Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
File: zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft (raw, json)
Hash identifier: AFMwS1C96KcUse5YGbd/5PVDpunAoWXloTJ4q+Qpit0=
Subject key identifier: 5F:B9:C9:99:AC:D4:23:33:69:3B:06:7D:16:02:4F:2B:B5:18:67:88
Authority key identifier: CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
Certificate issuer: /CN=cda054474fafd90b0ea47c55765bbe6f37637531
Certificate serial: 019A7149BF24D58CFD703374E3D63A85A3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl (hash: KYl7In04Cpe3D4TwkuBNHJwgRiS8zlmzofyNmogbcs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bf:24:d5:8c:fd:70:33:74:e3:d6:3a:85:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda054474fafd90b0ea47c55765bbe6f37637531
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=5fb9c999acd42333693b067d16024f2bb5186788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:05:58:c6:7a:d0:dc:68:6c:bf:cc:04:da:
8b:f1:ce:4a:20:59:67:5c:ef:24:2f:02:c5:94:82:
4a:6d:3b:ab:18:4f:05:2b:d4:9e:e2:ef:25:30:3d:
41:e0:19:a7:cc:f1:d0:20:5d:df:2e:ad:1c:47:36:
58:11:4b:b1:ad:23:9d:58:97:3c:86:3c:b4:7f:71:
a8:dc:19:ed:a3:fb:3e:df:1d:fc:1f:c5:45:91:da:
46:3a:8b:ff:c0:3b:c5:7c:f6:90:b3:94:3b:0d:8d:
3c:3b:db:79:e5:7b:fd:bc:5b:dc:e3:e7:22:76:eb:
aa:1b:c0:89:0f:f1:ab:19:10:11:c6:a5:d8:e1:6b:
89:3f:28:54:02:b6:e2:81:d4:91:79:f4:4b:d6:8f:
fb:56:d7:c2:10:e9:04:85:80:73:ea:df:02:b2:ee:
cb:06:5b:75:8e:42:7a:0b:bb:44:50:96:15:85:38:
00:b0:f9:31:0b:fd:af:15:f4:cd:7f:7b:0f:05:44:
95:eb:4f:f4:67:66:3f:8d:01:54:43:96:60:89:bf:
88:24:ee:12:d5:28:90:3d:ec:7e:19:57:f5:e0:10:
4f:14:32:f1:98:5d:75:2d:2c:a7:84:78:ad:f0:68:
4c:21:29:ee:7a:00:c8:1e:a0:72:10:de:54:02:0d:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:C9:99:AC:D4:23:33:69:3B:06:7D:16:02:4F:2B:B5:18:67:88
X509v3 Authority Key Identifier:
keyid:CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a2:2c:8d:11:9f:cc:82:6a:61:42:1d:d0:94:09:aa:09:6a:
47:a1:4f:52:cc:2e:04:70:91:50:77:25:03:e2:45:a9:79:51:
e4:2d:fc:e0:fe:28:05:f0:de:a5:ed:b6:97:fa:a6:33:e3:28:
8c:29:f1:59:9e:d3:39:99:d9:6a:ba:37:ea:73:2a:3e:49:d7:
0d:da:d1:fc:f8:d2:c3:67:2a:96:87:36:95:58:4c:2c:d4:03:
c3:47:9f:50:5f:24:1c:cd:57:fd:6c:82:3b:22:60:fa:f2:6b:
ce:ca:1d:49:49:8d:1c:09:f8:ff:02:2b:17:1a:30:26:51:e8:
11:77:94:7d:69:1b:44:e3:c9:b5:d3:ae:62:12:14:e8:9d:a1:
9d:cf:f9:83:36:84:d0:e4:12:5a:af:df:66:f8:d8:dd:57:a4:
3d:5b:a4:f9:a5:c5:c4:4d:ab:88:0a:84:62:43:f5:2c:4a:41:
aa:07:f9:db:23:8a:d9:4a:65:54:10:38:64:c1:e6:4d:64:f9:
fe:4b:7a:2c:a3:c3:73:83:ae:65:8f:57:09:e5:5e:48:85:b7:
54:06:a3:74:3f:33:3e:41:94:c6:d6:1f:dd:d2:6c:54:1d:61:
73:73:22:df:91:83:80:f1:da:7f:02:8e:63:5d:1c:e4:f0:8e:
95:c0:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:11 2025 by rpki-client