Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: OHG99hZ4qEEspBp5KrUK7pV+SREM6KsHWiR8ZP8Z8/0=
Subject key identifier: C9:00:37:22:5F:79:07:1F:D5:59:28:53:93:57:82:A2:45:53:09:22
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 019A71135053AE7AA076CCE443BFF5585342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0B6C
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: U8785TIqgSQ5SD5hhirOT2sX8Q4tInmIkP1jdnzEtZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:50:53:ae:7a:a0:76:cc:e4:43:bf:f5:58:53:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=c90037225f79071fd5592853935782a245530922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:b6:18:04:e6:aa:13:75:be:b4:d2:93:6e:
d1:88:e4:eb:c2:d5:9d:4a:04:df:a3:a4:c3:61:22:
96:70:ba:2e:77:73:65:47:ae:7e:f2:10:0f:1b:1d:
9f:02:bc:59:19:fb:38:e4:40:55:f2:cf:08:67:4c:
04:ba:3f:d8:3b:8e:99:72:90:f1:03:f4:38:b1:25:
c6:59:1b:d9:77:76:75:4b:8b:c0:e5:29:db:77:b1:
1e:20:8c:c3:ee:4a:89:24:42:10:1f:e6:b6:60:50:
0a:2b:b4:3a:e5:f7:db:40:20:0a:d3:6a:c6:25:af:
f7:f8:03:00:f9:40:6d:03:6b:fb:79:22:10:37:4a:
b1:57:28:5e:15:02:ce:5d:e3:2c:4b:80:93:27:1f:
a0:48:aa:f9:17:84:14:61:71:a1:38:e4:94:a8:77:
11:7e:1a:66:4b:13:55:07:63:c7:bf:09:19:c0:4f:
06:c4:8c:c8:8a:38:a1:41:95:2a:99:55:88:b0:be:
9e:ab:ff:f3:fd:15:5b:f1:dc:9d:83:46:36:2c:c6:
7d:cc:ba:4b:44:07:50:46:83:73:d9:c8:0f:a4:7e:
12:17:6d:ab:7c:e6:52:80:3e:00:99:fb:b1:fb:1c:
f1:34:04:99:94:8a:07:9a:bd:2b:96:db:d8:a5:f1:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:37:22:5F:79:07:1F:D5:59:28:53:93:57:82:A2:45:53:09:22
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:09:00:22:0c:c9:eb:19:de:16:de:2e:13:4a:02:8a:e9:66:
9b:c5:06:db:1c:ea:0e:73:99:96:7b:96:71:86:d5:bc:10:27:
54:3f:f3:a7:ad:58:32:20:27:f2:38:2c:f9:33:f7:94:a6:b4:
99:a2:bb:ab:69:e9:89:1a:58:9b:6d:ae:5d:37:6e:e6:18:37:
b1:e2:63:00:50:0d:75:98:57:fa:bb:71:23:aa:7a:a0:96:01:
fd:a0:22:cc:9e:df:1b:ba:ad:56:b0:54:5b:fe:e2:ee:0c:c8:
57:ee:a5:26:d2:fe:39:f3:aa:8f:06:98:2f:04:97:45:51:aa:
50:e1:f1:f9:19:3e:8c:56:f1:b8:f0:20:18:b4:28:26:b5:f8:
fe:54:3c:53:12:88:fd:94:b1:ae:49:23:88:f2:be:98:af:28:
0d:15:e8:bf:e9:6d:d7:ed:5e:95:b8:9c:76:1f:49:ff:09:d9:
5d:bb:07:a8:ee:ab:94:15:61:ed:fe:fd:f6:fd:ba:99:81:77:
7d:89:c9:98:aa:ff:2f:ce:46:b1:3e:a1:2e:5b:f4:9e:59:43:
25:6d:7f:e7:4b:eb:3d:63:9c:dd:a2:b7:13:42:8a:43:3f:69:
8d:8b:32:2a:4c:e7:eb:e9:f9:51:99:d5:d0:74:38:ec:83:5a:
01:68:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:18 2025 by rpki-client