Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: iKcXfbZcEYEcLZMOUSatQIuzQhceWROEE2f0dSBIuWo=
Subject key identifier: 3B:DE:51:9D:9D:F2:17:DB:4A:A3:30:74:20:0D:4B:F6:4A:8F:34:BB
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 019A730110102DB89FB6E96EF9FE849A177B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 1639
Signing time: Tue 11 Nov 2025 13:00:40 +0000
Manifest this update: Tue 11 Nov 2025 13:00:40 +0000
Manifest next update: Wed 12 Nov 2025 13:00:40 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: EtvihS24Ic/DZ0/70m2dxHPUS9ihUS1YC0mPhtQYjm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:10:10:2d:b8:9f:b6:e9:6e:f9:fe:84:9a:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Nov 11 13:00:40 2025 GMT
Not After : Nov 12 13:00:40 2025 GMT
Subject: CN=3bde519d9df217db4aa33074200d4bf64a8f34bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:77:a9:50:ce:05:b3:7f:4b:10:fd:2b:09:3d:
2c:52:84:c1:20:89:47:4b:35:0d:88:45:31:33:c6:
41:9a:4e:c2:8c:c6:c9:5f:07:a7:bb:98:10:1b:77:
80:5a:89:70:82:fe:f1:97:6b:4f:4a:de:b2:57:5f:
75:65:02:38:2d:01:5c:10:36:9c:9c:b5:70:d0:57:
fc:3d:fd:59:22:ff:c7:ca:5b:6c:a5:42:20:38:46:
5e:17:f6:6c:02:50:2f:ea:33:e4:dc:94:09:88:dc:
39:ce:f5:2c:1a:db:6c:4e:fe:f8:f1:4c:ef:bd:90:
b4:59:8a:3f:41:45:d7:50:42:52:03:49:7e:d2:6e:
56:33:7a:29:17:59:29:ad:9c:8f:97:ce:a7:25:f2:
df:d1:39:0d:e2:6b:95:23:72:02:42:ea:87:c6:5e:
66:53:ef:62:ce:1a:30:2f:0a:a2:41:8b:fe:99:8d:
b2:a8:0f:20:ef:e8:fa:5b:4a:13:23:76:e6:61:cb:
9b:e3:e0:f3:1b:1c:f8:1f:e9:e7:e3:b1:66:14:31:
39:48:96:2a:57:52:ff:6a:a9:b7:20:3b:5f:3e:47:
4c:c1:4b:b4:79:e3:8f:6b:6f:36:18:3c:93:b8:5c:
b9:05:71:cc:4c:74:8d:c2:60:0e:18:c1:6a:16:2f:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:51:9D:9D:F2:17:DB:4A:A3:30:74:20:0D:4B:F6:4A:8F:34:BB
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2a:15:be:97:72:db:fb:31:02:83:dd:ad:e5:01:a1:84:16:
fa:b6:f9:22:77:fb:6d:19:71:98:ea:be:d0:26:62:1b:5e:9d:
d4:31:90:b5:54:79:82:59:3e:2d:80:e3:69:52:b8:bf:72:f8:
38:ed:cc:b5:55:61:c4:e9:f6:aa:8f:4d:c4:13:73:d7:be:28:
0d:88:3b:d0:bf:b0:66:7c:10:94:12:a9:48:92:62:07:60:70:
c5:91:33:74:bc:f8:dc:ee:6e:f0:af:28:6c:59:f6:42:92:c6:
da:4d:12:f8:3d:9b:cf:c3:7d:9c:f0:d8:7a:83:5c:87:6b:ad:
c9:8f:2d:09:84:aa:24:dc:15:72:ec:db:d9:d4:3f:fd:ed:5a:
b9:1c:30:96:d4:e4:f4:2a:d0:0c:ca:80:af:1a:8a:fa:6c:b3:
5e:7b:2f:5f:57:a9:ba:02:b7:76:ca:a6:91:93:7c:5f:a0:30:
16:56:01:49:ef:3a:03:23:8e:dc:73:d1:ed:ce:b0:90:98:74:
5f:0b:89:1c:1e:43:10:7f:4e:e8:7b:83:7f:f5:43:ea:33:51:
d7:29:75:57:8e:3f:63:b2:5f:ba:0b:46:20:46:34:51:7d:32:
9c:9e:10:c8:54:7e:e5:55:aa:6e:17:b6:b7:0d:c3:f7:9c:f2:
30:df:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:58 2025 by rpki-client