Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: a9H+eb1KmUSxJqyMOTejJkDZa+krA5XHI39OCFp2Cc8=
Subject key identifier: 37:B1:7E:12:1D:8E:CD:1F:79:92:A6:AE:54:9F:BD:0D:E2:DF:6F:B5
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 019A4C61A2F0E5BC1C4074B728339717409C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 0FEF
Signing time: Tue 04 Nov 2025 01:00:58 +0000
Manifest this update: Tue 04 Nov 2025 01:00:58 +0000
Manifest next update: Wed 05 Nov 2025 01:00:58 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: o6HwKMVkwI2qkR8HDJTpidxcBIQ4qMQsxdAUVkNZ/4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:a2:f0:e5:bc:1c:40:74:b7:28:33:97:17:40:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Nov 4 01:00:58 2025 GMT
Not After : Nov 5 01:00:58 2025 GMT
Subject: CN=37b17e121d8ecd1f7992a6ae549fbd0de2df6fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:f3:17:0b:ce:c9:5d:06:c4:99:6b:ac:c3:
6e:d0:d1:ef:ff:09:6a:6e:a7:b9:9e:13:44:04:67:
47:35:43:58:eb:5d:ae:ba:98:8b:52:82:7c:01:d7:
5c:2e:d3:fe:bb:7e:b5:5b:f4:0f:b2:7a:7a:55:21:
41:d1:00:0f:80:49:e8:63:b0:01:8e:02:c6:73:69:
0d:86:92:21:c4:3a:49:ec:0b:bd:4f:d3:52:fd:90:
81:e9:90:96:21:77:e4:5b:67:88:93:77:a2:ad:44:
54:79:30:46:d3:54:f4:80:ea:8f:b2:1d:f9:af:55:
22:04:31:f1:be:f4:1b:6a:2a:c0:1f:51:61:4b:52:
d6:b1:49:d5:d7:8d:12:27:df:40:db:8a:d9:63:f2:
0d:8b:8f:98:80:55:01:d7:4a:6e:7b:f9:c2:25:76:
ef:a3:59:27:a4:1c:2c:aa:bf:d9:a0:2e:99:04:fb:
e5:0d:26:ba:cf:3e:76:68:16:70:c9:b8:66:ab:6f:
35:1a:87:6b:c9:1a:b6:13:3a:dc:cf:6e:70:e8:53:
d3:f5:9f:3f:e4:57:9e:72:4f:9c:f2:6b:9e:6c:ad:
2b:2b:42:bf:75:dc:5e:be:a3:41:03:cb:0b:91:da:
b5:22:5e:97:da:69:ec:03:03:8f:35:93:0f:b1:3b:
a5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:7E:12:1D:8E:CD:1F:79:92:A6:AE:54:9F:BD:0D:E2:DF:6F:B5
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:66:29:cd:52:8f:65:37:6d:95:7d:7d:0f:e6:0e:fd:28:2b:
83:22:93:70:db:57:a8:f0:eb:0b:29:39:36:e3:87:fa:06:0d:
f3:cb:ee:d9:1e:14:76:cd:84:fd:f3:93:53:59:9f:cc:66:03:
56:db:7a:3d:ec:b0:b2:9e:0e:d9:98:d4:ba:47:3e:95:05:ef:
29:70:27:99:fa:0b:03:4b:9e:51:7a:36:f0:1f:b8:7b:68:78:
8b:a0:b6:3b:d8:de:c2:72:23:bc:7f:ae:3f:36:eb:aa:d2:af:
c9:56:31:6b:2b:49:b8:8a:d6:48:bf:4e:b7:45:27:06:e1:0b:
95:02:d8:28:ac:2d:ab:a5:5b:7c:1b:b0:93:96:ca:6c:ae:e7:
5a:6f:61:ce:f2:e6:66:b8:f3:b9:61:e6:e2:9e:c6:c6:7b:4a:
a8:7b:8d:7a:35:1f:6f:30:f7:84:46:c9:b7:3c:a6:c8:81:75:
6b:ec:f4:59:2d:db:19:6d:84:1c:99:62:11:7e:94:62:62:62:
a4:70:f3:53:75:5a:aa:8f:c9:6d:fc:30:23:8b:5a:fb:4d:35:
91:ab:3b:ee:d2:d5:79:e8:78:5e:8f:4d:6a:81:dd:9f:70:ab:
b0:0c:21:88:fe:48:ed:b6:c9:c0:3c:c1:7b:4c:39:51:ec:4d:
1d:75:13:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYaLw5bwcQHS3KDOXF0CcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjJlYzk5NDU0MmNhN2FjYWFkZDU4NzI3ZTQ2MDZhYjQ0
OTAwNDAwHhcNMjUxMTA0MDEwMDU4WhcNMjUxMTA1MDEwMDU4WjAzMTEwLwYDVQQD
EygzN2IxN2UxMjFkOGVjZDFmNzk5MmE2YWU1NDlmYmQwZGUyZGY2ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYfzFwvOyV0GxJlrrMNu0NHv/wlq
bqe5nhNEBGdHNUNY612uupiLUoJ8AddcLtP+u361W/QPsnp6VSFB0QAPgEnoY7AB
jgLGc2kNhpIhxDpJ7Au9T9NS/ZCB6ZCWIXfkW2eIk3eirURUeTBG01T0gOqPsh35
r1UiBDHxvvQbairAH1FhS1LWsUnV140SJ99A24rZY/INi4+YgFUB10pue/nCJXbv
o1knpBwsqr/ZoC6ZBPvlDSa6zz52aBZwybhmq281GodryRq2Ezrcz25w6FPT9Z8/
5Feeck+c8muebK0rK0K/ddxevqNBA8sLkdq1Il6X2mnsAwOPNZMPsTulxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDexfhIdjs0feZKmrlSfvQ3i32+1MB8GA1UdIwQY
MBaAFM4i7JlFQsp6yq3VhyfkYGq0SQBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMt
Yjc0YTA1NmRjYmUzLzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMtYjc0YTA1NmRjYmUz
LzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGYpzVKP
ZTdtlX19D+YO/SgrgyKTcNtXqPDrCyk5NuOH+gYN88vu2R4Uds2E/fOTU1mfzGYD
Vtt6Peywsp4O2ZjUukc+lQXvKXAnmfoLA0ueUXo28B+4e2h4i6C2O9jewnIjvH+u
PzbrqtKvyVYxaytJuIrWSL9Ot0UnBuELlQLYKKwtq6VbfBuwk5bKbK7nWm9hzvLm
ZrjzuWHm4p7GxntKqHuNejUfbzD3hEbJtzymyIF1a+z0WS3bGW2EHJliEX6UYmJi
pHDzU3Vaqo/JbfwwI4ta+001kas77tLVeeh4Xo9NaoHdn3CrsAwhiP5I7bbJwDzB
e0w5UexNHXUT4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:57 2025 by rpki-client