Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier: ToRiVE+bIZiG7KN/CxXu6faCY71S9pBpH8vppRy7w74=
Subject key identifier: EB:EC:8F:CC:BA:3A:BA:FC:9C:E2:E4:1E:61:21:7E:4C:3F:1A:9F:9C
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial: 019A71B8847798FA45ACCE934EB9A5493C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number: 0AB2
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: gXfnaLhS5syzo/B0ox1XXWRAznH34tYfKMYmJKkbM/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:84:77:98:fa:45:ac:ce:93:4e:b9:a5:49:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=ebec8fccba3abafc9ce2e41e61217e4c3f1a9f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:9d:34:e0:83:71:c5:6f:92:1d:80:bc:fc:
24:6b:ea:47:42:b4:b2:0c:a1:18:b3:7c:c2:bd:65:
7e:f9:fb:8f:f7:b6:16:09:e9:32:4d:40:03:95:20:
12:cb:da:52:66:38:9d:5c:b3:51:26:ad:19:6c:d5:
3c:82:4b:b8:9f:60:6d:0e:8e:5f:20:ed:dc:ef:75:
af:3d:96:79:bc:8a:7f:b0:70:7f:6d:17:bf:db:dc:
b4:86:fd:b6:8c:49:87:22:c6:38:b4:b6:02:01:0a:
8e:99:57:c6:e0:10:7e:da:87:32:42:ac:87:b6:e8:
4e:a6:55:7c:b6:cd:e4:45:21:06:8c:2a:6c:b3:2a:
32:27:82:0c:cf:7d:7e:c5:ea:f5:55:f4:0e:c4:4e:
4e:6f:94:92:98:52:a4:c1:1b:d6:ea:d6:f2:fb:f5:
6e:72:26:5e:d8:be:fb:b2:de:cd:a8:f0:8d:46:50:
5f:34:0b:d3:4d:cf:0b:2b:c4:23:3e:36:74:83:7b:
cc:18:3b:b7:34:82:7e:99:f5:82:fe:c5:ee:38:ee:
4f:76:8f:5b:84:e5:91:cf:0d:e8:bf:0e:a3:f3:7c:
43:83:76:4c:5a:79:fa:50:b6:15:3c:15:65:10:95:
c4:18:15:71:e5:0e:a5:e4:81:d9:87:fa:10:23:5c:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:8F:CC:BA:3A:BA:FC:9C:E2:E4:1E:61:21:7E:4C:3F:1A:9F:9C
X509v3 Authority Key Identifier:
keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:73:fd:6e:b9:c4:a2:0f:67:89:dd:3e:ff:fe:69:76:9f:2f:
32:43:51:d0:23:12:ca:3d:01:ad:5b:cb:12:73:d5:f5:70:d2:
03:3f:c8:d0:ec:54:cf:57:d6:28:5b:b3:c1:69:f1:fa:8e:99:
b2:8e:4c:43:9b:e8:5f:bc:3d:b6:89:46:68:3c:0e:32:66:df:
69:66:43:df:7d:c9:63:57:12:2a:25:86:64:7b:a6:69:d3:7d:
a8:c5:7c:83:9e:f9:be:91:f8:fe:74:a5:71:8f:f1:84:bd:ae:
2d:de:ac:4e:e1:7a:db:ef:f9:4e:99:f2:60:e0:dd:3d:2e:c0:
ee:89:be:ed:bf:54:29:f2:06:d1:be:7a:ca:ff:52:4c:9d:53:
a2:63:18:38:df:d4:a3:4a:4f:72:90:f3:53:3b:4e:f6:54:73:
bc:3e:87:f4:04:19:4b:ec:09:a7:55:15:91:59:ad:0d:da:eb:
f0:05:3c:f8:95:b8:54:f6:f8:b5:e9:d4:7a:d8:82:04:74:3f:
99:29:d6:b7:52:6a:53:f4:48:6a:8a:7f:cb:e3:f3:42:15:d1:
92:f1:67:1f:b2:a7:4b:f7:2c:57:02:b0:99:b9:c7:91:af:3a:
a8:ad:7f:7d:a3:b6:30:93:c1:53:ae:f9:74:9c:04:98:a6:cc:
c5:a9:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client