Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: FXEjL62u+WOCewsRVd+fT4U8qEqJkYBS/EvCzlB53ho=
Subject key identifier: 3D:73:8A:D4:09:5F:00:B1:C3:30:2F:F9:A2:C4:A7:72:1D:1B:1C:4D
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 019A72933ED8D938F8CC06EBD06178AC36DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 0A9E
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: JSSIw6wmlc9AcHh096e8vUmL/rljBRgPzB/4xq+ECSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3e:d8:d9:38:f8:cc:06:eb:d0:61:78:ac:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=3d738ad4095f00b1c3302ff9a2c4a7721d1b1c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:1b:9f:a8:da:d4:86:e6:a9:aa:84:e3:14:
83:ec:67:9d:5b:7b:3d:fb:cc:3a:cb:f6:a9:2d:0b:
a3:6b:8e:f0:e6:ef:56:84:a5:57:4f:2f:73:47:86:
0a:79:ae:19:de:44:c6:e0:60:0d:13:6b:44:fb:26:
e5:6f:b7:c4:57:a3:67:87:4d:02:42:2d:72:f3:cf:
35:8c:1c:69:ce:c8:60:2a:67:58:df:6b:ca:12:e0:
7d:d0:3d:93:7b:14:1b:b9:a0:d2:a3:9c:b3:a9:bf:
01:14:80:05:e7:b2:aa:8a:fd:75:0c:bf:2e:fa:6e:
fe:af:33:e7:53:20:89:6e:78:fb:5a:d4:2e:d5:21:
ca:94:64:a7:9d:b8:63:e2:47:06:70:57:56:c7:cf:
1c:2c:6c:89:e9:d4:e1:2e:a4:bc:ff:0b:74:0f:e3:
76:62:1e:23:3b:44:65:fd:da:de:e8:cd:5d:42:b5:
bb:eb:e4:6e:ce:dd:92:ee:53:60:2e:97:e6:69:e1:
a4:23:c5:1f:c3:8c:d3:5d:e5:ab:3b:e2:b9:69:0c:
be:82:61:a0:d9:5a:8c:43:c7:81:e7:cf:65:48:de:
92:7e:dd:5e:d0:8d:f2:41:f9:14:b5:72:2c:be:c2:
a9:4e:ca:4f:41:c2:4b:06:4a:b6:38:cf:9d:24:fd:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:8A:D4:09:5F:00:B1:C3:30:2F:F9:A2:C4:A7:72:1D:1B:1C:4D
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cb:47:d3:ea:ea:e0:22:ec:5e:7f:c2:f3:ca:a5:7c:7e:0a:
03:0f:94:a3:3b:7e:46:45:a8:45:c3:d1:d0:f6:5d:da:c4:3e:
a2:20:cb:ec:6e:6c:c8:f1:b6:89:eb:00:0c:9c:35:0f:3a:00:
c3:02:7e:83:de:29:87:6f:52:61:24:34:e7:aa:58:9c:da:35:
12:ed:c2:de:59:19:9f:0c:9b:78:df:9b:52:86:f2:26:cc:b2:
b9:49:75:e4:70:13:97:90:71:49:85:32:b8:f9:c7:17:4e:35:
78:29:7c:8f:bb:18:6b:34:75:71:5d:af:da:c3:d2:18:f4:f6:
a2:d3:e0:c1:bc:59:3d:58:2c:db:62:33:17:04:90:69:39:0f:
92:e0:86:da:91:b4:0d:be:f7:a7:af:f2:27:f0:2e:28:ce:f4:
34:5c:e7:48:9d:c9:5d:bf:c8:bd:11:dd:4d:ab:b4:6f:ea:4d:
b6:5c:83:7e:7e:8c:7d:ed:93:c9:49:6d:5e:36:03:76:3e:11:
d8:da:8f:55:af:9b:25:16:fb:c3:af:61:97:78:8d:d7:f9:41:
4e:5d:17:2a:cb:8d:56:2a:15:65:98:e4:0a:30:2f:a0:1f:52:
26:32:40:44:08:fb:6a:c4:2d:f7:d8:21:1a:cb:21:1c:7c:6a:
35:c8:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:28 2025 by rpki-client