Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: yVGv9gbde5sj4s8ZA5nsHD8HulAammg+H+Kth1K4ttc=
Subject key identifier: 31:2A:20:33:76:3F:9B:D0:9E:19:95:FD:5D:28:0E:35:C5:FA:04:9C
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 019A1271703D74223D260D2CFC23F71ACEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 111A
Signing time: Thu 23 Oct 2025 19:00:15 +0000
Manifest this update: Thu 23 Oct 2025 19:00:15 +0000
Manifest next update: Fri 24 Oct 2025 19:00:15 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: f0du7I2vQdaQjGfW2s+vYG59AVUXOXeO1qenG2FGqwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:71:70:3d:74:22:3d:26:0d:2c:fc:23:f7:1a:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Oct 23 19:00:15 2025 GMT
Not After : Oct 24 19:00:15 2025 GMT
Subject: CN=312a2033763f9bd09e1995fd5d280e35c5fa049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:58:15:cb:de:f7:9e:34:54:89:e0:50:6c:
8a:34:e3:67:49:18:17:b4:d0:74:b7:63:e2:fe:93:
d2:51:5b:2b:d7:c1:6b:74:f6:78:7b:53:6d:39:b6:
d1:32:11:88:14:98:02:6b:e3:6b:d2:97:ad:c7:c1:
33:95:c6:07:83:5a:98:62:fb:71:e2:5d:a7:c2:24:
1f:5b:1c:d8:2c:f6:1d:b2:0c:ab:e3:83:97:73:cc:
27:b7:a8:5b:33:0f:48:d1:58:ed:8e:82:ab:95:b7:
fa:ee:29:b2:e5:33:ca:65:35:56:9a:29:0d:fa:26:
c3:4a:ce:f8:25:c4:63:55:20:dc:47:ee:cd:4c:ae:
91:2c:97:9c:ef:65:3c:d9:e1:5c:35:86:d6:0f:91:
c1:9a:83:36:cf:1a:1d:31:80:63:f3:58:ee:b5:0e:
90:de:3d:38:1a:b0:a8:d2:17:05:99:1d:5a:98:13:
fd:97:14:4f:b6:a7:fb:8a:25:99:18:ec:32:22:98:
eb:e9:7e:66:1f:ea:9b:c8:97:53:b8:10:22:7e:94:
6d:f3:f9:8f:45:4d:8e:4a:aa:1e:64:3d:8d:36:91:
26:5f:c4:11:01:76:43:50:92:d4:d7:ce:bb:d1:df:
d0:4d:8f:88:ad:77:7a:96:73:f2:97:fe:ee:47:6d:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2A:20:33:76:3F:9B:D0:9E:19:95:FD:5D:28:0E:35:C5:FA:04:9C
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:48:9c:30:18:fa:c2:ac:50:ab:ec:d2:f8:b2:ab:55:92:6e:
ef:2a:8a:32:4c:11:ed:2d:84:e3:93:7e:4b:9d:43:73:4d:70:
05:be:89:82:bf:f6:b1:ae:1a:74:38:a5:d5:09:e8:b0:25:8d:
c2:c9:f9:fa:94:44:74:3b:55:db:8a:bd:60:53:29:85:b5:15:
86:e9:e4:cf:b7:42:db:8e:36:12:82:b2:bd:94:51:92:00:96:
7c:d9:f3:09:27:07:2b:0e:b8:79:57:62:8e:f2:7a:3f:85:0b:
c0:5c:d9:94:47:ca:87:31:de:50:ab:39:85:eb:d7:10:2c:54:
66:be:1f:6f:59:68:3e:15:06:9c:c4:78:c7:af:0e:26:7b:8e:
c6:03:56:69:57:d0:e8:4d:75:05:bb:1d:48:9a:cb:e0:97:ea:
cf:7c:5b:78:49:80:9a:5f:8f:8e:6f:57:4b:06:8a:b2:37:71:
e5:70:9c:fd:d7:bc:34:8f:d9:1f:82:44:30:e5:e9:59:10:06:
0d:b4:d7:d4:6b:1b:a2:c1:6d:0d:91:aa:ff:cf:4f:65:f0:fc:
38:af:99:94:49:be:08:21:c1:48:8c:e7:2b:d9:bb:e4:e1:76:
a6:60:8c:92:76:49:22:e2:8c:f4:16:dc:e4:d1:75:2c:cd:66:
6f:2e:ac:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoScXA9dCI9Jg0s/CP3Gs7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDFmNmVlNjcxZWVhNTM1OGU3MWNlN2ZjMTFjOTM2Y2Mz
NzZjNjEwHhcNMjUxMDIzMTkwMDE1WhcNMjUxMDI0MTkwMDE1WjAzMTEwLwYDVQQD
EygzMTJhMjAzMzc2M2Y5YmQwOWUxOTk1ZmQ1ZDI4MGUzNWM1ZmEwNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CNYFcve9540VIngUGyKNONnSRgX
tNB0t2Pi/pPSUVsr18FrdPZ4e1NtObbRMhGIFJgCa+Nr0petx8EzlcYHg1qYYvtx
4l2nwiQfWxzYLPYdsgyr44OXc8wnt6hbMw9I0VjtjoKrlbf67imy5TPKZTVWmikN
+ibDSs74JcRjVSDcR+7NTK6RLJec72U82eFcNYbWD5HBmoM2zxodMYBj81jutQ6Q
3j04GrCo0hcFmR1amBP9lxRPtqf7iiWZGOwyIpjr6X5mH+qbyJdTuBAifpRt8/mP
RU2OSqoeZD2NNpEmX8QRAXZDUJLU18670d/QTY+IrXd6lnPyl/7uR21YYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEqIDN2P5vQnhmV/V0oDjXF+gScMB8GA1UdIwQY
MBaAFMxB9u5nHupTWOcc5/wRyTbMN2xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84ODU3YTMtZGExZS00NTQ5LWFlYzAt
NmYyZTc5ZDgyN2UwLzEvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84ODU3YTMtZGExZS00NTQ5LWFlYzAtNmYyZTc5ZDgyN2Uw
LzEvekVIMjdtY2U2bE5ZNXh6bl9CSEpOc3czYkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkicMBj6
wqxQq+zS+LKrVZJu7yqKMkwR7S2E45N+S51Dc01wBb6Jgr/2sa4adDil1QnosCWN
wsn5+pREdDtV24q9YFMphbUVhunkz7dC2442EoKyvZRRkgCWfNnzCScHKw64eVdi
jvJ6P4ULwFzZlEfKhzHeUKs5hevXECxUZr4fb1loPhUGnMR4x68OJnuOxgNWaVfQ
6E11BbsdSJrL4Jfqz3xbeEmAml+Pjm9XSwaKsjdx5XCc/de8NI/ZH4JEMOXpWRAG
DbTX1GsbosFtDZGq/89PZfD8OK+ZlEm+CCHBSIznK9m75OF2pmCMknZJIuKM9Bbc
5NF1LM1mby6suQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 03:01:20 2025 by rpki-client