Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: KAoH38/R2PIFJ8F1hML3OegHnZEtReVh7yGOCyaeUrw=
Subject key identifier: A0:86:C3:71:51:51:1B:12:6E:DA:7B:18:FF:39:99:18:80:43:16:45
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 019A71B808127D1588F4586D1502ADC9F95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: T0BX+ol9b8960MvdymYjrdE0PpjamwtVIIKf3UEywHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:08:12:7d:15:88:f4:58:6d:15:02:ad:c9:f9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=a086c37151511b126eda7b18ff39991880431645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:5c:01:9f:da:12:d6:02:d7:99:c3:e0:6f:
15:02:26:a0:07:f3:4b:24:3a:81:56:53:04:b4:06:
f5:ba:f2:71:20:07:46:65:3d:fa:ff:5e:56:e7:6c:
58:d5:ea:89:2d:21:6b:5b:b9:c9:97:ab:2c:d9:ed:
29:c1:8d:07:68:d2:ae:01:6c:fe:d9:18:c6:da:20:
2d:4e:8e:09:44:33:47:91:17:e0:93:01:9e:4e:88:
26:f5:9a:f4:ef:26:1b:48:3a:d9:90:f2:51:1d:98:
a9:11:f3:29:d9:99:e8:8e:f2:65:d9:15:63:0e:31:
17:0d:65:98:53:09:14:29:94:94:93:43:a5:44:f1:
37:0c:48:19:26:b7:eb:17:78:13:12:e0:bf:02:48:
05:19:73:0d:43:d7:82:aa:c4:dd:aa:a1:e0:14:96:
55:d9:7f:4b:33:ad:be:98:5a:5c:a1:43:b6:1f:70:
bd:91:a6:0f:94:df:5d:a0:c8:00:f9:08:84:8c:7a:
53:74:db:97:0a:8e:56:b4:d2:b5:eb:3a:a9:6d:b4:
8a:1a:53:41:b8:d7:11:17:c1:03:4d:cd:66:c5:21:
63:d4:d3:97:76:be:87:61:d5:2e:fe:de:5a:9f:83:
5d:fc:ec:a5:ad:7e:2f:68:7c:8d:dc:99:ac:48:9e:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:C3:71:51:51:1B:12:6E:DA:7B:18:FF:39:99:18:80:43:16:45
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c5:0d:74:ac:10:ca:8a:9e:83:1d:52:e4:54:53:b5:85:c5:
ef:1c:0f:14:c6:ca:e7:c6:54:38:23:5b:33:12:83:72:2e:40:
77:18:6b:d6:30:bf:ad:19:8c:6b:72:b9:bf:5e:05:ab:4c:b6:
20:5c:37:ad:c7:2f:09:a4:4c:52:88:4a:0b:20:58:e0:62:5d:
2c:1b:65:1c:34:96:0b:61:ad:cd:ef:ee:b8:c8:b1:86:78:66:
52:e3:9f:a8:ca:0b:77:70:19:86:14:5e:15:71:15:41:87:7d:
ae:a2:b2:e5:bd:db:43:91:5d:7d:38:40:96:e8:bf:d2:47:f2:
e2:62:dd:b4:1e:8d:db:e7:b7:14:25:a8:9f:41:d6:f9:65:8f:
59:16:90:2e:66:aa:5e:70:e4:d8:0e:a7:c7:9b:3f:53:1d:e5:
ed:7c:ae:31:1d:fd:35:fa:ba:7b:cf:bc:d9:1a:27:47:4c:22:
ed:92:5d:70:eb:8b:07:49:b9:e2:91:86:76:2a:8a:75:25:86:
06:8a:19:0a:80:12:ca:2f:92:ca:c6:90:22:db:96:02:ae:91:
a2:2c:6e:ce:3c:c9:b4:0c:71:f3:68:f1:cc:ed:ef:7d:9f:ac:
d2:13:2c:85:3d:d7:e4:5f:16:ab:b4:b7:cb:e0:ec:0f:d0:ff:
d7:94:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:02 2025 by rpki-client