Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: LYqPS+tXvOouCgrx6VyJPm1FCm/35I8ECUyE2C6VCWk=
Subject key identifier: 6F:CA:19:1B:F0:76:91:EC:7E:4A:1D:44:8C:64:BC:8D:49:CF:42:ED
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 019A73011EC5510AF59675FB84D60A638CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0D8F
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: lsM4JNKt56zPXrdZubzERNidTdZ493V2ylg3jCxllS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1e:c5:51:0a:f5:96:75:fb:84:d6:0a:63:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=6fca191bf07691ec7e4a1d448c64bc8d49cf42ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:9d:0d:a6:ba:e3:ce:25:68:d7:76:3f:83:
64:50:66:d8:d4:bd:b4:e2:f6:dc:98:a1:c5:c9:ec:
b4:d4:8e:40:1a:0b:1d:09:9f:38:93:a0:57:7a:77:
5f:9d:ce:b9:08:36:4b:7d:d6:f0:75:6d:01:6c:39:
e7:a6:2e:fe:92:f3:b0:78:b6:c9:66:26:47:5f:ae:
56:57:9d:04:8e:aa:af:05:2b:86:2d:56:f0:dd:6a:
fd:2f:1e:f1:d5:21:94:09:e3:f1:e0:1f:f0:37:33:
2f:16:97:01:17:7f:b2:b0:cc:32:cb:bd:99:16:de:
36:9d:f4:a3:45:e0:10:2a:f5:57:10:3a:98:d6:cb:
34:fb:1b:33:72:6d:d2:be:e0:94:df:84:1b:ca:a2:
c8:55:81:58:97:a0:81:a6:4a:8d:d2:57:0d:5d:77:
3b:34:d2:17:c0:63:81:22:47:a1:a1:d0:2f:57:63:
9f:21:a0:84:7b:9c:68:0c:ae:3b:a2:cf:06:5d:10:
73:06:0f:68:b9:7d:4b:3f:c4:eb:e7:fc:ed:eb:d5:
d2:91:bc:46:a3:29:94:83:1c:cc:71:47:08:a4:f9:
8a:ad:6a:93:69:96:7a:5f:d7:eb:09:79:4f:f9:3c:
8d:dd:35:0e:02:06:ae:b4:ca:a8:a4:1e:ff:bd:c7:
62:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:19:1B:F0:76:91:EC:7E:4A:1D:44:8C:64:BC:8D:49:CF:42:ED
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d2:f7:a1:87:c6:4b:ab:35:05:cb:45:a3:f5:e2:65:bd:0c:
27:18:de:91:44:ed:2d:cd:77:7f:38:f4:a8:a5:7c:7b:04:b5:
8e:12:85:cd:6a:00:c8:db:45:65:0e:d0:98:fc:27:a8:c9:e7:
ac:fd:83:c4:74:68:d0:06:ef:48:ac:4b:57:41:75:2d:a8:df:
97:af:aa:e9:63:3e:e8:81:79:37:62:b1:80:32:36:fa:e3:b4:
3a:8b:10:b2:26:c2:5a:6c:81:f5:36:0c:c9:9f:ed:9c:0c:97:
10:54:e1:2c:de:c8:b4:62:4f:07:15:8f:fe:75:9c:4f:6a:44:
e3:67:94:9f:aa:72:90:7c:38:87:8f:b8:31:9a:76:be:69:d1:
e7:db:da:73:ab:fc:2c:71:32:9e:33:3d:8a:9d:2a:4e:f4:36:
b0:e7:21:84:89:87:45:c2:18:63:b8:b1:a7:c7:c4:5b:7d:ce:
b2:36:ae:78:46:93:0a:3d:7f:74:7f:32:71:0e:63:60:a3:b7:
13:92:cf:96:07:c7:61:14:1a:a3:3d:56:79:66:e4:3e:7b:a1:
a2:8e:c8:ae:56:0b:36:5f:b1:ad:9e:ad:b1:83:64:35:d1:c9:
ae:db:cb:6d:9b:e0:65:3e:8b:17:69:0a:b7:e4:5e:8f:1d:75:
48:1d:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:07 2025 by rpki-client