Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: YzC0ZMONrbv96uZNASeHQ7FjtYNqTHYTFx/Z+7tpfN4=
Subject key identifier: 5D:2F:C0:31:A1:5B:B7:C7:EC:46:D8:E5:FE:9F:EB:F6:26:ED:41:0B
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019A7112C152D71DB74F846BBD814D407094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 11D1
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: PgfOd3BqXT1/L3jyOzVEs8lvCiewAesKKjL4Gr54d3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c1:52:d7:1d:b7:4f:84:6b:bd:81:4d:40:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=5d2fc031a15bb7c7ec46d8e5fe9febf626ed410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:21:0f:21:9d:49:b0:90:d9:2a:d5:76:90:
9a:73:c2:33:b3:15:26:66:c2:5e:f5:72:d7:e9:64:
52:bf:7e:3a:7b:0d:fc:63:1b:e6:cb:7b:df:74:02:
d4:0f:9c:8c:31:d4:5d:a9:67:54:1f:e0:74:30:28:
5b:58:ea:82:f7:67:2b:4b:79:18:1e:1a:cb:cc:2c:
f9:67:f2:3e:ba:18:f0:5d:47:20:14:c6:0e:13:09:
10:de:8e:ad:84:1e:b6:bf:49:e6:a9:31:2f:9a:d7:
b4:b7:25:17:0e:47:88:09:94:b6:fc:96:16:13:7e:
ef:d0:af:01:27:72:2c:09:a7:d4:47:7a:bb:07:42:
d9:07:2a:3e:aa:86:54:ff:0c:ee:d8:ae:7a:8f:30:
da:ca:df:d5:18:53:9b:36:d2:6e:17:c0:d6:1b:a4:
94:ba:90:5c:d5:1f:93:d2:29:05:11:99:70:37:25:
7b:9a:38:b4:cd:41:81:4b:8e:3b:7c:47:7f:c7:bc:
bb:7a:38:27:9d:2a:92:9c:30:f4:13:d7:d8:01:1a:
fd:cc:fa:26:53:df:c1:0c:f1:db:d6:6b:bb:95:e9:
f2:8e:a5:60:f7:a8:b1:bb:dd:c4:c5:ba:25:37:5e:
e4:af:1a:b9:30:dc:8a:7c:80:43:c4:94:a1:68:61:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:C0:31:A1:5B:B7:C7:EC:46:D8:E5:FE:9F:EB:F6:26:ED:41:0B
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4c:a9:a2:8e:0c:70:fe:2e:40:a0:2f:78:aa:60:02:d7:fe:
70:c7:7f:54:e9:f9:d7:76:a8:b7:df:95:9c:7b:fa:11:65:81:
2d:27:14:ef:86:99:e3:bd:42:35:ae:9d:56:6c:b2:12:c1:a9:
cd:62:9d:6d:fc:1f:61:d0:44:db:bf:9e:18:40:b4:45:ed:17:
97:86:15:e6:9d:d3:bb:1e:9f:24:18:c2:e0:8f:07:09:04:55:
29:7a:54:39:30:f1:4c:57:27:28:f6:2a:46:43:99:08:9e:5a:
a6:61:9c:f2:0f:d6:9a:6e:2f:34:ef:8e:f1:56:6d:a6:08:61:
51:44:6e:a5:ea:a2:8f:14:e8:53:68:2b:d9:9b:43:fb:5a:6a:
69:2a:dc:e8:3f:a8:a6:e8:c1:68:88:b6:d3:1d:b2:33:86:93:
d4:25:1c:9c:96:ae:40:b1:1f:aa:5e:84:1d:bb:2c:c7:d6:65:
ac:04:cc:0d:7a:b2:b6:c4:b3:e1:00:22:98:b9:a3:25:c9:b3:
24:b4:e4:a3:c2:7e:33:6d:bb:de:e7:ed:6c:15:ed:2b:b3:8b:
13:28:38:c7:46:16:92:75:3f:8a:f9:67:58:eb:1b:ce:d6:aa:
0a:cc:27:e2:e1:58:e0:1d:45:b5:e4:61:59:9c:ef:7d:2f:6a:
71:c1:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:24 2025 by rpki-client