Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: 2eTEau/HYGPp+m9z64sH4AbtTVLTFVlqiFgae3FdaJg=
Subject key identifier: E8:26:0B:1C:D8:46:C3:DC:A6:B1:72:17:2C:34:21:DE:74:97:21:2B
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 019A4EF544EC2A55FD66B8FD05A0DCE748F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 13EA
Signing time: Tue 04 Nov 2025 13:01:27 +0000
Manifest this update: Tue 04 Nov 2025 13:01:27 +0000
Manifest next update: Wed 05 Nov 2025 13:01:27 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: EzDm0EWEJ/mnIVjIaYRA3It9rq15MAkOrlK9x2l+XwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:44:ec:2a:55:fd:66:b8:fd:05:a0:dc:e7:48:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Nov 4 13:01:27 2025 GMT
Not After : Nov 5 13:01:27 2025 GMT
Subject: CN=e8260b1cd846c3dca6b172172c3421de7497212b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:73:52:8c:78:b0:27:b4:3a:b2:f3:e2:51:
ef:78:21:d4:bc:b3:b0:2a:77:fa:03:5c:39:cc:c9:
d8:38:12:e2:5f:4b:72:cc:75:a2:52:1e:76:30:f2:
ee:1b:fc:87:0c:2f:5b:c4:6d:01:60:48:64:9a:79:
b8:0d:80:96:15:69:73:c4:6a:f0:99:0c:97:24:19:
a0:d3:67:34:11:df:88:f4:97:04:39:8e:17:92:97:
64:95:6c:eb:d4:78:e4:40:08:8e:9c:69:17:16:ed:
eb:39:c9:95:29:bc:12:0e:fa:8c:3f:d6:17:90:ff:
ff:7e:54:9d:d7:ab:a5:11:82:00:96:a9:f7:3b:35:
db:ea:45:71:bd:f6:f4:b5:ad:d0:6f:14:aa:d6:80:
15:4f:e9:8c:4a:9c:21:93:a9:ae:1c:19:14:90:be:
af:c5:e2:ba:dc:8d:4a:71:a8:f4:46:b2:8b:92:de:
c2:4f:47:e3:c1:76:58:c5:b9:9d:45:4a:ba:7b:0e:
dc:ed:ce:bf:e0:63:b9:69:7a:21:6a:18:de:c7:1f:
fc:32:af:9a:5b:5a:e8:b1:5e:4c:61:91:71:35:dc:
99:75:24:68:73:52:35:50:f8:7c:db:9e:68:82:a2:
08:de:a1:5b:ff:d2:4f:e3:e0:45:74:22:c5:c6:2e:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:0B:1C:D8:46:C3:DC:A6:B1:72:17:2C:34:21:DE:74:97:21:2B
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:30:5d:3d:51:cb:f9:30:ec:2e:41:d5:f3:7c:45:f2:e0:c7:
b8:8b:22:c1:f3:e6:01:5b:84:9b:58:1b:7b:f6:bd:8f:74:2d:
42:fa:fd:6a:bd:65:31:2a:67:0b:1f:21:4b:00:b1:ae:57:17:
82:27:be:c7:3a:e1:06:7c:a0:cb:f4:29:7f:74:7e:f8:7a:99:
e3:23:f9:9f:dd:0a:16:5d:c3:c2:9a:38:a5:8c:0f:92:26:7f:
4d:a0:de:14:34:d6:cb:bb:aa:07:15:cc:99:69:be:77:5d:76:
34:e1:0e:ea:0e:7a:75:94:81:aa:33:87:fd:fc:d4:2e:68:62:
8d:38:cb:02:e4:61:c2:d6:67:89:aa:94:1f:b2:46:66:54:ef:
23:31:22:78:cf:5d:e7:1d:31:76:dd:90:db:87:9c:59:3f:58:
81:03:bd:4a:08:c5:09:50:50:a5:55:42:b7:2b:7b:11:e6:da:
17:3e:5f:e4:f4:f5:82:25:31:75:8c:cf:bc:e3:34:cd:9d:ae:
b0:84:4f:b6:4a:0d:4b:7e:70:24:c8:dc:ce:79:38:1b:a2:2f:
38:b0:6b:28:ae:6a:1f:25:25:9d:4a:64:38:74:97:a4:44:b7:
c9:52:96:ac:44:47:c2:ae:68:d6:90:6b:2b:5f:55:ac:90:7f:
3b:25:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:51 2025 by rpki-client