Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: 5CyxZfbMXKpgU8IPgR2EZ9/lb+X1IqZb1cMPH0/mhM0=
Subject key identifier: 59:44:85:6F:68:62:1B:67:AE:17:09:E1:68:FB:C7:6D:93:4E:BD:22
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 019A71B7F77BD5C0E8609187646DF1424E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0D74
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: x+Hy+SSM37/QhaUnWj0V0tmEfdasDK/KsuB/o1m2mPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f7:7b:d5:c0:e8:60:91:87:64:6d:f1:42:4e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=5944856f68621b67ae1709e168fbc76d934ebd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:1e:43:92:0e:04:e7:24:10:85:5b:c4:5e:
3a:67:77:9d:ca:fb:3c:2c:e1:8e:86:71:86:8b:3c:
cc:6c:45:8f:46:e1:ce:8f:00:25:b2:19:d0:40:f2:
be:0c:76:08:7f:d4:75:18:a8:10:0a:c9:3f:0b:60:
bb:41:ea:c2:51:44:11:55:95:0a:b4:de:34:3d:1a:
fa:e1:97:48:fa:8a:54:fe:ed:30:3f:8d:3b:59:3d:
09:7d:71:21:cd:c8:f0:fc:3f:45:fd:25:78:d2:82:
51:25:6f:5a:72:1b:94:94:53:7d:05:bd:85:25:ce:
f0:27:b3:f2:64:2e:fa:bf:15:b8:43:e0:ed:5e:20:
4f:b4:87:74:94:d8:64:2a:9a:4f:db:ba:2e:58:d5:
05:51:02:29:75:69:a1:bd:fb:e8:a1:82:08:3c:39:
f7:b3:5b:e1:53:78:5a:2e:d7:2f:bc:2c:e0:27:d0:
19:b1:33:30:22:95:8b:13:31:29:3e:ff:c9:0b:40:
4a:ca:a0:2a:7d:66:f6:73:68:83:22:3b:7f:9f:13:
2a:d3:54:b9:aa:73:cd:73:e4:ce:41:f9:a7:6c:d6:
9e:73:a7:54:d8:95:a0:3b:74:7d:74:15:62:2d:24:
a0:32:43:86:7d:06:f4:70:11:f9:bc:99:30:27:27:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:85:6F:68:62:1B:67:AE:17:09:E1:68:FB:C7:6D:93:4E:BD:22
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:46:8a:94:aa:fc:8a:30:13:ed:d1:ad:60:7c:05:18:26:78:
53:88:89:97:4a:c2:25:c8:31:6d:70:d2:e9:26:bc:27:e4:94:
14:ac:a1:5e:fb:79:24:64:f2:7f:65:e7:1d:66:c9:28:a5:30:
fe:7e:a1:b2:68:d9:12:27:cc:de:13:52:fe:51:bb:dd:f7:1b:
63:f6:fb:d8:ab:e7:a0:a2:75:81:c4:bf:89:2a:51:e7:c4:65:
91:4c:49:95:0d:68:f0:fc:be:d3:5c:ef:67:95:8a:d5:19:b3:
fb:0b:7d:76:dd:aa:b5:b6:31:a0:2f:91:ed:0e:3c:01:7f:9c:
9e:13:d0:7e:2e:54:78:86:47:e7:19:a5:d7:ce:46:9e:d4:09:
92:76:7a:71:68:ab:5f:29:98:88:86:1e:58:ea:9a:92:f1:b3:
84:2e:7a:97:d5:44:e5:d8:95:27:e0:f5:89:18:5e:b9:86:28:
e1:ff:6d:8a:14:ad:b0:07:b0:cf:1e:b1:cf:82:0f:a2:eb:6c:
47:2d:60:5d:ad:0c:37:a6:81:22:8c:ba:6b:9e:43:80:69:26:
d4:de:c9:20:1c:98:54:1f:5e:de:f8:ea:d6:61:38:2e:b6:36:
d5:95:33:0e:a3:6d:dc:36:71:45:f4:c7:9f:07:ef:6a:11:89:
7e:a1:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:44 2025 by rpki-client