Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: pAPD+dEnip6onuFSQEYQgLmVPqkaq9z71uz/YoZRbfM=
Subject key identifier: 81:37:9E:6E:E2:30:83:2B:F6:3A:60:0D:18:12:38:B2:C5:65:62:AE
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 019A4EF5C938D91E2B9B25E1674AB30FC4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 139E
Signing time: Tue 04 Nov 2025 13:02:01 +0000
Manifest this update: Tue 04 Nov 2025 13:02:01 +0000
Manifest next update: Wed 05 Nov 2025 13:02:01 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: Mo/pVu/+WfBsN+yds9A2/Loji9Gsym1K8UoHCD5f6Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c9:38:d9:1e:2b:9b:25:e1:67:4a:b3:0f:c4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Nov 4 13:02:01 2025 GMT
Not After : Nov 5 13:02:01 2025 GMT
Subject: CN=81379e6ee230832bf63a600d181238b2c56562ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:a5:bf:b3:7d:d2:e7:29:36:48:e5:24:d7:
81:9c:10:56:12:b3:ae:65:9a:a2:22:e6:d9:ad:28:
97:17:15:d2:18:94:c0:70:63:ce:e5:cb:13:db:af:
ab:9e:b0:65:2f:dd:ad:15:c1:27:42:55:8d:7a:1b:
45:d9:13:2d:dc:84:07:35:ab:08:a3:7e:58:37:0f:
05:5c:12:01:80:92:c2:99:b6:91:73:b2:cb:c7:09:
06:10:22:a1:8a:6d:b0:a9:6e:30:14:3c:2b:6a:b3:
04:4a:04:8d:a2:b7:7a:94:4a:34:99:52:83:b9:0a:
98:8a:b2:d9:16:45:67:20:e1:2d:6e:d0:25:5c:d0:
f4:25:76:72:9d:71:a9:c2:9f:f8:b9:0d:52:c6:4c:
42:54:e3:4a:3e:02:4c:67:73:f1:41:07:9b:70:65:
89:e6:9f:69:73:de:11:6a:a9:17:e1:61:70:1d:3a:
cd:8b:13:ef:12:c0:ee:aa:79:52:b3:eb:5a:27:4e:
2b:95:42:2f:8b:99:26:ed:a3:9a:bc:03:e3:c4:c0:
55:11:8a:f4:ad:de:61:de:65:ee:26:e1:37:d2:ba:
6d:7a:c2:a3:56:c4:db:e0:76:5b:3d:c9:f2:3b:8b:
71:9f:f3:ce:ef:36:46:fd:7e:0f:34:b2:b2:bc:3b:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:9E:6E:E2:30:83:2B:F6:3A:60:0D:18:12:38:B2:C5:65:62:AE
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b6:ae:06:15:7e:97:80:d4:11:ba:f8:6c:e7:8b:c3:6a:44:
fc:ec:ff:90:67:4c:ba:8f:b5:ce:ff:98:87:c7:e1:6e:c4:72:
2f:0d:c9:49:c4:2a:a1:f6:3d:80:b5:f6:7c:37:68:37:d8:53:
21:84:69:66:32:3f:dc:80:f6:5c:b6:04:65:ac:9c:0d:9e:40:
0a:cb:54:ac:b9:91:a8:3c:ce:1a:96:9c:e9:ad:51:c2:96:86:
02:25:c6:78:3b:47:71:78:f2:a0:cf:d6:4c:e4:9b:29:18:ef:
47:5a:a5:0e:99:9f:55:5c:b8:9d:60:12:45:08:50:7d:81:3b:
a5:fd:13:93:3d:00:48:c9:5f:75:dd:fe:a4:93:92:22:45:c6:
65:51:fa:54:3c:58:70:42:7b:0e:fb:75:7b:4a:33:c0:0a:e3:
98:6e:59:8d:b8:99:77:cf:c2:93:2d:cf:5e:c5:a4:64:f2:a2:
fa:4e:47:a5:64:b3:3a:a3:cd:24:c8:db:74:a6:7a:54:09:69:
86:23:72:86:1b:e4:02:86:de:d1:58:fc:99:33:a2:6c:92:c7:
bd:80:a9:29:f3:d3:c8:85:5d:12:27:3d:b7:39:09:ad:40:e3:
93:68:61:d0:34:92:e5:3d:bb:3a:87:13:b8:73:b1:bc:19:e4:
f4:08:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:07 2025 by rpki-client