Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: KHRE6qDr0SKUzj8sU22Gk6rrkABJKCMdmKN+UnkLRg0=
Subject key identifier: 5D:3B:D4:1F:72:29:8D:4A:FC:ED:18:29:B9:8C:F2:19:A9:A8:D4:24
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 019A706E4A35C41F1429B41FE2C9C68AAD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 11F3
Signing time: Tue 11 Nov 2025 01:01:07 +0000
Manifest this update: Tue 11 Nov 2025 01:01:07 +0000
Manifest next update: Wed 12 Nov 2025 01:01:07 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: BPhwU9LZaI7WZEvKzsuwazIKzdsYxPSZPKAZpvhgeF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:4a:35:c4:1f:14:29:b4:1f:e2:c9:c6:8a:ad:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Nov 11 01:01:07 2025 GMT
Not After : Nov 12 01:01:07 2025 GMT
Subject: CN=5d3bd41f72298d4afced1829b98cf219a9a8d424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:c0:52:d1:f5:8e:79:b9:f5:d6:60:6a:4c:
bb:9a:01:23:ee:12:83:38:7b:20:ad:93:83:1d:21:
3e:f9:88:fe:39:15:79:e7:4d:e7:de:7b:ec:bd:9f:
c9:f7:c4:61:db:a3:9d:8e:f2:6e:dc:d6:55:5f:4e:
dd:38:f8:41:f1:a3:27:50:5d:39:15:1c:61:c1:74:
02:e8:71:65:79:52:ba:77:b1:6c:2e:74:7d:e3:9c:
14:f9:1e:ae:ff:d9:17:f1:9d:b5:60:86:28:ee:99:
37:41:e7:82:6e:ee:01:73:c9:48:3d:7d:c8:e0:64:
ea:be:2a:f7:89:07:db:8e:4e:9c:38:77:63:bf:ff:
59:61:df:ab:62:a0:5b:33:24:9f:96:d8:0b:2b:91:
84:63:12:95:60:06:c0:92:62:2c:6b:a6:ad:6f:72:
64:75:50:25:8c:97:b3:14:e3:f7:ba:a5:df:38:5a:
85:d5:65:a2:1e:c7:c9:ad:4e:66:33:19:a9:6f:04:
70:8d:46:cb:b8:56:9e:23:1b:53:30:c6:99:77:4b:
fc:e9:b2:2e:4d:b7:36:4c:a1:71:14:6a:89:e7:4e:
62:d5:99:2d:71:40:51:88:87:5a:75:ba:1b:4d:de:
b4:cc:ad:3f:6a:00:e6:c2:e4:15:46:52:ee:81:e0:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:D4:1F:72:29:8D:4A:FC:ED:18:29:B9:8C:F2:19:A9:A8:D4:24
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fc:47:29:5f:41:e2:5e:2e:ba:2e:85:43:f6:50:c0:4f:5e:
f1:16:a4:78:b6:2a:ac:3f:f4:cc:95:0b:7e:af:d7:9b:c0:20:
2b:a1:d7:f8:5b:dd:fd:a1:d9:b2:1c:71:68:d6:29:60:a9:4d:
b8:e8:6c:1f:75:96:64:1f:91:da:39:3c:39:28:51:52:b8:89:
01:3c:a3:b3:3f:0f:fb:36:ff:12:c8:43:81:47:f6:2d:f2:1e:
74:9c:41:f0:60:da:79:bf:5d:ff:fe:c4:72:d5:99:9f:5e:18:
44:4a:78:d8:8a:8e:c9:c1:d5:50:2f:d8:87:ef:c0:ea:5d:81:
a7:77:5c:9e:d4:d9:67:19:40:bb:ce:21:56:1e:f7:75:93:ac:
9d:0c:d2:6a:d7:2f:56:2b:be:69:22:d6:13:28:9b:de:73:e1:
f9:0a:cd:56:1d:40:93:6e:5d:60:96:4a:a6:1f:5f:88:5e:00:
ed:49:71:d8:53:67:db:04:38:ab:28:b5:d5:1f:e4:37:c2:9c:
75:d9:a7:22:e1:c7:e5:e8:7e:7a:d3:ba:ce:93:70:ce:a2:95:
cc:26:6a:90:57:e3:9e:f8:02:62:f3:d4:46:e7:4c:7e:90:d9:
5c:2e:17:07:d0:0b:05:c2:23:13:3e:06:6f:91:e1:30:45:ee:
b2:51:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:03 2025 by rpki-client