Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: 5g2r1eqjd28DV4DoC5PO/FIAcnQK4fb34jnI8gowGHk=
Subject key identifier: C8:0B:80:5A:51:7A:03:88:1E:93:8D:80:73:BF:23:D0:AE:26:88:99
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 019A7225F798F5163475872ED5E32C45F68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 06C9
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: k837jA8ahZUmL5eByQJGm0vRzfbFBUGGd6hx9ES5/ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f7:98:f5:16:34:75:87:2e:d5:e3:2c:45:f6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=c80b805a517a03881e938d8073bf23d0ae268899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:c2:ea:5b:f9:92:46:d7:79:a1:98:29:84:
cb:23:88:8b:3b:cb:75:a2:e6:51:f7:dc:95:8e:3a:
a0:c5:d1:2e:b7:6d:10:3b:af:f0:92:93:16:8e:05:
f7:d9:3c:f5:64:46:92:18:74:f4:59:21:c4:38:7d:
14:44:2f:25:bd:6e:48:05:85:e7:98:7a:ca:a8:26:
87:4a:d8:f8:ff:ea:45:b5:aa:08:3d:3c:80:5f:23:
b0:24:91:b9:d6:d7:e4:fa:83:8f:60:1b:d6:07:32:
3e:2b:99:25:f5:64:e6:7d:de:f4:1b:b6:c9:64:5e:
c3:15:6f:c1:a5:47:41:c7:3f:99:ae:2b:24:da:46:
19:c8:c2:fb:b5:c8:28:82:aa:83:05:d6:27:fd:81:
27:8c:a9:34:6d:a7:a9:e5:51:35:7b:c8:81:b2:e2:
ed:b6:60:b8:1c:98:f7:11:da:51:46:5f:b2:54:90:
b7:95:48:0c:b4:a4:e3:0a:40:f9:95:60:c6:4a:25:
ae:44:e3:f5:24:01:b6:43:83:34:49:5e:bf:b1:ec:
a7:6d:29:77:cc:ff:82:79:aa:c5:5e:6f:bf:f8:54:
ff:e1:fb:6d:d7:ea:cf:b9:8d:f5:10:ab:c7:f7:1a:
fa:8e:4f:b5:89:6d:a1:05:4c:80:5f:aa:80:6d:d6:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0B:80:5A:51:7A:03:88:1E:93:8D:80:73:BF:23:D0:AE:26:88:99
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:77:e3:f3:d3:f8:4a:2c:d1:a6:3f:55:f1:e0:6a:f4:d0:a7:
07:c4:fe:5d:f1:1b:67:17:6f:cb:f7:4d:0b:a8:98:0f:f6:e5:
a2:6f:b2:9f:c5:41:58:91:9c:23:77:de:eb:39:60:12:65:c2:
6c:6f:80:cd:69:cc:d7:9e:b1:2a:95:52:9d:4e:ff:1e:56:f6:
a8:84:6e:d3:f5:09:6b:48:b3:bf:83:87:9b:dd:a3:ea:ee:3c:
ce:d0:b3:8b:45:7e:75:0f:30:02:31:1f:c8:34:0f:d7:51:8d:
1e:ab:04:88:f6:9a:ff:8e:13:c4:80:34:3e:eb:85:c2:39:e3:
55:79:58:26:62:b6:68:22:da:92:2e:cb:8a:99:17:4f:8c:57:
29:fb:93:a5:57:3a:60:3e:74:e1:31:89:c5:e1:85:df:8b:87:
25:a1:f4:8c:d8:72:67:2e:14:44:00:e5:0f:cd:06:16:f8:ff:
7b:98:e9:5e:e4:cb:d7:54:da:4e:9d:c3:2f:99:0e:6b:63:80:
61:e5:cd:82:6a:37:89:ff:f2:6d:fe:25:eb:38:f9:97:57:3a:
16:00:3e:af:ac:83:44:fd:98:aa:fd:5d:be:68:6c:73:2e:1e:
7f:e9:54:ff:30:9b:f4:16:71:dd:5b:22:a3:4c:f9:93:a1:cd:
2f:0f:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:29 2025 by rpki-client