:e7:03:08:c5:0b:21:9a:19:d7:c0:93:ed:2b:8e:
79:fa:45:d0:f8:06:8b:6d:06:52:59:ac:68:12:d0:95:ad:e4:
c0:05:3d:83:0d:e5:1b:ae:4e:aa:7a:5f:8b:1a:fd:77:0b:7e:
b5:06:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:05 2025 by rpki-client