Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: VKH1tK6tkLROiZ0DwbpJwo+3d8IffhTfANmJN70onJs=
Subject key identifier: 03:47:94:C5:BF:BF:99:BC:6E:28:8B:33:4D:AC:61:B5:67:61:47:4B
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 019A71B8298F1480A1DD9D2F630722414129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 0518
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: l+pOEx8LIxauGriDpC6XKvhNmU4wRlU+uR6vpeX9V7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:29:8f:14:80:a1:dd:9d:2f:63:07:22:41:41:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=034794c5bfbf99bc6e288b334dac61b56761474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:f5:b8:54:3e:62:3a:5e:41:b4:02:e8:84:
7b:a2:9d:ed:44:de:2c:b0:fe:e5:ac:c3:68:22:58:
0e:36:77:86:d4:02:8a:5b:93:c2:82:40:92:bb:09:
90:5b:ab:a5:86:81:57:c6:0b:03:67:55:f2:01:d2:
13:db:73:25:45:ad:b3:ff:09:31:63:86:f9:d0:1c:
62:a2:9d:da:71:2f:fe:2d:ad:ee:b2:e0:3d:44:ca:
a7:f6:43:7f:f6:b6:6a:5a:4a:10:6d:20:52:19:0d:
ef:9d:33:6e:ec:53:8e:ad:c6:7a:f1:0c:35:3a:9d:
ce:b0:8f:71:34:24:67:87:20:83:26:49:5a:9b:69:
4b:43:8f:6b:27:b2:df:f3:8f:3c:ce:6d:d9:45:7f:
27:46:91:c4:e0:21:c9:08:5c:16:d5:a6:e2:09:c4:
f2:5d:54:66:63:55:cc:16:db:92:00:4b:5b:5e:2a:
a5:06:af:db:5d:b2:0b:d0:05:03:b7:f3:33:1f:4a:
6a:64:dd:9d:c3:cb:73:0f:11:26:76:af:ac:a5:b7:
2c:a2:93:8f:ef:af:57:89:d5:d1:d6:b7:a8:2c:88:
55:e3:de:6a:d6:af:1d:e9:d5:1e:41:0e:ce:ae:70:
07:6f:92:0b:fd:37:8f:84:c7:ed:72:e6:bd:13:4c:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:94:C5:BF:BF:99:BC:6E:28:8B:33:4D:AC:61:B5:67:61:47:4B
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:59:1a:05:e0:84:a6:ad:aa:e4:fc:71:e1:bb:db:55:8a:
c6:dc:45:39:1f:ee:d3:4f:49:36:37:90:a8:cf:23:53:85:d9:
b8:5b:41:71:0b:47:85:48:fd:a3:82:03:38:98:30:70:d4:d7:
d8:e7:26:1d:f7:52:8c:a1:f6:de:ff:00:69:de:99:66:34:71:
97:c9:4e:4d:6d:ca:58:b2:1d:64:82:f5:00:d1:3a:ca:18:cd:
59:6b:13:89:a8:8d:07:d3:67:c1:e1:17:f8:92:ea:2d:9c:a3:
da:c3:c0:ff:0f:91:28:26:95:2a:30:a6:e6:e9:1c:cd:fc:9f:
aa:2c:7a:79:6b:9e:e9:ac:38:34:3e:6b:bd:78:81:64:cf:ac:
27:05:3b:0e:54:7b:14:a1:00:17:8c:13:d4:d6:d2:59:db:22:
cb:ba:0e:91:42:bc:f9:93:1d:9f:12:4c:f1:38:be:c7:9a:86:
dd:c5:22:f1:60:86:5f:87:62:bc:b1:15:47:b9:e0:16:aa:a4:
6b:6e:27:bb:bb:a0:93:11:aa:32:0d:03:14:af:a5:1b:4b:99:
3d:24:77:78:41:9e:bb:cf:4f:0b:6e:41:9c:35:db:78:b3:0f:
d4:cb:8d:e6:93:f7:18:d9:83:6f:e7:00:42:67:bd:6e:16:de:
44:d6:5b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:30 2025 by rpki-client