Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: c0IeVxUxQxEHM/vm6Y/6/kxCUzGHNhDClT5O3Q6HJK4=
Subject key identifier: 74:FE:4E:36:19:F3:68:73:B5:2F:55:8F:03:CE:52:04:84:AF:75:F1
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 019A71B844DA135B905D910D1CA73915797F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0F3B
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: yrcCgn7to7HhDg7SDwFZoa4jouyWAYX4B5beNO+xYaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:44:da:13:5b:90:5d:91:0d:1c:a7:39:15:79:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=74fe4e3619f36873b52f558f03ce520484af75f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:69:da:2a:c4:d2:52:8d:71:f8:9a:00:8e:
cc:ee:94:59:9f:73:37:ec:cf:fc:a2:48:b1:17:4d:
d9:e2:51:9e:a8:41:ab:4a:cc:87:da:ec:52:db:a3:
76:ca:fd:50:4d:05:01:7d:8d:b3:f2:0c:ce:98:90:
85:67:09:7e:ee:a7:9a:3d:e2:f8:a5:ab:38:94:42:
61:6b:b7:df:53:d6:f7:be:9c:ce:55:01:f2:0e:2a:
30:44:08:93:8a:a4:d6:4b:2f:1d:86:36:54:50:7b:
d1:6c:3b:6b:1c:9e:22:c4:84:27:5a:a7:ef:0a:3b:
37:63:84:5e:9f:7f:36:42:be:da:68:cb:c1:e7:bc:
f4:c2:a2:31:10:4c:9f:67:ba:98:01:b2:ed:b1:ef:
8c:e6:d7:7e:8f:87:50:82:d1:8d:41:72:0f:c5:97:
f0:0b:f5:0f:f9:84:17:42:44:aa:88:42:b3:c5:a9:
b3:2f:dc:51:7e:f7:f9:18:c6:a3:2b:79:5c:8f:0f:
2d:60:76:99:0d:58:68:ce:e2:45:25:79:af:dc:a5:
04:4c:28:8d:8f:b0:45:fe:f3:8e:a3:2d:3c:ab:34:
aa:19:b2:4d:66:c1:84:a4:0b:57:d0:e9:7a:63:69:
7a:e9:f5:b9:d2:22:11:97:0d:9f:f3:08:4e:93:be:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:4E:36:19:F3:68:73:B5:2F:55:8F:03:CE:52:04:84:AF:75:F1
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:cd:28:b2:dc:70:59:5a:2c:5d:0b:d7:ef:8c:5b:e9:4c:33:
e0:1f:aa:67:5a:2b:0e:8d:dd:5b:2e:bb:06:69:f9:97:25:ff:
a6:58:56:2e:ee:eb:7c:0f:0e:2e:24:4f:ba:42:34:68:d3:ab:
0f:db:e9:e8:d0:67:ca:03:46:28:a3:f4:e1:16:c0:0b:8f:dc:
1d:bb:18:72:a6:3c:39:40:27:dd:27:3e:54:99:d8:a1:9d:c6:
0b:3c:5e:6e:ad:4e:5a:c0:cb:bc:c2:32:3e:5e:00:0c:f2:9d:
b3:f3:64:25:f8:40:2f:8e:9d:38:44:c9:32:18:69:32:2f:1d:
6d:6b:cb:1c:6a:0e:b3:3e:f0:9d:09:04:cd:aa:96:12:88:6a:
54:44:42:99:85:f0:da:7b:3b:2f:27:ae:51:bf:f3:92:a5:f3:
c5:c8:70:87:f3:55:4a:14:be:21:cf:b5:79:a8:f5:55:8f:72:
00:83:91:95:10:80:e6:6e:6f:40:8b:c4:e7:15:bf:b9:c3:68:
b6:79:41:8e:63:79:4e:c8:0e:77:57:71:54:3f:ea:3c:40:b7:
c5:36:63:c1:d8:69:0e:2c:06:01:8d:3e:a7:b7:1a:2b:42:65:
4d:e0:9d:3d:97:e8:61:80:3f:6e:32:9f:60:2a:8f:d8:07:a2:
f2:31:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:21 2025 by rpki-client