Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: VXdRum0oVIsbtnHoeNmR4SaXGJvU7mryz5nMsY49nhY=
Subject key identifier: 08:EC:1B:8B:1D:CE:D0:D9:83:A7:1D:6D:FD:C2:AF:19:3C:3F:BD:19
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 019A4D0690C95731A2FEFD94BBA29314A672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0F09
Signing time: Tue 04 Nov 2025 04:01:07 +0000
Manifest this update: Tue 04 Nov 2025 04:01:07 +0000
Manifest next update: Wed 05 Nov 2025 04:01:07 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: bO5N11sn7SNUod93gMWwuQEypXCAz+ZT2i01aRxzNng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:90:c9:57:31:a2:fe:fd:94:bb:a2:93:14:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Nov 4 04:01:07 2025 GMT
Not After : Nov 5 04:01:07 2025 GMT
Subject: CN=08ec1b8b1dced0d983a71d6dfdc2af193c3fbd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:8d:9a:03:32:e1:d6:fc:9d:a5:9a:f3:70:
a0:61:9e:80:d5:cf:45:1f:32:1f:e9:50:b0:5b:17:
33:b3:e1:5f:cb:90:49:e1:14:c2:67:7f:09:25:28:
f4:43:3e:a3:81:a2:88:50:42:03:db:58:3d:59:65:
26:2f:57:40:8f:5f:de:6f:c2:b0:81:14:28:64:09:
4b:83:50:66:89:e3:65:60:09:30:d3:66:67:1a:b3:
0e:a7:b0:cb:fe:5f:23:ce:92:14:a5:20:1c:b9:00:
b6:54:5d:51:0b:43:68:c9:65:a3:e2:cd:b8:29:1b:
56:a2:b6:6d:b7:5a:06:f2:03:d7:63:08:80:9a:16:
9c:c2:ef:44:12:bc:83:1b:e7:c4:fa:bd:0a:ef:43:
7e:e6:d9:bc:24:8a:da:2f:8d:57:15:3f:b4:7f:ab:
9c:a5:4f:e2:56:e6:f3:dd:6b:34:d1:0d:80:e7:2b:
00:34:aa:2a:36:ef:b2:c3:3b:4e:29:0e:e1:00:d6:
eb:46:25:6d:4d:a8:fb:43:c3:1f:cf:51:a6:73:da:
23:1e:f4:22:33:87:6f:e3:94:76:dc:f4:9b:51:d2:
e3:65:a3:1a:db:99:1f:74:59:a1:db:6e:a9:39:77:
16:0c:c4:b4:41:16:ae:17:50:c8:02:a2:22:76:f0:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:1B:8B:1D:CE:D0:D9:83:A7:1D:6D:FD:C2:AF:19:3C:3F:BD:19
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9d:21:c2:55:2d:0b:a9:93:58:03:e6:78:e4:e6:79:9e:4f:
c5:0b:a7:0d:7d:0b:3e:b7:89:93:0b:83:16:34:f5:c9:df:ae:
3b:54:9f:62:1a:0d:8b:d2:5b:a5:1b:0b:95:ba:c6:b9:a8:db:
1e:6f:02:cf:43:db:c9:75:8d:dd:3b:87:cb:4e:d3:ee:95:c8:
5b:51:5c:89:f5:55:fa:67:e0:39:01:a7:34:86:78:9a:ea:f4:
9c:0e:be:92:64:e1:fd:f5:37:1e:22:39:42:2c:0a:0b:ae:9c:
5a:c5:8f:78:ea:32:6d:78:aa:aa:f7:ff:f3:14:8a:9e:0e:dc:
35:0f:0d:45:12:bc:94:f5:bb:d5:f1:6c:7d:aa:0e:bd:6f:4d:
77:6d:27:4a:ce:bb:c4:de:de:2b:f5:9c:d8:da:8c:f4:d3:ab:
71:77:42:f8:5e:40:a0:ea:98:12:67:e0:48:58:95:3c:c8:84:
b7:cf:c9:7d:1a:a9:fa:3c:78:80:c8:c3:51:5e:9b:48:30:9a:
f9:df:ee:ed:ab:e3:40:61:43:fc:b0:94:8f:0a:70:94:8c:f1:
65:ef:1a:45:67:ce:2f:9f:39:71:54:d3:66:c7:b2:64:bc:b3:
91:94:27:28:e4:fd:75:f2:ed:bb:a4:ff:69:d9:1e:b0:c9:64:
38:e2:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:47 2025 by rpki-client