Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: XVr2eOwtSBxU3emRU7Y9kbTRS3ZcQsIdBWl/f85hTiQ=
Subject key identifier: 04:98:26:C7:6B:6E:C5:EE:6C:B8:38:32:D1:B7:59:6E:F8:52:0F:A9
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 019A714A25560F4BB1257F59A16A9256046A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 0680
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: fyOmLJ1DHH+FM2tTDBokxhZx9oKZUaXT9aXqNYRYHMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:25:56:0f:4b:b1:25:7f:59:a1:6a:92:56:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=049826c76b6ec5ee6cb83832d1b7596ef8520fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:b3:fc:2b:1b:d9:3a:a7:e6:fb:cf:bb:70:
a3:c2:c4:05:b2:8e:84:bf:07:27:97:d7:ad:6e:ad:
be:c1:42:1d:ac:8c:ff:c0:7d:81:0e:f1:d8:6e:9d:
46:ac:bd:d2:53:40:0c:ce:26:89:80:4a:f9:ce:0d:
11:26:c2:bf:6f:32:be:44:e6:80:50:b6:d0:18:56:
27:d9:c5:07:49:8d:47:7e:ea:9f:8a:19:65:5e:bf:
d0:0c:11:ed:2b:4d:0e:67:48:f3:4f:79:10:e2:6a:
e3:cb:34:c1:c3:34:c0:6c:77:a7:e3:40:74:61:29:
25:08:a4:75:6c:53:2f:02:62:11:b1:5b:91:1e:e1:
49:24:e1:fe:0a:90:23:12:a5:74:a4:6b:86:f9:01:
9e:81:e3:df:0e:29:c1:bd:f5:69:c7:8e:5f:d1:4d:
7d:60:8b:35:63:37:c1:52:29:39:69:2f:92:63:db:
54:c6:1b:5d:13:3c:9c:7c:ad:c7:ef:4d:e7:4c:66:
67:bf:44:fc:5b:5f:54:d4:30:3d:38:90:2f:ee:cd:
0b:84:1c:6a:1f:f2:84:ea:a7:32:d7:ff:d5:41:0b:
9c:1b:9f:13:5d:d4:98:cb:82:85:4e:91:8f:ce:ab:
d9:97:fc:81:6a:4f:00:7d:53:1b:22:d9:e4:8e:b1:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:98:26:C7:6B:6E:C5:EE:6C:B8:38:32:D1:B7:59:6E:F8:52:0F:A9
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ce:a5:4a:9b:9e:2c:64:86:c2:8f:72:cc:3b:db:ff:96:de:
9d:91:32:cc:7f:a9:d1:9c:8d:8a:3f:8c:5a:c2:ee:c8:5e:1b:
8d:d2:c7:b1:db:a0:c6:d7:05:51:c6:2b:db:1b:db:00:b0:c3:
34:9c:37:2e:dc:89:e1:cd:e8:5d:3d:2a:70:96:82:60:a0:79:
d3:54:39:e6:ce:07:97:7b:b5:ce:10:7c:a4:6c:66:33:c4:58:
e4:a4:7f:2c:96:ad:b7:da:ec:77:ee:41:b5:94:f8:99:ab:6a:
3b:ef:ca:2d:92:2b:61:cd:50:57:07:bd:e9:9a:c8:52:3e:f9:
ee:74:9c:e0:bb:00:d3:fb:de:ed:0c:d3:90:60:36:07:52:a4:
b0:b6:4c:b8:48:af:25:e7:6f:9d:da:49:15:15:1e:14:0a:d9:
35:78:10:a7:1c:a4:bf:5c:10:ae:95:03:75:f4:d4:36:af:ae:
3f:7a:db:1b:04:2d:61:d4:44:2a:17:2c:85:74:25:9d:65:92:
20:4f:78:79:ef:5e:64:09:05:d1:d4:b3:5b:39:b6:7a:bb:55:
64:92:11:04:3c:14:b4:0f:7a:f1:a6:8d:67:09:cb:2d:bc:33:
08:99:6a:6f:63:6f:0a:96:28:b6:c1:54:8b:33:6c:0b:4b:0d:
17:fc:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:07 2025 by rpki-client