Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: UTRaZbsrLc4kwM2nMNXvK1cr8DKnAun+KT2ovx0N4Ls=
Subject key identifier: E9:31:83:BD:3D:89:89:49:6F:44:27:DB:FC:6A:05:69:E9:76:BE:3B
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 019A725CC9B899D3E43019B6397C1CA60A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: dDIKDqovDhZ1h6hfi4h1QrHc8m7Ktgs3giiy0r/K0oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c9:b8:99:d3:e4:30:19:b6:39:7c:1c:a6:0a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=e93183bd3d8989496f4427dbfc6a0569e976be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:dd:de:77:63:47:19:1d:19:be:1c:79:74:
cc:7a:cf:bd:80:82:e3:6b:cb:8f:b0:3e:d9:b2:20:
a1:22:a3:a4:b6:fc:f5:ee:94:4c:46:e8:ec:bf:37:
da:b5:c9:f5:ed:84:13:e4:97:0b:d9:e6:50:57:ce:
ac:21:c1:5b:ba:58:b3:c2:2f:41:b1:da:5f:72:05:
a1:8b:23:f4:f1:7c:e0:43:4c:0a:fd:3a:f4:71:c4:
5f:c6:bb:dc:56:ad:aa:6d:ad:9b:7c:5e:36:f2:eb:
c3:8f:e8:5c:39:82:1b:5a:a3:2d:c0:16:a8:c5:23:
e5:89:15:4c:60:af:2f:29:7b:89:1a:69:3d:4e:c2:
7a:d4:36:2a:6a:24:ff:2e:6c:b9:77:d1:1e:e3:82:
f8:ee:99:24:d4:02:e8:b9:98:69:04:27:da:92:1b:
8f:5b:46:92:7b:1e:50:34:5c:4b:c0:48:38:e1:4a:
62:8b:9e:a9:c7:31:e7:c0:88:82:69:48:6c:ea:d6:
9e:d0:70:71:c0:6e:9b:92:57:ea:97:6c:05:2f:46:
d8:a6:d8:8e:33:dd:e6:99:ec:9a:7a:db:7c:81:d5:
b6:cb:06:02:c2:ca:ef:58:c1:9c:b0:fb:52:bb:c0:
67:a6:e8:a3:d1:83:50:6b:8d:2c:29:b0:6b:c6:5f:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:31:83:BD:3D:89:89:49:6F:44:27:DB:FC:6A:05:69:E9:76:BE:3B
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:24:58:f4:a3:ec:5d:cb:2e:37:df:cf:9d:d0:5f:24:7d:b9:
25:50:7e:05:f8:c5:ee:83:fe:0d:2d:a5:8e:49:a3:29:c4:4d:
60:36:f0:58:c6:04:2b:26:6c:15:b1:f7:50:78:45:a6:50:a9:
5a:3f:62:e9:11:3c:7e:32:c9:96:de:d2:bd:59:4b:2b:be:6a:
ee:d6:8b:46:6f:e6:09:33:9b:f5:e5:1a:fe:ad:af:f0:c3:3b:
fb:6c:de:65:0a:22:3f:a7:db:ba:39:2c:3d:eb:e9:e5:cb:06:
40:44:73:1a:5b:05:b1:c9:17:a4:26:07:9d:b6:6d:95:ac:eb:
6a:69:99:f4:c4:01:ea:8b:6e:35:98:8e:39:cf:99:76:fa:8b:
42:4a:f1:34:7d:f8:58:1c:93:e1:e4:91:57:e5:64:7d:d6:61:
15:66:d0:79:34:c5:23:73:f0:34:e4:05:c7:84:e3:b8:a2:e9:
6d:40:f0:d0:80:f9:e0:b0:ff:9f:0e:4c:e8:f5:a1:92:7e:ea:
29:1e:6c:9c:9a:44:52:37:ea:55:0c:9e:79:96:74:e3:43:52:
76:25:51:fb:df:d2:8e:c2:7b:85:6f:8d:2a:5c:16:21:33:70:
6f:dd:2d:48:72:4b:cd:f8:f0:bf:d9:2f:ff:b9:04:30:69:7c:
ff:97:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:29 2025 by rpki-client