Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: WykJEc1TQ5hY5m2zzXipTY057Ya/0VPHJBnzL+oX9KE=
Subject key identifier: 61:B5:1C:06:5F:9E:29:4D:49:AB:2C:73:2E:07:13:BF:D0:7D:1D:EE
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 019A71B76D5D1B107CC513F178E4B0200DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 08AD
Signing time: Tue 11 Nov 2025 07:00:37 +0000
Manifest this update: Tue 11 Nov 2025 07:00:37 +0000
Manifest next update: Wed 12 Nov 2025 07:00:37 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: MrESikHo97H9MqoJsfwjL92MlFHb2OdqWlTTb9RWXZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6d:5d:1b:10:7c:c5:13:f1:78:e4:b0:20:0d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Nov 11 07:00:37 2025 GMT
Not After : Nov 12 07:00:37 2025 GMT
Subject: CN=61b51c065f9e294d49ab2c732e0713bfd07d1dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cf:81:05:c3:01:9c:96:b3:ae:65:11:0a:5b:
a3:50:19:a7:54:e0:40:32:9a:24:5e:1c:ae:d1:27:
9f:b8:bd:9a:3e:e7:8c:b4:f6:bb:3c:76:3c:99:dc:
fe:63:a6:4d:28:11:12:df:40:b7:14:be:35:11:a9:
3f:63:a3:f8:dd:9a:14:82:e1:9d:8e:c6:9f:ad:ee:
f2:23:ee:4f:89:c8:b0:42:72:d4:6f:21:a7:7a:9c:
7b:1d:fd:63:bd:9a:0d:70:39:c1:d3:66:5f:ca:b2:
91:eb:fa:53:d0:cf:d2:6d:7f:82:f0:79:f1:48:b5:
97:6d:c0:b6:94:4f:17:f9:f9:ee:d0:42:11:7c:2a:
3d:c7:33:46:71:9a:fa:59:4e:cb:bc:cc:48:c7:20:
41:57:91:ab:5a:eb:1d:28:99:88:31:84:dc:b6:ef:
b8:09:5c:35:c8:6e:94:47:30:c6:3f:fd:95:f9:12:
08:d2:21:69:98:25:62:0b:de:4b:64:c1:90:3e:89:
73:ec:64:50:1a:35:33:da:ea:fa:25:28:84:8a:1a:
ba:2c:7a:77:b8:d9:0c:91:e4:5e:58:04:c6:7f:78:
57:3e:7a:82:bf:7b:d3:5a:fd:87:17:17:80:c9:f3:
66:8c:17:3a:ad:ad:c2:84:e8:26:46:67:81:3d:c5:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:1C:06:5F:9E:29:4D:49:AB:2C:73:2E:07:13:BF:D0:7D:1D:EE
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:40:d6:f4:67:d1:f0:ca:37:9f:01:42:38:06:da:fe:48:
ae:83:77:55:db:9c:4d:dc:5f:76:0e:34:1e:cc:e4:ec:73:26:
4b:ec:4e:94:bd:1e:90:fa:e0:0a:ee:1d:ec:2a:2b:99:62:a8:
56:65:e0:b4:a0:2b:a0:c7:85:29:25:ba:9c:a3:eb:c0:16:13:
d3:37:2a:54:07:fa:9d:32:7b:14:3b:41:23:da:d1:4d:85:ab:
68:73:5b:56:73:aa:d4:44:39:cd:37:4d:89:97:fe:b1:75:58:
37:c1:5b:cb:37:da:21:0c:ed:a0:83:95:c5:f2:b1:37:f6:6e:
6e:3b:c2:92:82:99:d3:25:69:b8:ee:cf:14:e0:7f:68:b4:c5:
7a:ed:ec:bf:69:67:d5:9b:69:3a:6f:e5:c5:e9:ee:7a:e2:51:
ba:e0:87:14:dc:e6:9c:ae:4b:d6:38:74:4f:bc:d8:db:4b:b6:
a8:ac:ba:d6:5b:48:9c:8f:2c:7a:62:ff:83:a6:7d:19:e6:f2:
13:9d:e1:8e:e2:85:46:b8:11:8c:ee:a4:d9:91:55:45:b3:43:
41:21:ad:44:c7:01:72:81:a2:fa:59:65:7a:a6:32:4b:57:2e:
87:f8:e9:db:69:a8:4c:4d:db:4c:08:3d:ba:57:a0:27:47:8b:
ba:88:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:32 2025 by rpki-client