Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
File: Zz5yIBSrbED084ns_Kyu_7tjBM8.mft (raw, json)
Hash identifier: Gq8HZHCug2vN5nEQNUooRbWtxrH9q9eCOCmZMKHe/s8=
Subject key identifier: DE:C2:9A:13:19:DE:33:27:1D:9B:9F:69:97:6E:C7:6B:18:28:98:C8
Authority key identifier: 67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF
Certificate issuer: /CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
Certificate serial: 019A71B87642098663EBF40F6F55170B8F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
Manifest number: 0851
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: Zz5yIBSrbED084ns_Kyu_7tjBM8.crl (hash: xEwGb0rHr1lMP3Kwo/y+qKxXxyahpL7zaCSIkF9UVUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:76:42:09:86:63:eb:f4:0f:6f:55:17:0b:8f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=dec29a1319de33271d9b9f69976ec76b182898c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:25:39:fb:92:8d:3e:de:02:6d:98:ae:58:
3d:57:9d:b7:1d:2f:83:5e:8d:f4:b6:dd:db:8f:ab:
4e:22:7f:48:8e:69:a4:ad:45:dd:e2:0b:7c:69:ad:
a5:4e:98:f9:29:6c:21:44:6f:d1:b3:81:5e:3f:70:
e0:33:58:73:98:d4:88:92:03:8d:ea:9b:b5:84:fa:
44:d1:cf:ad:cc:a6:0b:c4:0e:99:ab:aa:2a:a7:ff:
5b:bc:05:7d:d2:3e:78:4b:0a:10:da:8b:00:ee:5a:
74:e7:23:b3:13:1a:2d:43:f9:d8:ed:db:d7:64:0d:
29:a1:fb:2d:88:3d:5b:97:d0:bd:aa:92:5b:6b:e1:
ca:71:d5:3b:57:1d:01:23:ff:e9:dd:1a:e7:e0:71:
31:b1:39:fc:c0:ff:38:a4:05:11:69:33:0b:04:c3:
38:e8:4f:70:b6:69:22:4c:36:5e:1a:24:94:99:cd:
9c:24:04:d6:bc:eb:1d:ef:23:95:d9:4f:72:60:df:
78:4c:15:1a:09:01:80:e0:be:68:99:c7:48:23:dd:
e9:71:bb:2d:a3:96:97:d6:b0:84:56:57:59:a6:23:
5d:74:a4:9c:0b:73:15:b0:d1:e8:15:cc:0a:16:4d:
48:dc:5e:61:c2:cf:3a:e6:67:4d:3c:2a:ad:f5:70:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C2:9A:13:19:DE:33:27:1D:9B:9F:69:97:6E:C7:6B:18:28:98:C8
X509v3 Authority Key Identifier:
keyid:67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f2:f7:1d:64:03:96:ca:45:d7:77:6e:cd:04:fd:19:e0:77:
c4:35:5e:e6:99:5f:21:1c:24:94:3b:a5:21:9d:e9:d6:e1:81:
58:53:a8:35:ef:a4:f9:3d:50:aa:12:8c:67:d5:69:f8:56:8f:
a3:c5:08:1b:de:b6:06:7b:6f:52:44:dd:ad:f4:f5:ec:93:bd:
9b:ab:3f:85:6e:0c:fe:0d:25:c8:40:ec:7c:d2:e2:9d:ed:ff:
f5:97:03:9c:1e:1b:da:83:21:80:af:9c:c0:56:5d:05:cd:bb:
a3:2a:b3:cb:d0:26:ce:aa:67:a9:23:cc:c3:5c:ed:96:48:c6:
68:2f:b5:c1:bf:43:f8:51:03:51:95:9e:55:4a:70:d5:22:fa:
05:2b:c0:4a:8c:a9:e0:34:a5:45:17:3f:a5:cf:b3:a9:25:01:
05:cd:f5:0c:96:a9:f6:44:61:0a:19:b2:ab:ca:a5:8d:10:8b:
79:81:45:b0:44:30:3a:df:d1:d7:9e:e7:72:0c:c7:5f:4e:37:
04:43:22:45:ea:f1:7b:86:34:30:0c:27:6a:e0:1f:8e:1c:4f:
d9:19:a8:f5:d4:04:7c:fc:a1:e8:72:a6:85:a5:8f:c6:8f:a6:
75:f1:d1:e8:e1:aa:5c:67:b9:9a:35:f7:35:96:c3:23:97:72:
7f:51:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:33 2025 by rpki-client