Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: gC9zYjKXxgBgsa6j9pTVaLC1OnCAprJCvcCDOYa+9HE=
Subject key identifier: 61:96:B6:C5:27:EB:2E:20:A4:FB:5A:08:3A:1E:61:2F:E8:BE:14:97
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 019A71B7864C878FC98FBBFCB38B826D9B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0D1A
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: lhUpaaVXllLL1Em4JZQwwn4oPQMdDeNrkpDSF6UuQUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:86:4c:87:8f:c9:8f:bb:fc:b3:8b:82:6d:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=6196b6c527eb2e20a4fb5a083a1e612fe8be1497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:39:17:c4:f9:8d:18:c7:8f:a0:ae:73:26:
ac:d2:dc:14:61:dd:64:a6:02:2e:42:30:78:3d:4d:
60:09:74:65:93:04:8f:2d:9d:cc:c5:c4:4f:1f:69:
1b:62:ae:7a:8c:33:0f:01:49:9a:f5:ea:7a:7d:b1:
af:5b:32:74:cb:1c:ef:90:41:c6:cc:bf:12:92:9f:
6a:ac:79:df:ee:62:e4:89:3a:5d:93:af:06:b3:96:
c7:d4:34:e9:e0:ea:41:9a:c1:d2:81:49:b1:36:0b:
d1:d1:96:b0:78:54:27:f6:68:92:8f:32:29:68:d6:
ec:1b:d9:07:23:b7:cc:e8:ab:f1:90:87:38:1f:96:
93:0e:bd:c1:c9:16:5f:fe:d9:4d:ae:70:7c:3e:a1:
e2:97:ee:57:a6:6e:ea:ff:c3:6f:07:6e:72:d7:c8:
f2:bb:50:a8:0b:4d:96:f3:e9:71:1a:6c:42:93:5a:
c6:15:42:71:65:4b:4c:44:10:b9:b9:0c:d0:b8:75:
d4:4f:8a:c1:2f:64:f6:9e:cf:c1:50:42:e5:f8:4f:
50:a8:dc:91:53:15:01:1d:10:bc:b0:08:00:81:c0:
10:c3:d4:04:d0:85:63:e6:c9:4e:df:e5:44:d2:b4:
50:15:5a:8c:ef:72:b0:48:94:bf:eb:45:0c:9e:5c:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:96:B6:C5:27:EB:2E:20:A4:FB:5A:08:3A:1E:61:2F:E8:BE:14:97
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:e9:a7:79:e8:f3:d7:27:d4:9d:be:40:60:ea:ae:cf:a8:
60:70:73:cb:ad:7d:36:26:85:f4:9f:3d:db:53:ec:7f:41:b7:
59:81:af:51:1b:6f:1e:18:38:1d:59:13:29:27:1d:51:ae:6d:
93:39:70:fa:34:d5:0a:85:6c:3a:d9:78:f7:3a:cd:36:5e:ac:
ef:80:42:64:a6:ec:56:97:27:28:e5:30:dd:c3:ed:ba:de:8a:
fe:72:d1:f9:a0:81:b9:e4:2d:39:46:95:5e:10:40:c3:5e:fb:
94:00:c0:e8:71:9a:9a:23:9f:e1:32:74:78:13:d8:be:73:10:
a9:bf:c6:c2:68:86:31:81:7f:ec:84:f2:3a:a6:46:1f:d6:49:
c3:2a:24:ad:da:88:45:4e:c5:ef:a2:88:f9:14:39:ec:e8:6c:
22:1c:af:52:83:94:13:e0:aa:9f:b2:cf:16:a9:58:c7:d5:0b:
ce:f6:c9:40:0e:74:89:f3:a8:73:fa:85:f0:7a:9f:2c:bf:0c:
b6:70:76:ed:83:f3:95:a2:34:6c:a3:fb:89:7d:7c:13:15:87:
87:f6:13:42:b7:18:95:40:14:9e:03:1b:6c:98:86:ce:b8:8a:
9c:d7:de:7c:ae:38:da:3d:a2:22:92:64:18:7d:06:e9:9f:42:
f9:dc:3b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4ZMh4/Jj7v8s4uCbZtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRkYjM3MzA4NWUyOGMwZDliNzRiZTdiOGU4OTc0MGI5
NWY5ZmEwHhcNMjUxMTExMDcwMDQ0WhcNMjUxMTEyMDcwMDQ0WjAzMTEwLwYDVQQD
Eyg2MTk2YjZjNTI3ZWIyZTIwYTRmYjVhMDgzYTFlNjEyZmU4YmUxNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd45F8T5jRjHj6Cucyas0twUYd1k
pgIuQjB4PU1gCXRlkwSPLZ3MxcRPH2kbYq56jDMPAUma9ep6fbGvWzJ0yxzvkEHG
zL8Skp9qrHnf7mLkiTpdk68Gs5bH1DTp4OpBmsHSgUmxNgvR0ZaweFQn9miSjzIp
aNbsG9kHI7fM6KvxkIc4H5aTDr3ByRZf/tlNrnB8PqHil+5Xpm7q/8NvB25y18jy
u1CoC02W8+lxGmxCk1rGFUJxZUtMRBC5uQzQuHXUT4rBL2T2ns/BUELl+E9QqNyR
UxUBHRC8sAgAgcAQw9QE0IVj5slO3+VE0rRQFVqM73KwSJS/60UMnlxiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGWtsUn6y4gpPtaCDoeYS/ovhSXMB8GA1UdIwQY
MBaAFM8U2zcwheKMDZt0vnuOiXQLlfn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgt
MGExMzFmNjVjOTY4LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgtMGExMzFmNjVjOTY4
LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSjpp3no
89cn1J2+QGDqrs+oYHBzy619NiaF9J8921Psf0G3WYGvURtvHhg4HVkTKScdUa5t
kzlw+jTVCoVsOtl49zrNNl6s74BCZKbsVpcnKOUw3cPtut6K/nLR+aCBueQtOUaV
XhBAw177lADA6HGamiOf4TJ0eBPYvnMQqb/GwmiGMYF/7ITyOqZGH9ZJwyokrdqI
RU7F76KI+RQ57OhsIhyvUoOUE+Cqn7LPFqlYx9ULzvbJQA50ifOoc/qF8HqfLL8M
tnB27YPzlaI0bKP7iX18ExWHh/YTQrcYlUAUngMbbJiGzriKnNfefK442j2iIpJk
GH0G6Z9C+dw7MQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:20 2025 by rpki-client