Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: VEwBv4aXBgumYbVYaN8TPTaQ9twu9/pyAzPiwwljK2c=
Subject key identifier: A9:37:F0:7F:29:3B:D5:AD:17:CB:14:C5:3A:1D:E3:C6:03:C4:F2:21
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 019A71B7C8133C972C0CA3D973AA432819C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 107F
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: dWUV/8h/nPF0KBJtAZ0TZwg3V+GKt1+Lszw/t+NCqzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c8:13:3c:97:2c:0c:a3:d9:73:aa:43:28:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=a937f07f293bd5ad17cb14c53a1de3c603c4f221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:be:08:70:fe:b3:c6:88:c6:e5:f6:3e:4e:
d4:53:7a:a1:22:31:95:95:58:6a:60:13:ea:8b:3f:
57:35:be:64:29:77:f7:48:e0:85:56:3b:82:b9:d5:
4e:aa:96:fc:69:e3:9d:59:41:54:0f:47:ce:19:2f:
eb:f0:fe:ef:0b:99:0d:0e:44:95:e9:13:f7:3c:55:
76:b1:64:15:19:aa:c5:81:02:90:3f:98:7f:68:e6:
83:61:3e:73:48:18:c6:b0:35:02:1e:2b:8c:bf:d6:
75:cf:6a:87:78:5a:b1:71:19:60:a8:e8:b4:26:64:
4d:d9:13:fb:d3:02:b8:48:19:7d:e8:15:44:27:28:
8b:85:00:5f:7b:89:14:cc:77:89:f8:e9:b9:28:9a:
a7:c6:b8:32:cc:63:d2:1d:30:05:21:86:6e:8a:fa:
66:c2:b5:03:07:19:b1:8b:da:20:60:95:6e:33:77:
1b:90:13:26:c7:65:1f:bd:c1:ca:9b:7b:da:da:db:
f2:80:74:8e:a3:b0:c1:81:a0:41:34:ff:9f:ee:a8:
38:38:07:47:ec:9d:2b:0f:52:25:d3:b3:00:43:00:
65:ba:da:59:be:99:3a:11:30:b4:c8:97:04:53:c3:
b5:92:52:7f:fc:c4:d5:b4:1e:b6:74:56:30:1d:0c:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:37:F0:7F:29:3B:D5:AD:17:CB:14:C5:3A:1D:E3:C6:03:C4:F2:21
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:19:45:b7:0d:81:cb:c1:37:e8:14:c6:d6:c1:8f:37:d3:ec:
5c:1a:dc:6d:60:c0:46:be:e4:e4:96:57:e7:65:f3:4c:21:0c:
5a:a1:0e:a1:e5:01:72:5f:dc:d1:62:16:c5:c4:79:09:82:62:
7a:35:f5:ba:48:55:00:d7:35:0e:f9:37:69:50:99:a1:53:a4:
3c:43:67:97:1a:4f:53:58:1d:2f:df:0f:99:23:19:fc:8b:c5:
cf:86:db:82:a3:65:a2:45:7f:33:b6:ed:a5:57:a8:f9:76:9b:
7f:17:50:a8:a6:26:10:d0:a7:6f:36:27:73:9b:02:0e:1d:ab:
52:af:96:e9:50:f8:5a:29:3b:98:15:86:48:4c:fc:f9:28:79:
71:ad:e5:f2:db:da:87:05:f5:f3:5e:a9:79:e5:b8:b4:3a:b6:
5c:d8:61:c9:0b:f0:f5:2d:22:60:6f:05:74:85:e1:35:3e:a2:
b4:de:9b:e6:88:46:c6:66:8c:d1:fd:78:67:3e:be:ff:56:c6:
6f:7e:03:db:4f:e9:fe:84:6d:bd:5e:cd:6a:11:f9:17:32:5f:
2f:ae:52:55:10:ec:a3:58:8d:da:2e:05:c7:7a:a0:ec:1e:6a:
0e:63:ce:e8:b3:07:a7:25:9f:a6:65:f8:ea:e2:5c:6a:b5:69:
ed:44:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:12 2025 by rpki-client