Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier: BaCN9eERGd+P0ZEPBENH5w2KU22/yl94E7xkOtenmVU=
Subject key identifier: EA:82:FE:94:E1:8A:0A:97:47:0A:B1:60:B9:EB:6E:68:F9:E2:AF:C6
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial: 019A4D73AC716A4580CF131ADD512E649802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number: 0D8D
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: zpZuq67eBTH6K6ISa6lnxyNOsmxePJ0oCS0PDEsCIAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ac:71:6a:45:80:cf:13:1a:dd:51:2e:64:98:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=ea82fe94e18a0a97470ab160b9eb6e68f9e2afc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:5c:50:f2:97:cb:a3:0a:84:9a:c1:4b:93:
e3:3d:c3:44:e4:97:33:2f:3d:f5:36:f4:f2:d4:da:
06:c8:d6:aa:7a:aa:40:c1:a1:5d:bc:5f:53:bc:9f:
e8:82:7f:f8:7d:bc:3c:03:74:98:3e:96:c5:9d:e2:
24:c2:e7:03:70:e9:2c:ec:0d:92:73:77:9c:ae:8f:
c4:69:44:02:b2:97:7a:7e:97:54:eb:45:6c:85:e3:
73:86:a0:f3:8f:c4:ce:17:42:2f:8b:46:a4:05:86:
cb:24:f2:86:51:95:fb:9e:c5:9d:ba:a4:90:2b:c1:
cd:48:a7:d7:50:78:b2:81:d0:23:98:f0:29:c0:d7:
7f:50:77:b3:d2:da:56:8a:86:a9:f3:90:a7:76:26:
ff:2e:d7:f4:76:fa:80:ac:a7:cf:d7:1b:45:27:86:
e3:f9:a0:90:a1:4e:b5:be:a6:ff:df:6e:8d:bc:8e:
14:35:a5:0a:a3:c8:d7:74:84:e0:cc:db:e5:4f:61:
b2:86:6f:a8:74:50:03:35:c3:8d:b8:81:2e:6c:90:
0d:a5:e0:24:68:10:1e:84:52:d1:bb:0f:30:27:b6:
e2:2c:45:06:2d:8b:1c:7b:6f:0a:58:60:6c:f5:9b:
92:15:01:0c:09:19:6a:fc:1c:40:54:41:0e:63:74:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:FE:94:E1:8A:0A:97:47:0A:B1:60:B9:EB:6E:68:F9:E2:AF:C6
X509v3 Authority Key Identifier:
keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:88:d6:dd:35:38:cc:17:3a:88:d7:01:11:8e:56:12:95:43:
07:f7:79:32:c6:c1:17:4c:7e:52:fc:1e:c1:19:b1:e8:f9:1c:
8f:28:a8:27:4e:0f:f0:bf:c8:e3:0b:fe:c3:67:d7:f4:db:d7:
26:78:fa:d5:49:7c:62:1b:81:5e:11:5a:cb:e5:73:c3:58:eb:
c6:ec:e7:7c:04:fc:9b:5e:7d:65:98:75:34:0d:3f:ca:48:07:
5a:c2:04:f6:c2:88:e0:94:bf:c7:e0:55:f4:94:a2:c8:9b:82:
f7:d8:2e:21:24:90:fb:c7:cc:0f:dc:95:69:26:02:88:2e:ed:
86:8e:31:0b:35:2e:da:a6:f6:54:e7:a6:81:37:48:19:c7:94:
2f:b0:30:79:d5:b7:a3:cd:f5:a9:91:a8:17:3d:3b:7e:5c:8e:
29:03:59:d1:3b:98:1b:6d:b1:e4:f7:b1:9e:20:19:66:46:47:
55:13:c0:c3:b6:4e:9e:ec:19:bd:af:04:50:51:2d:04:88:26:
8b:d0:70:5b:29:82:e6:34:a4:5b:30:5b:6c:8a:b7:be:04:b4:
b9:d8:85:32:e4:2a:13:72:ed:fb:38:bc:a8:17:7c:6a:f8:c5:
6a:bc:95:39:82:c4:15:89:d0:10:f1:86:69:34:84:10:0b:1f:
8f:19:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:33 2025 by rpki-client