Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: 3Y9oOk2s6BEagRCqs8XfbxhyzYjQkPQ9aEc+v1dY7Rc=
Subject key identifier: B0:A4:92:48:C2:0B:08:D2:7B:5E:7F:D8:D0:8D:5B:57:5C:DF:56:52
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 019A71B7B1AFFCA699F7B8F01625CB4943FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 0440
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: WXJXkVZo7dUMmP03HB/hgQASzD8ITfGN4796nB/JLo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b1:af:fc:a6:99:f7:b8:f0:16:25:cb:49:43:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=b0a49248c20b08d27b5e7fd8d08d5b575cdf5652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:30:8c:37:f1:8a:2a:d6:92:8d:a6:cf:2b:
40:44:5d:4a:bd:47:af:0c:b1:5b:e8:97:93:02:b0:
f4:98:70:bf:70:16:0a:49:6c:2a:c4:92:61:f4:8a:
ed:06:0b:36:4a:da:7a:b6:72:c5:f9:be:04:ef:75:
26:14:57:dd:06:b4:76:b4:ba:c0:a8:15:28:de:96:
0f:27:07:a9:9a:b4:fe:9d:81:62:19:e6:fd:98:e0:
56:0d:ae:a9:ee:79:03:80:2a:8b:32:62:b0:dd:fd:
48:98:62:b5:26:94:e7:8d:16:71:ea:a6:44:89:31:
c1:5d:5b:2b:59:19:d4:35:a3:a2:d0:87:79:dc:94:
ae:29:ba:68:ef:49:20:06:06:ef:85:e5:63:4a:6d:
32:e9:ae:5f:82:f8:19:c0:38:0f:c7:f2:90:a6:76:
9b:06:be:d2:ad:3d:c8:7c:ed:67:ed:46:8b:fe:67:
d7:7c:7b:66:d7:b9:7b:0d:48:06:5f:7d:ba:ca:db:
8c:b9:2b:bb:5a:9d:c3:7b:d7:7f:bc:3c:db:50:24:
7d:26:7b:91:80:38:eb:e2:05:31:9b:f8:3f:0a:f6:
0b:05:dc:1b:cb:d5:05:81:b2:ba:b0:65:f7:c3:c9:
59:72:61:9c:d9:ca:bd:a0:26:08:23:e3:4e:82:4f:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A4:92:48:C2:0B:08:D2:7B:5E:7F:D8:D0:8D:5B:57:5C:DF:56:52
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:69:7f:ac:09:6c:5b:86:35:79:f8:4a:08:cb:aa:c7:15:f8:
8a:4d:81:40:e2:36:da:b6:6b:0c:2c:ed:c0:ab:fe:0f:4d:e9:
a6:75:17:93:9d:b7:98:1a:2b:a6:bb:93:22:6d:85:50:18:ef:
71:3c:eb:70:90:de:09:6d:db:f2:ef:b1:76:b1:4b:66:b2:fe:
c9:75:34:08:7a:98:f1:56:22:28:93:52:d0:76:02:23:98:85:
8f:8b:7e:26:6f:29:c6:7c:06:ec:d8:11:27:e9:25:e2:34:e6:
f5:06:a8:e3:89:15:e3:16:c9:cf:42:cb:3e:f5:fb:a7:72:8b:
4f:79:e9:65:e4:8a:a1:ad:03:1b:c7:2d:78:f1:6d:3b:4a:62:
5e:75:de:4e:6d:9d:a1:54:b1:b3:e9:0f:05:1c:4f:de:ba:f5:
79:d9:16:68:98:4a:52:14:58:28:df:e1:fa:1d:a7:c2:1a:2a:
e7:24:95:65:b0:12:97:eb:b2:db:92:29:a5:5c:56:e1:14:2f:
45:2c:b4:fc:7d:40:92:be:38:a2:ff:dd:d4:ba:85:96:d4:bd:
a8:ce:b2:4c:d0:9a:27:36:90:06:c4:60:14:7b:af:9b:06:1a:
ca:5e:d6:2d:69:7e:4d:3e:ef:9b:8a:78:dc:b5:58:75:35:ab:
91:09:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:22 2025 by rpki-client