Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
File: ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft (raw, json)
Hash identifier: A9gN7USkGHg6i57iOf45hPWfDFYrGJ8qhWETkaWl/DM=
Subject key identifier: E4:53:40:90:A6:2B:63:4A:38:40:D9:36:D7:59:85:E4:F8:D4:C8:A8
Authority key identifier: 64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
Certificate issuer: /CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Certificate serial: 019A71B839F4FE359C2D406D438507AD4EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl (hash: fP0MA9L24CSMa6klnkhGLJU1+r1hGE0JRI7n7NOl5tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:39:f4:fe:35:9c:2d:40:6d:43:85:07:ad:4e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=e4534090a62b634a3840d936d75985e4f8d4c8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:bb:5e:46:7a:7e:f9:31:5e:6a:e6:4e:f4:
20:7f:45:93:15:1b:99:0d:c4:4c:ff:88:bd:5e:3c:
2c:65:72:df:12:6b:37:fc:82:e4:7a:05:70:bb:4b:
af:c1:c7:82:45:64:9f:3b:e5:95:58:8d:c8:8e:7e:
54:a4:69:e6:a5:64:1a:df:26:b0:51:cb:9d:4e:0f:
5c:4e:fd:f9:fb:30:6c:35:4f:cb:76:7a:6f:96:b8:
f2:99:c1:14:e4:75:d4:be:0d:e4:28:5f:e1:2b:8e:
25:c6:14:d1:0d:f4:82:d1:05:b0:9b:3d:86:66:fa:
9e:40:09:6b:4d:bb:78:23:e7:e4:14:b5:de:88:79:
d9:21:7e:f1:26:8d:8e:8f:68:a6:41:94:23:fd:59:
16:11:0d:f0:6b:b4:f9:11:08:79:a1:08:44:6a:ea:
c9:90:85:c5:c5:92:0e:39:e1:2e:a9:9f:82:ae:a4:
97:15:e5:bd:e1:e0:8a:f1:d2:7b:d3:b8:99:9f:0c:
6d:97:87:3b:30:cb:5e:50:a6:4a:8d:2e:e8:6a:b0:
63:7d:eb:00:1d:09:94:7a:d1:5b:d3:df:5d:b4:c3:
e7:38:b5:64:ca:85:c1:5c:6d:e8:93:8e:97:8c:0d:
06:35:59:73:9c:af:39:27:0b:ea:64:8e:f0:5c:ba:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:40:90:A6:2B:63:4A:38:40:D9:36:D7:59:85:E4:F8:D4:C8:A8
X509v3 Authority Key Identifier:
keyid:64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b1:59:26:e8:fd:f2:15:23:a1:9a:a5:30:d2:e8:cb:eb:29:
e7:8d:1f:19:a7:22:a3:65:11:54:46:ce:50:f6:1d:88:b1:bb:
7a:54:cc:b8:d3:76:7c:b4:5f:9a:e0:b0:32:63:5b:36:ba:92:
15:35:27:80:a4:83:c6:9b:86:ac:e5:37:47:98:35:17:6b:d2:
6c:d1:3c:97:cb:f1:68:25:83:84:7b:0c:31:69:4e:25:f5:44:
11:28:38:4c:fd:6d:2c:d0:1e:0e:cd:9a:b4:d2:76:8b:a1:b8:
59:06:30:8b:57:71:3c:8c:61:aa:2c:f6:44:22:f0:1c:39:f9:
3a:ae:a7:2c:e6:a6:ba:27:4c:88:9b:84:b6:a9:2a:ad:9d:50:
be:d6:ae:af:31:ea:11:01:79:37:b1:ee:46:cb:2f:dc:56:9f:
57:d7:96:61:5a:24:78:3c:3e:e4:76:46:75:1e:b6:d2:3a:5d:
62:80:42:75:b9:b5:51:2c:0f:d9:4a:cb:4e:68:72:cc:2d:84:
b1:d4:48:14:1d:e5:c7:94:20:04:23:ea:45:f9:83:33:aa:ba:
ba:89:1a:7f:8d:08:03:be:0c:cc:d6:49:32:ce:1c:33:50:f0:
46:6f:12:a7:77:aa:51:79:ba:90:fa:e6:b6:c6:7e:4a:c5:60:
c5:3d:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:15 2025 by rpki-client