Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: 6w/QCTKf3nii4BsdQwN7PHA6WVrSIdsKxyz3GDIzX/M=
Subject key identifier: 94:A2:4F:40:14:1E:A6:F1:D0:9D:E5:08:0D:81:E4:B1:02:7F:DA:65
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 019A71B8F7F8FCF82A63940194B6308C0C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 126E
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: +LAVBjdLPE6kH49UonP0ANWERK8+5IRdo/86BpruooU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:f8:fc:f8:2a:63:94:01:94:b6:30:8c:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=94a24f40141ea6f1d09de5080d81e4b1027fda65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:c9:db:23:3c:79:87:9f:9e:8b:9f:f4:a0:
08:67:73:4f:aa:90:a4:70:7d:80:78:3a:03:9a:fa:
20:5c:d6:85:63:de:7a:53:c9:aa:ae:2f:1b:53:12:
8f:db:40:84:01:b6:ec:a1:0b:2c:dd:39:8a:b9:fa:
57:0a:8f:38:45:74:c3:36:9a:f7:c4:23:c1:f2:b5:
c3:5a:ba:4b:af:b3:77:ad:62:cd:03:86:66:cc:24:
c8:da:61:cd:6a:9b:0c:5c:85:60:59:f0:14:68:33:
2e:fc:d8:b9:e9:9c:1b:8b:53:9f:88:cf:42:3c:d6:
ea:55:41:21:42:df:f0:97:e4:a7:05:16:8a:8a:ce:
d9:9e:06:dd:ce:95:15:26:a1:01:cb:35:a7:a0:5a:
07:2e:18:a4:c3:cb:1e:33:91:82:fb:13:27:94:15:
ff:43:ae:e2:f6:7c:ad:0b:de:79:d8:92:7b:25:72:
73:aa:05:d3:52:44:54:a6:fd:7e:8e:29:b8:b4:0c:
e3:69:77:24:54:20:08:7b:60:65:2a:e9:0c:e1:35:
65:ad:3e:c2:ca:39:58:72:ed:71:1a:10:99:df:5c:
c0:6c:20:2c:1f:22:09:74:2d:94:7c:a0:3b:b9:ad:
56:04:37:8e:b8:67:a5:c0:71:01:ad:5e:bb:c1:26:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:4F:40:14:1E:A6:F1:D0:9D:E5:08:0D:81:E4:B1:02:7F:DA:65
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:25:1f:b0:9b:e4:2e:6d:13:6c:dd:c6:98:9f:85:eb:3f:4f:
6a:22:28:0f:64:b1:5c:75:62:7f:e5:1c:9b:a0:88:7a:45:53:
11:43:9d:9e:ee:21:50:26:36:61:0c:9a:af:c1:21:69:79:da:
e5:60:34:9b:69:bb:98:7f:56:e9:62:4a:02:0f:60:a2:3a:73:
42:1b:e3:a2:3f:8a:b7:19:67:8e:87:10:ed:16:24:96:c0:3b:
df:46:64:70:82:ad:c9:14:31:df:71:e7:6a:e2:a7:9e:12:3a:
ff:ed:80:ae:1e:c3:83:f5:06:dc:a8:db:a9:42:e4:61:8a:9c:
a7:7f:62:da:a7:8c:b9:5a:51:58:17:dc:28:62:cd:b5:92:c7:
cf:74:9a:09:fb:cd:b8:0f:d5:fe:1a:db:7f:b1:60:eb:16:80:
95:f8:97:fd:7f:68:23:af:84:b9:e4:d1:3d:60:c2:b2:60:f5:
49:02:f4:92:b1:21:ec:d1:6a:5c:d9:06:e4:e0:91:0b:09:28:
2e:66:98:1d:b4:5e:ab:a6:ea:26:0c:8b:8c:0a:ff:53:2d:d1:
e4:7a:30:98:a3:24:10:a7:8f:99:2a:e0:2f:d9:d9:8a:ea:0c:
04:53:f3:b3:ca:d5:d3:40:a6:d3:4e:34:c6:b5:8f:3b:d1:76:
a0:a1:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:02 2025 by rpki-client