Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: EzbmwuWLUnhdkcUT9SoFMO6TEsxCtmmotI5/5oaDrQs=
Subject key identifier: F7:7D:F9:26:37:D5:E4:A5:9F:18:35:1C:7A:E4:C6:76:DF:90:D4:E0
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 019A706E43C5AFB2B1EFED75672B5877693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 12C7
Signing time: Tue 11 Nov 2025 01:01:05 +0000
Manifest this update: Tue 11 Nov 2025 01:01:05 +0000
Manifest next update: Wed 12 Nov 2025 01:01:05 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: CCTO/bXnGMHyEb6rXGJd/y8/HFQSUF5FaqcvarwgTd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:43:c5:af:b2:b1:ef:ed:75:67:2b:58:77:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Nov 11 01:01:05 2025 GMT
Not After : Nov 12 01:01:05 2025 GMT
Subject: CN=f77df92637d5e4a59f18351c7ae4c676df90d4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:cd:d8:81:7d:c8:83:ee:f6:e2:c8:93:8c:
db:60:3a:37:de:42:54:59:a2:ce:ca:c6:67:f7:74:
3d:9b:95:f6:27:44:3c:78:15:b5:4b:03:36:55:af:
5b:4e:ed:fe:18:04:1b:a3:17:cd:6e:3e:a0:d3:7a:
2d:d0:4e:55:c1:68:84:58:b5:bd:6f:26:d7:bd:1e:
26:e3:6f:0c:bf:0f:8f:1b:0e:33:5a:09:c2:97:bb:
27:79:34:21:a7:e5:94:7d:55:da:89:3c:ab:8b:81:
60:ec:9f:ce:ff:88:34:86:a0:85:44:e5:77:69:be:
b8:fd:83:83:e5:86:56:dd:b6:bc:fa:dc:37:cd:33:
d3:62:15:61:53:45:b2:dc:66:c8:84:cd:cc:69:9c:
d0:7a:ee:32:fc:e5:2d:0f:15:89:51:7c:b9:40:ea:
39:80:12:46:da:f1:1c:25:0f:d3:ec:97:6d:56:7a:
84:10:56:89:d7:f2:88:1e:36:c0:a0:fc:2f:95:dc:
3f:5b:4c:b2:78:4a:59:46:35:52:38:f6:f9:50:26:
0a:b5:16:a4:14:c9:91:03:a3:08:f1:3c:05:9a:74:
d4:55:c8:0d:f2:a6:ba:00:36:1d:2b:b3:4d:a1:17:
21:f3:b9:76:c4:61:d4:2c:ef:1b:7e:7d:aa:85:ab:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:F9:26:37:D5:E4:A5:9F:18:35:1C:7A:E4:C6:76:DF:90:D4:E0
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ec:a8:22:2b:b9:c9:dc:0b:35:bc:9c:a8:8d:59:9e:57:42:
8c:5c:6a:35:2b:61:e7:2d:16:64:07:f9:3d:cf:32:0f:5a:b4:
a2:b6:48:ac:b1:cd:02:b9:bb:d7:ed:72:64:b6:07:8a:0b:99:
65:26:ed:12:97:a5:a4:38:7c:f1:89:04:5c:63:95:b6:6a:1b:
43:f8:50:35:e2:d3:a6:a4:3c:d5:3b:ce:ff:db:4a:c0:87:58:
92:8f:f6:40:76:e1:29:ca:2b:86:01:f2:d7:22:0d:f8:47:48:
f0:62:de:76:53:25:0f:64:11:be:9b:95:fc:cd:f6:61:2c:12:
fb:ea:b3:f5:ed:48:f0:6e:ff:22:85:d8:43:fa:6f:45:af:6a:
a2:c4:90:2f:7b:a8:cd:c3:53:8a:d6:34:30:54:66:ff:f6:8b:
03:50:2f:51:13:fd:b8:87:3c:51:4a:32:fd:b8:4a:fd:a1:8a:
db:be:27:ce:7a:2b:e2:11:52:d5:d7:58:80:42:00:36:86:c4:
ee:fe:23:48:39:da:e9:3e:df:97:d3:7c:21:f7:de:f4:95:24:
b2:59:bf:bb:b1:b9:19:66:1c:b0:fd:de:e2:27:99:02:09:b7:
60:7d:4c:8c:7b:59:e0:75:8a:21:a4:9a:06:22:62:3f:8f:ac:
11:b0:72:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbkPFr7Kx7+11ZytYd2k6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDJiMmY1NGNhMTcxOGNmZDM4MjkzMTExNDE1NjY2Y2Mz
NGUyNjIwHhcNMjUxMTExMDEwMTA1WhcNMjUxMTEyMDEwMTA1WjAzMTEwLwYDVQQD
EyhmNzdkZjkyNjM3ZDVlNGE1OWYxODM1MWM3YWU0YzY3NmRmOTBkNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgrN2IF9yIPu9uLIk4zbYDo33kJU
WaLOysZn93Q9m5X2J0Q8eBW1SwM2Va9bTu3+GAQboxfNbj6g03ot0E5VwWiEWLW9
bybXvR4m428Mvw+PGw4zWgnCl7sneTQhp+WUfVXaiTyri4Fg7J/O/4g0hqCFROV3
ab64/YOD5YZW3ba8+tw3zTPTYhVhU0Wy3GbIhM3MaZzQeu4y/OUtDxWJUXy5QOo5
gBJG2vEcJQ/T7JdtVnqEEFaJ1/KIHjbAoPwvldw/W0yyeEpZRjVSOPb5UCYKtRak
FMmRA6MI8TwFmnTUVcgN8qa6ADYdK7NNoRch87l2xGHULO8bfn2qhatKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd9+SY31eSlnxg1HHrkxnbfkNTgMB8GA1UdIwQY
MBaAFGXSsvVMoXGM/TgpMRFBVmbMNOJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmIt
ZWY2NWRjYmM3YzA5LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmItZWY2NWRjYmM3YzA5
LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+yoIiu5
ydwLNbycqI1ZnldCjFxqNSth5y0WZAf5Pc8yD1q0orZIrLHNArm71+1yZLYHiguZ
ZSbtEpelpDh88YkEXGOVtmobQ/hQNeLTpqQ81TvO/9tKwIdYko/2QHbhKcorhgHy
1yIN+EdI8GLedlMlD2QRvpuV/M32YSwS++qz9e1I8G7/IoXYQ/pvRa9qosSQL3uo
zcNTitY0MFRm//aLA1AvURP9uIc8UUoy/bhK/aGK274nznor4hFS1ddYgEIANobE
7v4jSDna6T7fl9N8Iffe9JUkslm/u7G5GWYcsP3e4ieZAgm3YH1MjHtZ4HWKIaSa
BiJiP4+sEbByyA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:21 2025 by rpki-client