Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: ElTGrPDK4b5VEgYcoUXnnVGFc6G0ufExHMIqEK2kcJk=
Subject key identifier: FD:61:DE:DE:DF:91:2F:5E:CF:52:28:47:85:F6:DC:47:57:C8:A1:D4
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 019A71B80F03F9FFFA999085399CE5312207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: VkE7GiIisHNZYBGUfJDMpEgwYhWeW9yS/rXW5s69cuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0f:03:f9:ff:fa:99:90:85:39:9c:e5:31:22:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=fd61dededf912f5ecf52284785f6dc4757c8a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:ee:92:30:23:af:10:c3:10:6d:9a:66:f2:
2f:a2:68:de:07:05:c9:37:ac:45:70:14:b0:ea:61:
e9:97:9f:9a:fe:77:ea:94:39:7e:85:1c:5c:46:45:
f4:74:9c:93:ea:fa:5b:2b:29:d3:c2:35:7a:8a:e4:
0c:a1:c2:b2:14:03:77:df:4f:ae:fb:e9:25:c9:37:
07:e0:33:b6:27:7b:d3:1a:2f:4f:0c:99:d5:94:f0:
8d:36:79:84:8e:9a:d3:d0:11:60:c4:fa:62:06:d0:
3e:de:cf:d1:03:12:f5:17:c4:5b:8d:90:49:ee:57:
58:e3:00:72:a0:4d:80:f9:24:c3:aa:a9:55:de:3d:
b3:32:df:7d:46:c7:c5:58:d3:bf:99:1d:b1:3a:71:
27:b6:c2:10:f6:a0:fc:64:7d:aa:d0:63:34:65:35:
61:12:65:4b:a3:05:96:4b:a9:c8:60:4c:b0:47:9f:
46:bf:06:fc:0d:9c:31:f4:63:aa:a5:9b:7c:35:39:
1b:77:36:5d:0c:3e:7a:b8:65:14:58:3c:3f:67:73:
20:6d:93:c3:9e:57:c0:7c:e6:cf:bb:58:9f:73:c2:
28:72:b5:16:cf:34:47:84:d4:6f:82:37:4a:43:d9:
9d:f7:99:cf:1d:48:8d:37:fb:c2:7d:c8:46:97:16:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:DE:DE:DF:91:2F:5E:CF:52:28:47:85:F6:DC:47:57:C8:A1:D4
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9f:60:35:ab:cd:ed:38:e3:7f:f4:63:30:c7:57:14:78:f8:
11:08:d3:57:f1:7e:23:d4:4f:eb:4b:bd:12:9a:9f:74:56:50:
a4:53:59:b0:82:e3:e0:9f:18:32:be:a4:1e:2d:dd:d8:cc:e0:
3f:e9:c1:22:14:39:45:72:6e:51:11:39:14:88:48:45:1b:45:
db:72:f5:b7:7d:23:6b:d6:21:86:de:85:b5:8e:0d:72:65:01:
2b:6d:51:0c:39:d2:79:29:eb:3d:cf:9b:e2:0c:b7:8a:19:23:
1b:4c:aa:e8:a5:d7:9f:dc:f7:a6:b7:ed:30:6c:be:34:e3:2b:
70:9f:80:4c:97:20:ec:57:11:6e:ae:07:f7:3f:b7:e5:1c:eb:
f6:5c:d1:25:bb:28:69:b4:67:5a:b7:f1:0f:63:ce:bf:de:57:
cf:85:cf:3f:e0:48:42:93:f1:49:63:3b:91:16:7b:cf:0a:6c:
de:f6:de:7a:8b:95:a2:4f:30:f2:02:31:93:de:3d:69:18:7d:
9a:9c:83:43:bd:d0:fc:3b:27:3a:89:13:36:79:68:5d:cc:4c:
e2:dd:30:02:0b:49:81:e8:94:8e:30:67:2a:8d:48:2f:11:2c:
3d:24:c4:f5:43:ac:3f:41:ea:37:7f:37:c3:75:3f:e7:65:74:
63:83:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:52 2025 by rpki-client