Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: VvN2YbJ9yFOO1MnnODVPJEJehGoIdVflbmFd3bPGcCw=
Subject key identifier: 27:64:19:10:68:1E:11:7B:1D:76:96:7C:65:F0:FF:8C:8E:8B:E0:D9
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 019A725CD747AF3FA7ABCFDF6B7FEBC34AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 14BD
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: Pe4AZ3NboWWlA14tICSkQqtteVZk1yNx1rsIXEyQiKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d7:47:af:3f:a7:ab:cf:df:6b:7f:eb:c3:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=27641910681e117b1d76967c65f0ff8c8e8be0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:ed:7a:08:8a:e9:7b:f7:81:e3:88:d4:78:
c0:db:3d:d9:dc:92:69:3b:4e:00:36:75:e0:04:fd:
f5:33:2e:bd:47:ec:73:af:ba:9c:64:02:ce:cd:6b:
57:9a:f9:b6:5a:8e:ad:95:7a:ad:c4:69:39:3b:54:
4a:fc:f5:86:28:44:67:a4:af:1e:fe:3d:b5:15:92:
0e:d3:9f:16:fc:88:26:be:58:cb:ba:fb:c9:4d:d5:
dc:bd:8c:94:f1:22:fe:0b:88:fd:ac:67:48:39:e1:
21:7b:27:dd:63:7f:4a:0e:4e:c9:f5:68:a2:4d:53:
ea:da:e2:9a:7e:06:77:9c:a1:22:5f:17:0b:cf:56:
f8:00:7d:d5:61:06:eb:da:35:75:75:7c:43:e3:94:
0c:76:00:4a:77:e2:2b:31:d8:44:e9:2d:4f:7d:de:
4b:fc:06:09:0b:16:f8:ab:48:ba:e8:03:ca:02:04:
d1:2d:50:05:8e:ba:38:e4:8e:0b:bb:9a:f4:51:f2:
b5:e7:a6:e4:e4:27:49:9a:70:50:98:9d:d3:2a:0a:
6d:95:29:99:34:98:c2:e9:05:7e:e9:6e:42:1d:e8:
d1:a5:af:0a:37:9b:7c:97:80:85:42:b6:89:f9:6a:
2b:92:38:8c:c2:ab:c3:a4:98:86:04:9a:82:72:6d:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:19:10:68:1E:11:7B:1D:76:96:7C:65:F0:FF:8C:8E:8B:E0:D9
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:39:24:6e:8f:12:86:c7:50:cb:ad:14:26:00:35:f1:9d:
a4:2a:ab:3e:f7:e0:04:da:28:d3:94:c0:ca:b0:ab:79:1d:17:
3f:42:f9:d7:ba:96:1a:c3:4a:3c:f5:af:3c:7f:a1:2b:c0:cd:
c9:44:0b:31:fd:7e:e6:ea:7b:d7:41:ca:46:5c:71:c5:6a:59:
93:f0:b9:b1:69:de:7d:ba:c3:ba:b0:d1:52:69:ba:de:35:57:
28:72:c9:df:e1:2b:4c:e1:48:70:90:89:3e:b5:57:fd:c7:fc:
a4:63:3d:24:a6:3e:5c:a1:d4:49:11:59:69:5a:81:1b:37:6f:
a9:b6:f9:f8:4b:5d:b2:3e:36:98:24:4a:44:92:dd:5f:0c:56:
49:1f:84:26:93:63:2f:6b:ae:1a:89:15:06:7f:43:0e:fd:30:
82:4b:dd:b0:d5:37:0c:4e:fa:ee:25:e2:99:2b:56:b0:cd:26:
46:ce:af:da:50:d8:5d:5d:33:5d:64:92:31:a0:3c:d2:bc:4e:
4e:2f:df:fc:82:90:7c:f7:1d:fc:ff:70:fe:f2:dc:0d:47:00:
6c:b0:9d:38:f9:ec:47:a3:9c:99:10:a3:ea:65:4b:1a:ff:e3:
7d:b5:b2:38:e3:6b:1a:6c:c0:ba:97:11:56:5b:9e:7b:18:c5:
82:f0:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:01 2025 by rpki-client