Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: qLeerepC/qrA0Jot4GYzRbMVvFRXpAW5lDterlNqK74=
Subject key identifier: 39:10:9D:DE:8E:46:F3:2B:D1:31:99:DF:A4:15:80:F9:35:B6:68:B5
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 019A541A7A9AE87BA6643AA81FBAD27819E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 03E7
Signing time: Wed 05 Nov 2025 13:00:12 +0000
Manifest this update: Wed 05 Nov 2025 13:00:12 +0000
Manifest next update: Thu 06 Nov 2025 13:00:12 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: C0QNamESgkP/3chzCkNzn3NDP94x+1RuUHycuq5Hmkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:7a:9a:e8:7b:a6:64:3a:a8:1f:ba:d2:78:19:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Nov 5 13:00:12 2025 GMT
Not After : Nov 6 13:00:12 2025 GMT
Subject: CN=39109dde8e46f32bd13199dfa41580f935b668b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:7f:c3:9d:38:7c:c5:91:27:6b:e6:d9:a6:
c6:c5:cd:d1:f7:b9:83:f0:80:ee:f2:0b:50:eb:81:
e6:c8:be:58:ab:2e:2f:b7:e1:fe:40:f6:24:40:34:
88:f4:b7:15:0a:4b:65:71:29:f0:dd:12:6f:60:cb:
9a:9d:de:c3:eb:81:73:9d:fd:59:8f:7b:07:73:85:
bb:de:97:17:f3:ce:df:06:b9:39:b4:4d:be:61:8e:
95:19:5f:f6:45:1c:b6:5f:e4:0e:4e:5c:e7:25:82:
24:64:56:5a:ea:c7:d2:54:36:a7:93:c1:0a:82:ea:
66:cb:d2:36:69:68:55:1b:4b:a2:78:48:9a:26:e6:
b1:b0:03:7b:e4:c3:f0:56:ed:29:3f:5f:39:a0:cc:
ab:5f:2f:b6:b0:2b:0e:c3:24:7b:50:ef:1f:70:43:
8d:01:e6:ea:7a:58:0b:5e:35:21:6e:7a:99:10:7f:
2d:6b:0d:87:1a:6d:68:36:85:8d:9e:6c:be:8a:0b:
ff:6f:f6:a8:ac:2b:b3:ff:52:09:49:f2:7f:15:f3:
4c:3a:d8:38:c9:3d:18:c8:30:3f:15:f4:d6:ba:df:
d5:47:cf:66:1e:dd:01:c1:7c:c1:f7:9b:40:bd:cb:
fb:2d:1c:74:98:fa:4b:58:79:3a:21:57:64:b9:94:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:10:9D:DE:8E:46:F3:2B:D1:31:99:DF:A4:15:80:F9:35:B6:68:B5
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2e:57:ce:7d:6b:ec:85:c4:ff:35:bb:57:cf:b4:49:ac:1a:
8c:ba:ee:49:e8:7c:c6:e1:e5:fc:39:a2:bd:72:3b:7e:f0:b5:
eb:ec:94:0d:f8:5a:8a:dc:84:b2:4b:4c:d1:b5:83:ab:3f:78:
fa:dc:07:f5:6f:e8:45:eb:30:c5:18:a2:ca:13:41:2c:44:29:
ab:84:c6:aa:bf:85:06:65:1b:62:34:21:e3:e8:62:97:a0:eb:
8c:c3:3d:a7:90:6a:79:6a:31:95:c6:c0:d3:21:f1:1d:a4:41:
88:7b:c7:2b:b4:12:ed:8b:8e:88:e8:7c:34:50:c1:53:4f:cf:
9d:0e:d6:27:d8:80:7b:4c:bc:ab:9e:ee:ad:4c:a1:e6:c8:ea:
4e:0c:a8:8c:d0:85:1a:67:5e:f9:22:2a:55:ed:b8:1a:72:07:
4f:7a:41:b2:f9:00:14:7f:a8:07:4c:2c:b3:4e:a7:74:dc:0f:
46:4f:99:85:cb:f2:7e:57:3a:fb:88:4c:19:69:f8:f9:ac:ec:
5e:d6:58:5f:f1:62:8e:c3:7f:c7:46:b8:b0:fc:25:b5:0c:99:
e0:d0:1b:42:d3:f1:c5:76:9c:f7:03:7a:cc:49:d1:76:0b:a0:
cc:6a:bf:47:6f:0c:cc:67:31:c4:47:e2:9d:51:c1:0f:42:5c:
6d:e1:cf:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUGnqa6HumZDqoH7rSeBnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDk1NTBjNWFlNjY0MDAyOTE4NmNmYzlkZWE3NGU5MWE3
YjYxZTcwHhcNMjUxMTA1MTMwMDEyWhcNMjUxMTA2MTMwMDEyWjAzMTEwLwYDVQQD
EygzOTEwOWRkZThlNDZmMzJiZDEzMTk5ZGZhNDE1ODBmOTM1YjY2OGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Fh/w504fMWRJ2vm2abGxc3R97mD
8IDu8gtQ64HmyL5Yqy4vt+H+QPYkQDSI9LcVCktlcSnw3RJvYMuand7D64Fznf1Z
j3sHc4W73pcX887fBrk5tE2+YY6VGV/2RRy2X+QOTlznJYIkZFZa6sfSVDank8EK
gupmy9I2aWhVG0uieEiaJuaxsAN75MPwVu0pP185oMyrXy+2sCsOwyR7UO8fcEON
AebqelgLXjUhbnqZEH8taw2HGm1oNoWNnmy+igv/b/aorCuz/1IJSfJ/FfNMOtg4
yT0YyDA/FfTWut/VR89mHt0BwXzB95tAvcv7LRx0mPpLWHk6IVdkuZRAcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkQnd6ORvMr0TGZ36QVgPk1tmi1MB8GA1UdIwQY
MBaAFGVJVQxa5mQAKRhs/J3qdOkae2HnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUt
YTYyZTE4MGNmYmIyLzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUtYTYyZTE4MGNmYmIy
LzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS5Xzn1r
7IXE/zW7V8+0SawajLruSeh8xuHl/DmivXI7fvC16+yUDfhaityEsktM0bWDqz94
+twH9W/oReswxRiiyhNBLEQpq4TGqr+FBmUbYjQh4+hil6DrjMM9p5BqeWoxlcbA
0yHxHaRBiHvHK7QS7YuOiOh8NFDBU0/PnQ7WJ9iAe0y8q57urUyh5sjqTgyojNCF
Gmde+SIqVe24GnIHT3pBsvkAFH+oB0wss06ndNwPRk+Zhcvyflc6+4hMGWn4+azs
XtZYX/FijsN/x0a4sPwltQyZ4NAbQtPxxXac9wN6zEnRdgugzGq/R28MzGcxxEfi
nVHBD0JcbeHPPg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:20 2025 by rpki-client