Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier: XXAZRrrnOKaaHFh1jz0/VlVd4iGm9FPolTrtt2kpJDM=
Subject key identifier: 0E:C1:C4:62:8A:BE:9F:82:5F:9C:67:E4:03:DF:0D:3E:7E:9E:BE:63
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial: 019A4D73F8D1B52231AE7A7B6F0B41A28C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:37 +0000
Manifest this update: Tue 04 Nov 2025 06:00:37 +0000
Manifest next update: Wed 05 Nov 2025 06:00:37 +0000
Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: VYDB8/Oz2fZEqo20g7Z2FvXzfwYGSewI4hx2JdZQ7Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f8:d1:b5:22:31:ae:7a:7b:6f:0b:41:a2:8c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
Validity
Not Before: Nov 4 06:00:37 2025 GMT
Not After : Nov 5 06:00:37 2025 GMT
Subject: CN=0ec1c4628abe9f825f9c67e403df0d3e7e9ebe63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:11:18:90:bf:4e:4a:73:e0:f4:5c:9e:7d:
4a:dc:9a:8a:48:bb:00:80:cf:87:eb:81:3f:87:5b:
93:70:ec:75:21:2d:bc:7f:0f:f4:eb:77:5e:fd:18:
85:c0:a3:05:9f:6f:be:f9:8a:2a:28:7c:09:53:44:
04:a7:99:da:f8:ec:82:7a:06:d0:da:64:fe:10:93:
a0:1d:99:be:6c:b3:7d:2d:0b:37:9f:b1:db:4d:ab:
8d:8b:af:a8:5d:5d:98:a3:87:d5:3f:8e:80:94:80:
cb:6b:e6:16:45:c8:10:ef:c0:28:18:38:2d:f1:04:
eb:95:45:ee:d3:24:d2:5c:21:bd:52:d9:f9:f9:62:
2e:7d:a5:12:ae:a4:14:31:e3:f2:43:61:6e:3a:12:
37:16:f2:9b:97:0b:e8:66:24:d9:d8:27:77:ab:f2:
2a:e4:2a:dc:1f:68:27:10:75:bb:58:ce:7e:98:49:
be:47:a8:ea:83:a9:55:80:68:7c:8f:7b:28:a1:aa:
74:bd:7f:cd:30:e9:c2:3a:5b:b5:16:cf:6c:ac:59:
ca:09:fc:02:d4:f8:10:e8:c0:a6:6b:17:1f:9e:2f:
92:5f:67:40:f3:d7:6b:41:3c:d8:ba:45:ec:08:95:
49:ad:f5:40:28:70:e4:77:ea:58:ca:af:a0:fe:77:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C1:C4:62:8A:BE:9F:82:5F:9C:67:E4:03:DF:0D:3E:7E:9E:BE:63
X509v3 Authority Key Identifier:
keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a7:03:77:bc:be:da:de:85:19:f3:53:61:be:8d:fb:97:63:
9a:88:6b:ad:e3:c4:a4:58:68:94:e9:8a:9e:08:8c:0a:88:c0:
0d:f6:b1:cf:48:b8:0c:4a:20:61:4e:98:0c:c0:77:17:68:fc:
ad:77:46:71:92:16:e6:14:8a:aa:b7:a4:1d:d0:3c:7d:67:88:
fe:a4:1b:87:75:66:b8:4f:5e:78:fa:d0:88:fa:33:37:4c:61:
ac:87:d6:b2:6b:f4:db:57:3a:35:5f:a5:18:d2:7d:87:5f:6e:
20:f5:d2:25:89:3e:3a:0e:28:44:7d:5e:a2:bf:fa:57:d4:61:
19:b2:fa:7e:43:26:a6:e4:4b:f3:ef:7c:51:c1:32:e2:06:23:
99:e8:38:12:f9:57:a6:d4:e5:3d:a3:88:36:2f:d4:cf:26:9c:
22:41:43:67:2a:d5:cc:3d:77:39:26:b1:ca:c8:43:e2:ff:43:
f2:4e:84:0b:a0:69:2e:00:27:49:f3:31:37:a0:1c:b9:75:ce:
f4:d4:d9:cd:c5:80:eb:98:08:c4:cc:36:74:c3:28:36:99:5d:
4c:ca:f2:a1:bb:6d:5f:af:59:5c:86:3d:59:34:d9:1c:ae:be:
01:a1:8d:58:39:03:cd:d1:71:30:00:36:c3:46:b1:96:23:61:
6c:f0:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:46 2025 by rpki-client