Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: SBbJL0xydgUxoAZnasKQfBv2Gre1gqF5R0YNlU4DbSk=
Subject key identifier: C5:72:72:59:E8:55:92:60:FB:B0:0F:CF:AF:7F:7E:95:F8:B5:57:58
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019A71B8134F2C0C79C510C66E9BD7F3EED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: gXQKtVOtWcc0GDT4BOFJnyWs+dEuN2UmdEPqJ6K1ly4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:13:4f:2c:0c:79:c5:10:c6:6e:9b:d7:f3:ee:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=c5727259e8559260fbb00fcfaf7f7e95f8b55758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:9a:5a:5c:c3:fa:95:b2:68:76:9d:eb:16:
b2:3d:3e:1b:96:ef:d1:86:38:43:d3:08:33:6e:8c:
0d:b6:ae:fb:28:87:58:8a:25:02:1f:d0:34:8f:67:
16:c5:a6:a7:72:ac:67:08:61:e0:b1:47:92:76:5d:
26:19:dd:f5:f0:bf:bd:a7:6b:7d:7c:d7:49:53:4d:
cb:55:28:8c:ce:ed:1a:4a:61:c6:22:c6:37:9a:d9:
f1:4f:c1:bc:ca:fc:f0:82:b9:78:a3:a7:5a:f4:00:
a6:cb:4b:38:d7:fe:54:1a:a1:e3:94:51:4a:03:0b:
05:10:b4:d5:df:3a:3b:1a:ee:4f:01:44:90:ba:fe:
08:a4:0b:6e:79:19:de:cb:8a:ba:31:2c:77:53:5e:
b6:f0:22:7f:29:2c:92:28:14:50:33:32:d0:8e:90:
d5:97:1f:62:dd:8d:07:44:95:47:54:ba:bf:64:e7:
fd:76:91:c9:98:66:3c:ad:dc:c2:80:33:7b:cc:97:
e9:fa:36:42:a2:5a:2a:2f:d1:e0:82:ab:92:a2:86:
ed:79:c2:45:bc:df:13:a8:a4:0b:07:3d:47:fb:0c:
fc:2f:96:cf:04:e6:c1:3c:49:02:ba:83:b2:c9:92:
1c:b9:ae:51:05:15:53:ea:d6:11:c7:f7:84:22:31:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:72:59:E8:55:92:60:FB:B0:0F:CF:AF:7F:7E:95:F8:B5:57:58
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d4:b7:3a:24:4d:aa:4c:d8:73:5e:6e:30:5a:5d:3d:0e:1c:
34:83:e1:96:17:2f:8e:92:00:c2:25:43:87:84:47:2c:f4:e7:
5e:17:f5:98:2c:85:a6:5d:38:c4:8e:c9:3f:8b:53:33:e2:80:
47:87:f2:85:19:21:2f:50:65:2a:05:fa:14:fa:d1:08:7d:26:
2c:df:6f:2c:7d:57:be:9b:6a:8d:37:ac:56:ad:2d:54:55:40:
44:5b:d1:dd:f1:11:67:be:9d:f5:fd:37:59:be:8d:b7:93:95:
1b:37:18:32:f5:69:0a:ad:42:92:2c:65:85:77:98:da:a1:08:
db:7d:e8:e5:c1:1e:3e:16:ea:84:a4:64:7b:53:33:c5:a2:14:
85:5e:d4:69:46:57:6d:de:5b:a5:73:27:6d:87:e2:5f:ec:67:
29:ca:18:4d:d8:07:45:1e:2d:30:69:96:1a:f2:c0:a6:66:57:
21:49:f5:c3:ef:bc:5b:40:84:de:c1:75:5e:da:45:e7:ec:a3:
1a:7e:d3:e9:18:f7:81:e0:31:ba:eb:a4:80:7d:e2:a3:44:7c:
91:76:e2:5a:73:29:05:4e:bc:45:f7:ab:b3:ac:e7:7f:4a:a1:
73:2f:cb:f3:e0:51:7d:7f:ea:71:1b:d3:09:08:d0:48:68:13:
fb:55:f1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:11 2025 by rpki-client