Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json)
Hash identifier: uiOEeOgQj7RSbXCHM8C21FTI8ReAxJcn719+/9D70W0=
Subject key identifier: D2:02:78:C3:5E:C8:A3:89:14:4C:AE:E3:75:FE:3F:40:84:1A:58:87
Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Certificate serial: 019A262EF90F7D19286D4B68B77E8D40A2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
Manifest number: DD
Signing time: Mon 27 Oct 2025 15:00:03 +0000
Manifest this update: Mon 27 Oct 2025 15:00:03 +0000
Manifest next update: Tue 28 Oct 2025 15:00:03 +0000
Files and hashes: 1: oQ5fumIcVB85Uy2dYh229j_WaHg.roa (hash: vl4buX4gY0bD8VM1N3aDm+YQLtmBqcCMCCyk6V68GNc=)
2: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: 6BEowZu4uB2lAxEYzscIQfrvCmnOPZekY3rSQl7RX00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:2e:f9:0f:7d:19:28:6d:4b:68:b7:7e:8d:40:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Validity
Not Before: Oct 27 15:00:03 2025 GMT
Not After : Oct 28 15:00:03 2025 GMT
Subject: CN=d20278c35ec8a389144caee375fe3f40841a5887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:d6:94:1d:04:36:c3:c5:15:b1:94:c3:67:
72:2e:fa:2d:26:30:97:a1:ec:d1:81:b3:6a:31:28:
d4:7f:7e:ed:b9:d5:e1:11:54:f2:7e:2e:a9:de:88:
e3:81:b7:fd:3c:88:e0:4b:ba:46:bd:c9:b7:77:0e:
30:93:f0:0b:66:74:c8:10:9f:64:4a:8e:b6:26:e2:
5c:9a:f9:c2:07:36:95:e3:cd:4d:b8:2d:c8:00:8c:
8e:41:e5:21:5a:63:7a:0b:e5:ec:c7:e1:33:19:0d:
16:59:91:e2:b9:fe:29:e2:30:99:21:3f:34:44:d9:
03:31:61:72:c2:42:88:02:6e:90:95:ec:05:5c:91:
fc:bc:ae:fc:81:b1:d6:f9:6b:bd:74:80:a3:ce:b9:
01:cd:be:c8:3b:c9:9a:3c:96:4f:d1:7e:34:00:45:
01:93:c8:a4:d8:e6:df:59:b3:60:ba:c1:a4:35:48:
80:89:22:4c:6a:83:00:8c:11:bd:e9:13:65:d7:8c:
64:2e:ac:72:48:1a:ae:1a:a7:1c:73:57:d2:c3:3f:
fe:79:d1:5c:fe:e2:31:ee:6a:7c:05:ed:1e:01:51:
eb:5d:12:7e:62:94:bf:e4:18:80:5b:d9:4f:96:f0:
41:0e:3b:2a:06:35:69:d0:97:6b:9e:76:38:49:a3:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:02:78:C3:5E:C8:A3:89:14:4C:AE:E3:75:FE:3F:40:84:1A:58:87
X509v3 Authority Key Identifier:
keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:93:40:2b:3d:0b:46:8a:3e:62:9d:b2:d4:7e:27:78:40:52:
6b:42:52:a9:e8:19:f8:75:43:18:f4:c9:db:44:be:72:6f:54:
d3:eb:af:5e:0e:73:9f:38:53:21:ff:55:6c:5e:1f:db:b4:68:
d7:69:64:0e:57:5c:e5:5e:40:17:fd:5c:7d:cd:14:cf:dd:70:
38:75:da:5b:8d:83:f9:95:9b:10:33:73:9d:32:f7:b7:3d:85:
6a:95:c5:72:08:f4:56:e8:42:94:10:be:68:e7:53:75:7d:03:
18:32:a3:04:69:3d:5f:ff:24:16:b4:96:10:08:11:ff:89:e2:
a8:e2:08:5f:a0:04:0f:63:75:88:1d:66:fd:9b:74:9b:03:ed:
31:b1:62:f1:c1:db:89:f8:ad:09:00:40:e2:19:f3:8d:79:14:
fd:94:ca:88:3a:cb:75:69:46:94:e5:a6:0c:09:ff:23:3d:de:
14:43:1f:a9:dc:e2:1e:9b:cc:47:d7:8b:21:c1:f6:f1:4f:ad:
c2:04:c4:80:c7:90:6e:ad:fa:75:91:98:a2:9c:64:66:12:ee:
bc:01:36:ce:ed:c7:e4:b4:16:f8:99:3b:25:83:34:f8:09:e6:
84:45:2b:0d:4c:98:b6:c2:ae:ce:5e:78:a2:da:9f:f4:04:0a:
d2:e8:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:39:48 2025 by rpki-client