Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: IW+trpEXtXm7y0/m5ZaKxvu/yk0zRqKBuP6y6lohli0=
Subject key identifier: 39:BF:5D:3E:15:2B:48:37:C9:BB:B8:81:F9:16:0B:D6:36:03:53:70
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 019A7225EAD39FAC3B0B1A73FEF76A5787FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 1094
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: l6K0OBa7HnplyYvKHhHqXrRSS4USC6Gi+FjvYm1PKqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ea:d3:9f:ac:3b:0b:1a:73:fe:f7:6a:57:87:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=39bf5d3e152b4837c9bbb881f9160bd636035370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:09:39:c6:47:a7:1f:d3:2e:b6:a3:32:3d:
92:a5:1c:d5:34:37:ae:e2:68:74:92:41:84:ae:6b:
42:ec:92:3f:ec:ed:3e:ea:f1:a6:38:dd:0b:76:2b:
8b:18:da:f0:e0:b9:59:b3:67:b8:ff:cb:a0:ed:5e:
53:41:5f:18:ce:01:f4:d9:44:1f:e7:20:44:e4:a5:
0c:69:2d:ce:88:e8:61:ac:9d:d8:28:53:ab:76:16:
00:06:7b:52:6a:89:b3:22:84:5b:d7:76:94:d1:26:
fc:7a:61:9f:c3:ba:d7:ad:05:ac:84:1e:a8:43:14:
fe:a4:c9:83:9a:c2:21:78:1c:75:18:0f:3d:86:d2:
29:b2:ca:ed:04:ac:cc:66:cc:c2:e9:5b:2e:33:65:
a8:c0:37:73:49:2e:c1:7b:e4:81:b6:c8:c9:fc:7d:
5b:84:bf:e8:4e:3a:25:ed:36:70:cf:bc:a2:b4:8d:
99:3f:84:92:ae:a6:29:d7:71:7d:51:88:9e:2a:ba:
7b:ac:c2:78:b3:b7:63:68:82:05:5a:16:50:d3:a2:
31:6a:84:ab:d2:43:6a:58:ff:01:e2:9a:90:be:2e:
73:c4:6e:cd:8a:41:66:36:b4:7e:c6:9c:e9:0a:79:
8b:63:2e:8f:68:d4:6a:34:9b:f2:d9:99:c8:a6:08:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BF:5D:3E:15:2B:48:37:C9:BB:B8:81:F9:16:0B:D6:36:03:53:70
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2e:ad:ce:62:75:d3:c4:d3:19:97:60:bf:57:ba:13:d9:24:
24:01:f6:cd:d2:29:23:ae:93:29:7c:e6:39:6f:e7:3c:51:1c:
b9:67:dd:3f:54:26:35:c6:04:4b:fc:61:3a:d6:90:39:98:0f:
2e:5a:eb:d1:b8:e0:68:a1:ce:b3:93:57:85:8c:3c:78:78:e2:
68:ed:55:b3:68:7e:f1:7d:4e:9e:28:15:ae:9a:94:14:99:4e:
1b:df:87:1b:d3:ae:f8:c5:25:99:b4:12:d6:7f:98:b4:c1:e2:
5e:50:c6:24:fe:0d:32:17:be:f7:05:b6:24:be:39:f2:b8:28:
91:fc:88:d5:08:b9:e2:34:6e:1f:6d:c6:26:67:c4:19:2f:2a:
db:94:29:4f:7c:cd:8f:7a:57:3e:11:94:d8:0d:f9:22:77:61:
9c:90:ab:f7:e6:14:b4:6a:12:21:3b:af:a0:fe:0c:92:34:61:
af:7e:ad:bf:55:46:b1:88:e7:c8:62:42:0a:6c:0f:ea:78:b3:
fc:ec:50:3e:5f:a1:6f:43:58:f9:37:1d:0f:82:9a:24:6b:30:
de:bd:3d:bb:25:c9:14:d9:67:8e:d0:d6:6f:f4:a1:14:70:e8:
0f:7d:18:91:96:b7:b6:85:77:7b:f8:04:15:45:20:b6:16:60:
0e:a4:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:48 2025 by rpki-client