Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: J+RmoJayfkf7gSPJgvrRV2mVvut4f0BJK2qWTYizFa0=
Subject key identifier: 74:4C:F2:A6:ED:0D:28:F0:CC:58:F3:68:2A:1C:6B:1D:0C:0B:93:02
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 019A7301CCA47D0192E0CBD7A8B5067B7F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 13:01:28 +0000
Manifest this update: Tue 11 Nov 2025 13:01:28 +0000
Manifest next update: Wed 12 Nov 2025 13:01:28 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: RQoV8PbIK2ZXc81YNVit97QWVHWtj3thYmvYCYrYTL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:cc:a4:7d:01:92:e0:cb:d7:a8:b5:06:7b:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Nov 11 13:01:28 2025 GMT
Not After : Nov 12 13:01:28 2025 GMT
Subject: CN=744cf2a6ed0d28f0cc58f3682a1c6b1d0c0b9302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:f0:a2:a5:50:d6:c3:23:0a:d8:6f:54:88:
7c:05:d3:5a:cc:af:9e:b9:92:14:6c:de:97:5d:9a:
11:4c:05:82:4f:e7:76:88:9b:e3:e6:72:8e:77:b2:
23:6b:43:04:72:5f:53:39:c7:2e:27:34:a6:42:64:
b3:93:00:36:f3:0b:fe:30:cd:6d:68:18:6a:d9:56:
32:e0:cd:e6:1b:c3:2b:be:a8:3b:e0:ae:fe:24:eb:
f7:5c:9e:c8:a8:a0:4a:de:9e:df:eb:37:d0:06:03:
ac:67:d9:f8:7d:fa:40:e2:bc:99:a1:dd:31:49:e7:
f3:8d:7c:6c:0e:5a:71:54:b8:35:54:d7:e8:72:2d:
f7:c4:3f:4f:f8:51:27:10:24:9c:76:a3:f6:5c:cf:
ed:c7:f2:a0:db:7b:34:66:2b:3b:15:65:ed:f7:ec:
2f:99:9a:0e:7f:3d:8f:d7:46:cf:1d:6d:44:77:59:
c0:f4:e1:d7:3c:00:e1:20:fd:42:73:08:85:82:86:
34:5a:43:34:9a:8a:5e:a8:49:be:08:08:51:c9:cb:
20:4a:6f:6f:b5:43:bd:a0:ca:26:d6:d5:5a:44:e6:
1c:74:13:1d:3b:d5:de:24:b0:68:be:32:a2:73:68:
a1:03:10:43:b6:fa:ec:b1:79:23:67:4b:05:ef:7e:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4C:F2:A6:ED:0D:28:F0:CC:58:F3:68:2A:1C:6B:1D:0C:0B:93:02
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d1:e7:e0:c4:26:08:75:df:4d:9b:be:39:bd:37:90:79:69:
1b:7d:2c:5c:6a:74:87:45:5b:ed:14:6d:6f:52:39:06:35:fe:
27:64:cc:8d:af:0e:53:69:03:47:bc:5d:ff:b8:11:49:d5:0b:
3a:ae:16:d6:f0:d5:06:d3:9a:8d:f0:3e:20:22:60:aa:68:d7:
65:e2:7f:e8:45:90:cf:e5:1b:35:30:01:96:e6:88:0f:88:65:
e2:31:b5:8d:e5:5d:e3:72:90:30:5e:5b:50:1d:c9:17:02:df:
06:55:9d:84:ca:37:ac:b9:01:62:05:e9:c6:91:4e:9b:2b:09:
48:07:ca:d0:a1:13:75:b3:7c:50:db:03:f3:d2:f1:86:e3:ea:
51:d1:09:6c:ff:4b:16:58:31:1e:54:c4:1c:ba:ba:03:a1:cc:
65:f2:4a:e0:fe:3f:bc:0e:1f:6b:b2:9b:20:60:c0:b8:c3:3e:
14:f9:35:a8:59:b8:81:07:ca:eb:6a:62:f2:6e:9e:6b:0c:e9:
7c:b1:36:db:fa:55:5b:d1:00:ac:2d:c6:07:7b:75:13:88:47:
e3:91:4c:a5:fc:00:51:ba:15:d3:b6:aa:d9:ca:96:09:a4:cf:
9e:b9:7c:f7:5d:84:0a:85:b2:67:3f:c0:ae:69:50:1a:4b:88:
8e:ae:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:18 2025 by rpki-client