Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: K2CxfE+524anOx4lbiDH4TBdAZeIwJHIELce3QT8ECA=
Subject key identifier: 46:DA:38:1D:0D:DD:C0:1D:C5:39:1D:E2:E1:64:DC:DA:56:19:86:7E
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 019A725CA204621CAF731EC924948B4967EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 037D
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: ON7FziieTW27PEPdUFeww5rFlLZwYsMXYr7aKPpYjrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a2:04:62:1c:af:73:1e:c9:24:94:8b:49:67:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=46da381d0dddc01dc5391de2e164dcda5619867e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:d7:90:03:33:5a:61:ca:34:c0:b1:77:a8:
4f:a0:30:f6:26:02:54:93:78:62:94:a7:3b:bf:46:
de:41:f3:cc:b1:68:5e:24:ff:ab:99:8b:8a:5c:10:
27:09:35:9d:00:fd:ba:48:4f:81:b8:2d:34:cd:a7:
4d:74:9a:1d:ad:56:22:f8:b9:d0:13:2d:b4:23:4a:
2b:90:d3:e0:29:fe:12:95:e6:cf:75:31:0e:71:ca:
96:3c:7f:59:f6:94:db:a4:0d:61:19:42:b3:5b:e1:
5e:f7:97:71:ba:24:6d:93:b8:55:37:27:d8:f7:9b:
72:ea:ef:84:e0:2e:4c:40:a3:1b:11:a9:68:93:cc:
35:9e:c7:1c:07:b7:8b:f3:72:4b:7c:2b:21:25:0b:
a2:70:f1:2a:91:3a:71:62:1c:10:42:77:dd:24:f8:
3d:9a:7a:31:59:a4:cc:19:07:a8:62:1b:b2:2d:4f:
da:53:5c:5e:07:ef:77:e1:fb:f9:49:4d:ff:7f:62:
c0:93:9a:cc:d6:e2:9f:43:96:af:ae:10:62:e7:69:
95:3f:e5:2b:85:c5:af:c0:3c:30:66:ad:42:4f:38:
7d:a9:74:0a:8f:7c:f6:92:19:84:7c:94:a3:4d:b6:
fd:1e:05:0f:f3:5d:8c:c1:1b:f4:3a:99:6a:89:95:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:38:1D:0D:DD:C0:1D:C5:39:1D:E2:E1:64:DC:DA:56:19:86:7E
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:74:57:fa:ca:dd:71:32:44:23:6a:60:e1:1d:d6:62:94:ca:
89:d4:31:10:f0:a8:b1:b1:5d:13:02:48:6e:d5:a2:17:74:9e:
3f:41:a8:ca:84:38:8e:c1:e6:26:ac:ca:c6:b9:a2:58:f3:18:
21:85:d0:c3:aa:2f:75:bd:9d:28:ac:aa:dc:c6:af:37:6c:df:
e2:12:65:db:c4:47:47:b8:f3:e4:ed:cb:02:40:b3:a4:bf:18:
e3:a5:6f:8d:dc:b0:9c:a4:30:ab:cf:8e:46:16:90:35:e3:51:
93:4b:06:8c:61:b7:f5:4d:bd:75:99:8b:45:d3:cb:41:5d:51:
83:30:9a:e1:ae:8a:92:f8:72:e0:44:9d:43:31:df:3a:af:18:
cf:8d:fb:83:b6:b3:7f:0f:e1:79:95:e0:29:21:cb:d2:2d:88:
26:3e:92:31:8c:c3:10:20:de:08:00:05:bf:d4:50:c1:6d:62:
5c:00:b0:cf:0b:c6:15:1b:d4:99:6b:36:a4:9f:5f:f0:d1:16:
c2:ab:6b:39:b7:23:e9:7d:99:51:be:4d:63:2b:60:dc:d1:af:
14:65:7b:88:7c:e8:38:6d:98:b4:6a:6c:23:c8:31:46:6e:92:
fe:9e:65:f2:b7:08:43:ba:85:de:cc:c9:2c:59:99:24:07:56:
5f:8c:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:37 2025 by rpki-client