Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: JDGHw7H1nc5M6r5eIwLZ31G4Sx67zRNcKU0W1keNXnQ=
Subject key identifier: FF:FA:64:3B:B3:89:41:ED:64:CC:40:CD:BA:0E:D4:DB:6A:AE:49:74
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019A71B879C5577F11F1AC16D4DEA9638CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 08CC
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: uTwwxCcUFCjv7Ur11jHYe5pPMUTSvQDv94W4M5we6Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:79:c5:57:7f:11:f1:ac:16:d4:de:a9:63:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=fffa643bb38941ed64cc40cdba0ed4db6aae4974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:c2:f7:32:4f:a3:5c:f3:ef:ab:28:1a:2d:
9e:24:ec:d2:9b:ea:6f:61:3e:84:64:68:7d:4a:6f:
43:09:0e:83:c2:07:cf:0f:4a:e0:81:fa:ea:a3:e4:
e0:1e:57:9e:b7:0b:3c:fd:f2:45:a8:94:00:ce:e6:
f3:75:3c:86:0d:d1:f5:cb:3e:12:14:21:dd:d2:af:
6d:d4:66:e8:4c:4c:71:b9:79:5b:a8:77:4e:be:68:
4e:33:de:bd:e8:e0:d0:d0:7e:0d:65:3a:f8:6e:6b:
b9:83:23:a8:3c:fb:b6:86:6b:a7:fd:2c:f8:5f:9c:
b4:bc:dc:39:01:ad:ed:a0:97:7b:29:69:7c:8c:16:
13:e9:84:b0:e1:eb:35:e2:e1:bc:1d:31:7d:26:08:
49:62:bf:e2:e8:b1:30:c9:81:3d:85:c8:77:29:36:
4b:77:9c:c4:c6:1b:5e:26:75:b5:8e:64:91:b0:bc:
12:76:94:9f:d0:f8:b7:98:4e:68:a8:fa:a9:21:16:
ca:c4:f8:01:49:16:70:c9:ee:a1:85:b2:02:2e:02:
32:08:08:c7:38:40:a0:99:08:56:b7:ba:83:55:b3:
ac:fb:e4:f2:f7:12:13:cd:6e:07:8d:37:1c:21:c8:
45:1c:40:3e:8b:da:05:0c:ba:82:5a:ff:f0:23:51:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:64:3B:B3:89:41:ED:64:CC:40:CD:BA:0E:D4:DB:6A:AE:49:74
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b0:ac:5e:a6:e0:b4:10:17:82:4f:c0:dd:04:57:bd:90:0e:
98:3b:79:6e:8a:11:26:ae:6b:8b:c0:6b:b9:54:b6:94:27:f8:
79:9e:5d:a6:47:29:e4:3f:7a:dc:9e:26:50:ab:38:40:9b:31:
fa:5a:39:d4:58:c5:b6:30:74:9c:cb:1b:af:89:93:fb:f2:c5:
8a:3b:7a:9a:ea:0b:93:b8:3b:2a:43:ea:4b:21:46:51:63:10:
03:65:b1:15:e7:de:07:f5:af:41:eb:bd:36:f4:65:95:d9:e3:
06:8b:f6:10:a1:42:ed:05:d2:42:77:ff:d7:91:e6:3d:ff:35:
89:83:cf:a9:f1:88:60:06:46:a1:cb:1d:bd:66:7d:fd:11:a4:
e8:a9:20:6b:e5:a3:ec:bf:4b:ed:fc:92:70:25:44:34:43:e0:
f5:f5:fa:f2:7b:2b:4f:8c:f4:74:63:a3:c7:ca:88:6e:e3:66:
ee:2f:10:49:14:47:a2:07:8b:be:f6:e2:7f:3d:9b:5e:49:e3:
56:47:be:b0:3d:8b:b0:9a:a2:c2:03:e7:6f:95:75:03:9e:03:
77:5d:a3:1f:67:e2:62:62:34:90:2b:d4:1f:12:81:4a:05:9a:
be:d1:02:56:e8:61:31:a4:1d:cf:58:2e:93:28:9f:f1:90:30:
79:93:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:57 2025 by rpki-client